Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d90697e7-9a4b-3835-9394-8bfadcda4498.roa
File:                     d90697e7-9a4b-3835-9394-8bfadcda4498.roa (raw, json)
Hash identifier:          Mh/tuyJ887qUvQ4GaVU3OhHcP5u6XJwiMR4o5Q8QVMc=
Subject key identifier:   DD:AD:F0:32:E4:E8:91:F2:F9:26:80:39:68:52:26:F8:ED:01:22:13
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D24E106D72A796223EE4E6648
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d90697e7-9a4b-3835-9394-8bfadcda4498.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396982
IP address blocks:        2600:1901:8120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:06:d7:2a:79:62:23:ee:4e:66:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=cd971902-9ba6-4a8b-8f7e-ddaf35700737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:6f:f8:ee:33:c2:5a:0d:2b:07:da:57:73:
                    be:7b:84:ae:4b:e1:86:f2:10:51:24:87:f9:d7:f3:
                    a4:07:ed:07:84:7d:4d:30:82:c1:ce:bd:4a:d0:92:
                    fc:9d:d6:da:8e:6c:24:fb:df:a8:76:f5:aa:05:31:
                    a3:77:e0:62:7c:0f:df:98:72:23:58:b1:db:5b:87:
                    1f:08:d2:11:73:87:83:7a:e2:c9:ef:92:84:2f:12:
                    ff:01:ab:0b:c3:c8:79:f6:4a:b9:0c:3a:ad:9b:94:
                    e4:fd:1d:55:f1:75:19:a0:e1:1e:09:f0:ac:bc:8d:
                    0c:d3:ba:74:7e:f1:96:b3:09:0a:45:68:0b:02:45:
                    0d:61:4f:c5:91:6b:92:84:19:5e:c1:53:ce:e3:97:
                    33:a4:d5:32:47:bf:06:a5:14:02:4a:2d:cc:7a:b1:
                    6a:d9:24:86:3a:3f:5a:d2:1d:a2:f9:f9:74:84:a6:
                    e6:da:3f:f8:d4:93:19:be:4f:56:20:01:99:ee:04:
                    bc:86:d2:a5:89:f0:1b:5d:3c:5f:93:d2:44:25:f1:
                    32:fe:a8:3b:11:11:d6:7d:76:81:dd:e5:9a:e8:b2:
                    db:ec:03:33:4c:77:75:0a:e6:82:62:79:eb:9c:c0:
                    cc:4c:6b:12:6c:1c:99:73:cb:ae:e9:d5:06:82:12:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:F0:32:E4:E8:91:F2:F9:26:80:39:68:52:26:F8:ED:01:22:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d90697e7-9a4b-3835-9394-8bfadcda4498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:8120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:b5:cd:ee:19:99:4f:9a:cc:c6:7b:5d:8c:5a:33:11:9e:51:
         5a:b4:50:ee:6c:0b:04:ff:ce:23:b3:d4:c6:b8:9e:64:63:aa:
         65:d4:35:a7:00:7e:0c:ce:ce:a6:4e:43:04:4e:57:1b:44:9b:
         ee:88:c4:87:5f:52:83:0e:5d:7d:2a:9a:d3:e4:47:28:8f:46:
         86:55:d0:39:b2:46:1c:07:cd:4a:f6:3e:6d:1e:7a:93:2b:5a:
         97:15:11:2b:0b:dc:9a:fe:92:50:51:56:22:94:e7:7c:e2:2c:
         73:94:e0:ff:24:24:0a:62:95:31:03:90:0b:ea:63:e4:99:84:
         41:1b:99:21:1e:2d:0f:25:0d:59:cd:64:eb:bf:e2:37:07:61:
         5e:cf:c6:a3:f0:08:e8:25:16:8e:d7:da:42:86:b1:e6:f3:89:
         5b:c0:2f:c6:4c:aa:90:f6:25:d7:bd:67:8a:a7:3d:76:fc:77:
         97:92:30:31:a2:b2:1c:8c:5e:c0:22:9a:c5:4c:f4:2d:b3:15:
         86:03:60:a3:fd:9c:85:ff:71:76:37:29:71:29:a8:aa:18:b7:
         98:82:06:a4:04:c3:0c:76:99:58:07:2e:08:67:ad:f5:f5:8a:
         6e:8c:96:46:04:7e:f5:35:45:cc:d2:6f:76:49:4e:45:d2:01:
         3b:15:cf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:49:46 2026 by rpki-client