Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6802f4e0-1f22-37c0-8c28-f14d0bea8103.roa
File:                     6802f4e0-1f22-37c0-8c28-f14d0bea8103.roa (raw, json)
Hash identifier:          LkQYZmQ3JLGrN7pq05ybIYCLUz1OwNnV8yCjOBfcUk4=
Subject key identifier:   69:89:88:E2:DC:62:1B:25:E4:41:FE:37:10:A2:4C:55:CA:CD:6E:48
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1E8A583910A00C02C5F20
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6802f4e0-1f22-37c0-8c28-f14d0bea8103.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e8:a5:83:91:0a:00:c0:2c:5f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=571ad0e9-b92d-4cff-a85a-34dfee8de49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:05:3d:db:d8:42:88:94:a4:0f:b2:0d:d2:13:
                    91:0f:6c:52:e3:5f:3c:59:23:50:6d:3c:e7:8e:9f:
                    50:4f:29:3a:37:17:26:e2:3e:96:82:7f:f8:2b:5c:
                    f6:f2:17:d4:92:e2:86:80:9a:4e:2e:58:c7:e3:24:
                    75:57:71:2d:bb:79:94:7f:99:32:5c:9b:ba:bf:56:
                    f7:0b:86:32:65:65:89:22:18:11:26:f1:f0:04:50:
                    34:15:0e:a8:cb:1c:30:b8:35:b6:55:ae:d1:2c:41:
                    40:51:21:49:78:54:cf:dd:dc:01:77:bc:30:62:d3:
                    9b:83:3a:44:82:65:ec:0b:01:98:fe:f0:31:2c:a3:
                    e8:27:3d:35:a0:77:e3:f7:b4:dc:15:23:81:fd:f4:
                    ab:e6:d2:a8:a6:b5:3b:a9:6a:2d:b2:f0:f7:e7:c6:
                    c8:a8:63:78:22:96:02:97:d8:0e:80:26:51:1f:a9:
                    48:52:ad:02:1c:71:3a:3c:45:e6:62:1c:12:b5:fc:
                    51:d1:76:90:a6:39:b6:4b:f3:63:71:66:89:b5:e3:
                    56:f7:07:b6:bd:66:13:d4:ec:99:cd:bf:6e:df:15:
                    86:a7:1f:ea:be:1f:f0:1b:15:d9:76:86:9a:b5:16:
                    b8:79:bb:ba:f5:68:cb:c7:d0:2c:4b:fb:41:87:05:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:89:88:E2:DC:62:1B:25:E4:41:FE:37:10:A2:4C:55:CA:CD:6E:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6802f4e0-1f22-37c0-8c28-f14d0bea8103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:d0:14:8b:0f:f6:4e:7d:6e:d1:bf:43:da:dd:7c:c4:72:
         aa:81:d2:a5:e2:82:1e:93:43:1f:76:51:c7:87:01:64:65:ab:
         73:f9:bb:64:57:19:42:ad:3c:7e:bb:ea:5b:27:1d:8f:6e:72:
         93:0e:b9:a3:8e:be:9d:cd:87:84:b9:45:1d:95:bd:81:91:06:
         26:8e:81:23:22:23:bc:8b:b6:34:a9:2d:a1:db:bb:c0:88:95:
         60:f7:e5:76:63:3a:35:55:49:83:15:12:a3:44:12:db:6f:f1:
         60:52:2a:7f:e6:1f:7d:33:d9:14:34:b3:e2:d2:e4:09:b4:f3:
         26:05:b0:6e:78:3e:ab:b1:c8:97:d5:33:8e:6d:ea:80:ec:ec:
         10:20:c0:99:f3:2f:d0:e2:70:ed:fd:e0:a5:f0:c6:2b:31:2e:
         f3:4b:77:2c:79:ab:86:76:4f:39:45:02:a0:44:ca:05:66:38:
         eb:94:6a:32:06:8c:c1:58:f9:2e:b5:91:d2:32:4d:d1:39:2f:
         7b:4e:9f:29:80:ef:e5:ed:79:2c:77:30:ab:fa:e3:04:a5:d6:
         75:86:60:ec:27:2a:ec:3d:07:9d:7f:3f:b6:37:6b:01:8e:5e:
         4d:f7:7e:6d:bf:f5:2c:a0:6d:f4:bc:4c:ec:56:ac:cf:0b:95:
         0c:f0:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:46:50 2026 by rpki-client