Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f4fc12d-2561-3901-bac3-08132be1a988.roa
File:                     7f4fc12d-2561-3901-bac3-08132be1a988.roa (raw, json)
Hash identifier:          QNpuaQ9egr2ZlhZEw0YRJKWwbh1XFm80/4jYVBOvmPY=
Subject key identifier:   B8:51:22:5B:78:56:39:31:FC:5B:9E:12:BD:14:CB:E1:36:21:BE:18
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1CB8718EDABF2F2EC1540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f4fc12d-2561-3901-bac3-08132be1a988.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:cb:87:18:ed:ab:f2:f2:ec:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=dca9d357-1183-4960-a621-ef983833ed4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:74:cf:9c:1d:26:e8:c8:45:ae:2a:8f:72:
                    8f:cd:d4:cd:ad:6c:6f:e0:62:9d:a4:e2:45:46:02:
                    29:39:d4:3e:52:ca:b8:98:d3:6c:25:01:5b:ab:b6:
                    d0:b2:74:0c:cd:3c:2e:2a:43:a6:a1:f6:3b:8f:ad:
                    d0:63:a1:d4:c4:e3:0e:d0:3d:7a:00:93:7b:6f:cc:
                    c7:f3:4e:16:28:cc:79:b8:ea:b7:9c:b9:01:d6:32:
                    54:d3:d6:99:d1:58:e4:f2:18:54:21:18:7d:ab:62:
                    f7:5a:fb:e0:fa:2b:89:45:23:c6:27:64:05:b4:4f:
                    e8:51:1a:64:35:77:2d:c4:83:cd:72:33:7e:bf:15:
                    aa:37:26:bb:1c:67:9f:bf:31:ef:6d:ab:cd:f4:9a:
                    00:77:59:77:0c:8f:48:7d:ef:28:b6:00:ea:2f:ac:
                    1e:3e:43:c4:72:3c:28:b6:77:1b:c6:ff:3d:93:3a:
                    56:7c:e3:db:e3:fa:92:cd:1c:33:cd:18:d5:22:73:
                    10:88:5a:ac:0f:7d:8c:de:14:ba:52:4a:e0:97:e0:
                    ae:d6:9e:12:25:13:d8:bd:a0:e7:cd:04:53:0e:bd:
                    32:e4:9e:12:0b:01:cb:7f:d8:6f:e5:dc:e0:35:7b:
                    c1:b4:f2:52:1e:25:90:20:5d:e8:c7:cb:3b:70:c2:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:51:22:5B:78:56:39:31:FC:5B:9E:12:BD:14:CB:E1:36:21:BE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f4fc12d-2561-3901-bac3-08132be1a988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:f4:d4:2f:b9:67:cf:93:20:e5:f9:6f:0e:14:6c:ed:51:
         86:7a:1a:49:cd:3f:a1:0b:89:14:cd:2a:da:fa:9f:90:eb:8b:
         c3:08:58:22:20:b8:15:cd:1d:b1:e5:3f:9a:5b:8b:7b:12:e4:
         94:25:e4:49:f3:a1:b6:a6:79:0a:37:d8:d4:53:b8:78:6e:fc:
         02:65:a7:99:c7:09:7c:bf:3a:06:11:76:e8:ca:24:08:07:5d:
         16:e8:32:49:09:78:9b:47:f2:19:b7:30:be:2e:66:d2:d3:b5:
         4f:5d:a3:98:1e:99:bd:b2:8e:c2:71:50:ea:07:70:32:2f:9e:
         a8:e4:d8:17:e5:74:eb:93:9d:8c:4f:58:0d:6f:68:1d:ae:e3:
         81:eb:2f:2e:47:ca:ad:e0:13:1f:a7:97:81:2f:b9:f0:93:bd:
         ef:d7:b5:d3:d9:ab:89:ca:31:9c:04:c2:db:48:0e:0c:d9:62:
         8d:ef:bd:ad:7d:ae:bd:72:eb:51:c1:bd:56:01:47:33:b1:17:
         73:96:79:40:6a:f1:75:38:f8:af:13:fa:59:d3:ce:ed:ae:b3:
         98:e2:c0:4c:96:1d:57:08:e5:d8:75:23:1f:ef:be:69:13:5a:
         04:2d:c7:61:b3:33:26:3e:4d:63:58:dd:6c:e8:0f:06:b1:60:
         e6:8c:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:33:09 2026 by rpki-client