Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa
File:                     997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa (raw, json)
Hash identifier:          AFr98HKmPg6cfWdEgtZ0gdfU1U4i0yfTD+dOOP6b1kw=
Subject key identifier:   54:AC:0C:EF:BB:50:CA:D5:4B:12:1D:B0:BD:16:37:AB:7F:28:E4:86
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1C42665B8D182BA2E2FE0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     19527
IP address blocks:        2600:1902:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:c4:26:65:b8:d1:82:ba:2e:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=5b07c951-a603-4470-b73c-d0e5fc7b67ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:b3:2a:69:c9:f4:9c:ae:06:23:13:72:5f:
                    3d:46:05:67:68:13:b4:36:7a:a5:ce:d3:0a:be:21:
                    71:dd:db:ab:42:80:44:39:45:e4:b5:cf:82:4a:bc:
                    44:63:5a:1e:14:46:52:69:51:a5:9c:de:5a:24:ae:
                    a7:dc:ae:11:96:5a:89:a0:87:48:58:4f:9f:d4:ea:
                    50:43:27:d7:9a:e1:ce:64:d6:1c:33:2b:7c:14:b0:
                    f0:aa:89:47:4b:2e:8c:a0:87:fb:77:6e:93:76:e6:
                    32:93:8f:3f:47:f4:5f:0c:3d:d6:79:fe:76:55:0a:
                    10:ab:0b:d1:b5:c5:28:28:fb:d5:f0:36:2a:d9:73:
                    48:67:9a:91:93:8d:66:79:7c:7c:ec:3f:4d:43:55:
                    3a:bf:4d:67:bd:34:0f:24:cc:78:d1:03:0d:65:cc:
                    76:cf:e2:4e:d2:b3:88:5b:da:da:64:3c:50:a2:1d:
                    ba:13:06:b6:af:3d:5d:70:5b:14:8d:00:4f:9e:5d:
                    13:ac:b0:72:47:df:74:b8:97:f1:96:20:92:bd:fe:
                    bc:46:98:e8:ed:89:a7:4a:ce:4b:eb:f6:a1:c1:7a:
                    f9:67:65:61:57:d5:d3:b5:68:26:88:82:e0:65:d3:
                    ba:58:ef:fa:70:a6:86:56:b8:a2:41:68:d5:e6:a1:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:0C:EF:BB:50:CA:D5:4B:12:1D:B0:BD:16:37:AB:7F:28:E4:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/997ada3a-196e-36b3-8fa7-06aa7a9c9731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:d3:91:58:4f:28:4e:e8:37:33:de:c5:b4:14:7c:e1:64:
         74:d4:d7:22:12:44:e3:68:77:78:dc:23:9c:3a:e9:c5:93:20:
         d9:5d:ad:c3:24:cc:2c:f9:b7:2a:72:a4:5a:5e:e9:c3:79:52:
         3a:a9:ae:25:d9:d4:1f:bb:0c:0c:a0:25:df:21:4e:0b:6b:6b:
         c5:1c:73:b1:cb:ed:c7:ed:5c:ec:d2:c4:4f:c2:86:00:a5:72:
         d7:f6:19:98:1d:3c:04:d4:f6:80:d6:ce:98:02:32:e5:9c:31:
         18:bc:e6:56:ba:4f:f8:a8:4a:d2:50:05:2b:11:fd:a5:ab:ca:
         6c:23:37:da:3c:66:45:e9:7a:bc:fd:8c:e8:fd:39:a8:09:ed:
         5f:7d:58:cf:c5:df:d8:a7:b5:06:3e:2c:4b:74:e2:d7:a5:f1:
         da:4d:c8:22:ab:76:9a:39:fe:e4:89:e4:fe:c7:0b:0c:2d:74:
         94:dc:43:4f:33:f6:96:48:9e:28:6c:d0:aa:d8:20:9f:38:d0:
         83:cf:27:a3:8f:c2:20:11:25:63:f6:5a:c3:10:cb:ee:9e:09:
         06:de:d3:6c:47:2f:ae:1e:e0:ff:57:31:3b:15:ee:9f:2c:06:
         a3:d1:73:c4:f0:e1:fc:bb:3c:d3:14:19:fb:ea:c4:7a:77:b6:
         cb:d6:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:31:25 2026 by rpki-client