Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad06be07-0d79-3a9b-a382-a0d6234d916e.roa
File:                     ad06be07-0d79-3a9b-a382-a0d6234d916e.roa (raw, json)
Hash identifier:          pP9LowmLcR0EPwdxcPaRJTlF8L49Z+7qXcyY8Nl2m80=
Subject key identifier:   EE:FB:C3:8A:7D:CC:17:9A:C4:F2:3C:52:60:E3:27:FC:22:76:12:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1C3DE4CC723263492F600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad06be07-0d79-3a9b-a382-a0d6234d916e.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:200::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:c3:de:4c:c7:23:26:34:92:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=45cd6340-c238-462f-a761-4a7cc09a8af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:ca:94:64:af:fa:c0:33:15:b6:b4:b7:a6:
                    2c:ee:df:75:ae:64:54:33:95:1a:7f:0b:c9:d9:df:
                    b9:75:a4:d8:78:02:bf:1e:35:a0:88:62:df:da:02:
                    67:3b:02:22:1f:8a:d6:c8:9c:f1:bc:42:ca:d9:f3:
                    b4:89:92:ac:9a:e9:84:c6:52:ef:d0:50:be:1f:77:
                    a6:3c:20:f2:9c:26:5f:c4:5f:19:83:b6:dd:ff:ed:
                    1f:11:41:bb:83:8c:8d:e9:46:4a:63:01:7d:e4:2b:
                    fc:27:ee:03:18:12:14:9c:73:93:82:a1:4b:60:5f:
                    69:14:d5:fb:1b:aa:f8:fc:d1:2c:d3:58:c0:38:6d:
                    64:a4:b0:76:18:8c:f2:3b:65:3a:7e:16:06:a9:ab:
                    91:63:e9:8a:83:33:3a:9c:50:ed:41:1c:ee:ce:72:
                    d7:a5:8b:d2:2e:1b:30:49:b6:45:74:9e:d2:d2:b4:
                    c2:b8:45:c9:17:e4:fc:e0:3a:b8:72:19:fb:0f:7a:
                    f9:8e:bc:a1:4e:4c:44:f8:f0:da:18:3a:22:5d:75:
                    d5:68:1d:4d:5b:04:6e:fb:cb:94:c7:2e:86:f2:14:
                    80:bc:24:37:e0:4e:2c:59:26:82:89:89:70:58:b5:
                    3d:73:48:0c:86:da:c4:f9:cb:d4:b1:98:24:31:2e:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:C3:8A:7D:CC:17:9A:C4:F2:3C:52:60:E3:27:FC:22:76:12:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad06be07-0d79-3a9b-a382-a0d6234d916e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:200::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:aa:eb:b6:d4:eb:83:fa:a3:b8:e4:b5:37:d4:af:0b:29:
         bb:1d:02:3f:b4:5d:7f:44:6b:1d:95:cb:44:7b:3a:da:b7:19:
         b9:ec:73:97:95:ca:ad:34:34:eb:e8:66:39:d9:14:a3:51:a9:
         50:36:05:92:04:a6:9e:65:dd:cf:c8:dd:14:0b:ea:01:ba:fe:
         83:c5:27:c4:c9:f4:2a:6c:40:ae:9a:3b:92:84:47:30:30:54:
         1c:b8:54:de:1b:3a:f1:de:83:9d:b0:e2:f5:0d:2b:64:ea:13:
         d6:56:d4:d5:7b:4a:ae:fd:02:8e:3e:43:78:e5:4e:d0:f7:83:
         43:26:3e:a2:95:e4:69:8f:41:7a:af:66:35:b4:62:81:46:c7:
         d4:ef:74:05:43:1c:a2:f1:57:4a:c9:04:81:73:85:a3:ca:ca:
         91:56:79:f4:06:b7:d9:63:c0:a1:22:2b:b3:14:11:8e:64:ae:
         76:af:a3:26:6b:b2:b2:e7:70:65:1b:98:05:1b:c2:84:84:d0:
         4a:90:9e:25:72:42:b7:99:40:b4:1a:52:a0:8d:f4:8b:28:a3:
         7e:9e:e9:e5:93:df:8b:50:9d:07:97:97:0b:1f:2c:6c:9c:a9:
         d4:a6:fb:2d:1f:dd:38:6a:62:37:b8:39:c4:e6:75:db:1a:89:
         f3:d3:c8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:12:21 2026 by rpki-client