Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afd166c6-071b-3111-8f51-327d0a4c750d.roa
File:                     afd166c6-071b-3111-8f51-327d0a4c750d.roa (raw, json)
Hash identifier:          t6DzV76gA7h/B6i7d4wZkcGbPUqd5Y9dKfJA+9Hnv7M=
Subject key identifier:   5C:38:70:1C:80:50:6C:31:8A:60:BA:21:D4:C7:8A:14:D4:DB:EC:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F4972E2576D1DAD82CD856CA0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afd166c6-071b-3111-8f51-327d0a4c750d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43515
IP address blocks:        2600:1902:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e2:57:6d:1d:ad:82:cd:85:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e02ce1c2-82aa-46ec-9456-014b3e154d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:46:81:3a:25:cd:22:d9:6d:47:ec:17:78:
                    db:53:65:bf:be:11:5f:61:97:91:b3:65:92:57:d1:
                    c4:e0:15:2e:5f:df:3f:12:8f:2e:f3:c8:07:68:ac:
                    fa:7a:51:41:6f:63:af:e5:0e:c6:cc:51:e6:8e:b4:
                    bc:d6:fd:4b:f8:0c:35:8d:28:5d:e5:d6:df:41:5a:
                    9c:dc:03:e1:41:0b:79:ed:7d:5b:ed:8a:b9:3e:8d:
                    fa:3b:d0:17:6c:f2:11:9e:19:e2:19:cb:93:e6:cc:
                    f1:67:29:d0:c0:9a:1c:78:23:09:84:3f:ef:5b:01:
                    50:db:a3:2b:3c:13:7a:4e:8e:fe:49:c0:f9:fc:d0:
                    b4:66:9a:9d:19:9d:71:be:c0:9d:58:a5:b7:16:18:
                    b9:af:4d:0c:44:fb:c1:ef:52:14:25:e7:f8:59:25:
                    1c:ad:e1:7a:2c:fb:3a:e3:e2:d3:31:e8:ad:24:d3:
                    b9:9f:95:5c:f9:c3:4b:b2:20:83:3a:05:34:8a:e5:
                    86:2d:6d:44:dc:3c:43:1c:a4:3d:c3:c6:c8:df:71:
                    25:07:9b:75:c2:fd:89:1c:fe:1d:58:e8:f1:56:7c:
                    dc:da:b5:b5:9f:88:a9:2f:db:62:bc:86:74:bf:2e:
                    ba:65:1a:7e:86:a5:74:13:64:66:ab:29:d4:2a:f9:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:38:70:1C:80:50:6C:31:8A:60:BA:21:D4:C7:8A:14:D4:DB:EC:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afd166c6-071b-3111-8f51-327d0a4c750d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a0:f9:b7:8a:6c:0e:e3:5c:b8:4e:fc:e2:ae:a0:d4:25:6a:
         3b:56:22:f4:9f:c2:36:de:1a:b9:2f:60:1c:97:48:af:76:b8:
         e8:ac:99:51:03:a3:5f:77:e4:e3:d9:d2:bc:41:16:d0:2f:28:
         ca:18:50:3a:74:ad:06:1c:c9:97:33:05:63:da:0a:b7:53:7e:
         d0:da:d0:63:75:22:0e:3f:c5:1b:68:2f:29:57:77:63:73:98:
         42:bf:d8:a6:fa:ab:f9:be:9d:8f:0b:60:36:de:90:0b:d5:53:
         19:53:c6:73:34:19:04:ef:d1:18:31:7f:44:71:17:45:37:a9:
         86:af:8a:ed:30:44:9c:ee:48:9a:47:3c:36:c1:fc:62:43:e1:
         44:01:c5:6e:02:dd:a4:db:34:af:a8:e7:4b:1c:bf:a0:46:12:
         5c:5e:3a:1b:98:2e:bf:e9:14:e8:7f:be:66:cc:61:48:26:7b:
         1b:32:ab:08:2b:de:d1:65:be:8f:e1:a3:37:9b:37:07:34:87:
         8b:37:6a:a4:02:21:75:a5:65:f9:f0:c0:59:1d:c5:f7:77:32:
         cd:24:3b:7c:a6:45:5c:4e:cb:41:26:a4:62:d9:66:f4:20:4c:
         0b:c6:0e:56:85:61:82:78:c9:59:42:6b:35:4b:cc:ee:99:76:
         ee:5a:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:09:31 2026 by rpki-client