Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa
File:                     81d46b5b-d2f2-3815-a978-df7f903ce947.roa (raw, json)
Hash identifier:          S8nPPmuULE1JK+C3BtgZCt8IRSiAi/065hDU4+niwu8=
Subject key identifier:   77:27:91:20:B3:30:88:C7:EA:20:63:2D:21:C0:0E:C3:D4:B5:5B:ED
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584DDA55CF8FB5C3833F2C1D9BC0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     54994
IP address blocks:        2607:b300:fd0c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:cf:8f:b5:c3:83:3f:2c:1d:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=c78fdbbc-3201-47b1-9e75-557cd0ab1b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:b9:6c:db:1c:49:2f:45:f8:1e:df:c5:04:
                    4a:13:d1:25:cf:e9:b9:d1:d1:b0:9b:76:e8:ff:de:
                    dc:27:da:55:f2:fe:5f:77:ef:62:6b:d5:30:c5:dc:
                    c9:4d:e1:30:38:ea:33:69:f8:a0:41:25:fc:10:3a:
                    a2:75:28:e3:e8:92:ab:38:83:97:d6:97:6b:95:8a:
                    ac:60:05:3e:ad:05:29:b8:3a:58:93:fd:c0:27:17:
                    6a:59:9d:a9:12:f9:4d:1f:02:51:86:31:a6:45:c2:
                    4c:6c:23:6e:70:47:b2:ab:41:70:5e:34:47:80:43:
                    02:2a:90:90:92:0f:e4:74:d8:b9:fd:db:f6:4e:7a:
                    b6:49:aa:80:c0:e3:0f:95:9c:4b:68:82:81:3a:e1:
                    67:41:25:c3:53:e7:72:a3:b9:50:15:35:11:8b:f2:
                    a2:28:02:e7:94:b9:9a:57:bc:cd:82:c5:dd:01:32:
                    6e:79:99:2e:1a:9d:b7:04:b9:fd:a7:79:0c:df:a5:
                    61:ab:01:a3:95:a3:4f:f7:f6:7c:f7:47:d0:90:01:
                    8e:eb:7c:06:6a:57:e7:95:3b:18:97:dc:57:e9:ae:
                    0b:18:58:1f:37:8f:d5:7a:23:25:c9:9a:b4:4d:66:
                    4a:2a:1d:a1:41:d2:2b:88:36:26:ff:b8:3e:4f:4c:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:91:20:B3:30:88:C7:EA:20:63:2D:21:C0:0E:C3:D4:B5:5B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/81d46b5b-d2f2-3815-a978-df7f903ce947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd0c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:61:c6:1b:1a:e5:62:83:65:8c:49:7d:53:01:ff:92:bf:de:
         3b:51:e7:0a:b2:67:04:bc:65:3c:3a:73:37:46:05:9f:19:09:
         32:4e:b4:49:22:d6:ac:ce:f1:e7:98:b5:50:f1:79:e5:fb:8c:
         68:f7:1b:56:6b:aa:0e:15:26:13:1e:e3:38:c3:33:e2:37:05:
         ee:7f:c0:6e:54:c9:bc:ff:a4:d4:57:bb:14:f0:b7:78:09:82:
         84:51:b3:56:bc:d3:ef:8b:72:65:64:90:21:bd:ee:0e:45:5f:
         e3:57:62:e3:d4:62:06:e5:d6:6c:e9:f1:fa:5a:59:58:c4:5d:
         17:4a:07:f3:21:21:8b:78:91:f2:be:55:4f:2e:04:95:44:93:
         d5:a7:ca:b1:71:c2:99:33:93:fa:0b:0e:87:16:f2:d1:79:59:
         3a:48:93:31:1a:d9:fc:b7:28:6b:73:d8:1d:db:9e:84:b7:23:
         31:60:e1:97:63:eb:c7:d4:18:5f:ec:0c:41:6a:24:6c:e8:33:
         3d:69:96:9c:a2:8f:70:f5:64:44:91:da:dd:3f:9d:45:a8:09:
         43:30:9b:22:2f:05:fd:5e:5f:1d:08:36:d7:d0:49:bf:28:ae:
         df:eb:73:ce:d8:d8:27:4e:a4:1e:27:2d:bd:73:b8:ba:74:fd:
         c3:36:2f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:29:19 2026 by rpki-client