Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa
File:                     06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa (raw, json)
Hash identifier:          nd8/IyMOYZD6REXEduDJdIM9gBKaFBkpe4MQPYDxBlk=
Subject key identifier:   FE:8D:9C:E8:69:70:AE:8F:94:08:44:58:47:2A:39:F4:40:4B:95:17
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EFCACEA013F8E2991DBE65F80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     132892
IP address blocks:        2606:4700:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ea:01:3f:8e:29:91:db:e6:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=3f95181e-0b29-4f6d-a0d6-049883b38c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:7c:a6:45:ed:b1:22:7e:aa:f0:80:7a:8d:
                    f4:73:3a:2f:d9:aa:2c:b6:c5:40:89:dd:be:51:1b:
                    b2:39:c5:c5:07:33:4f:a9:8b:98:f5:6f:82:4c:6b:
                    fc:45:c5:0f:78:6b:ca:cd:49:0c:bd:8e:0b:6f:32:
                    bb:a9:6b:24:53:2f:2a:b9:46:60:d9:f9:c5:0d:f2:
                    6e:7a:c0:f9:e7:52:71:3b:2e:fb:48:9c:b1:6a:11:
                    19:5a:75:fa:8c:e0:b5:cf:81:e8:83:89:6d:67:69:
                    b8:30:8c:b4:3d:c0:34:48:89:65:59:42:a8:ca:84:
                    89:a9:e1:ef:2d:31:76:45:99:89:02:d3:fa:95:50:
                    27:3c:d2:ca:f6:b8:5e:d8:ca:bd:fe:2d:cc:da:ab:
                    58:32:6a:9a:80:f0:cc:5b:fb:53:1b:1b:aa:2b:83:
                    36:65:26:48:37:a8:34:d6:f5:52:be:0a:bc:38:63:
                    92:17:3f:94:e8:59:d7:6f:29:ed:c5:98:a6:42:1e:
                    21:f8:89:9d:78:1f:f7:73:7c:47:1f:77:ed:02:e9:
                    83:5b:ad:60:ac:5d:b3:01:56:cc:7e:24:ee:8b:4a:
                    de:c0:e3:85:d2:a0:3c:cd:ae:99:65:31:01:18:75:
                    f3:ca:94:d8:21:d9:1e:8a:cb:ea:ea:58:29:a5:c9:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:9C:E8:69:70:AE:8F:94:08:44:58:47:2A:39:F4:40:4B:95:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06a7f297-c95d-3dff-a3d6-9e7649e794ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:1100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:d3:fc:f9:43:d2:5a:32:d0:0d:d6:c3:d2:b8:f2:78:de:
         09:53:e6:79:fa:dd:5b:dc:25:e2:da:23:9f:21:33:c3:76:0d:
         74:f2:87:47:ab:24:35:6d:2d:4c:f6:52:0c:1b:32:ab:53:9d:
         21:26:73:ef:5c:ba:32:be:3d:7b:4d:f2:6d:c1:fd:91:95:2e:
         8e:db:43:85:02:cd:cb:9d:8b:20:78:13:c8:3f:97:d6:1a:14:
         67:c0:0a:e2:30:05:26:0c:b7:e4:6b:fc:b4:e9:12:f7:45:f3:
         8a:0e:91:3a:5b:6f:fc:4d:e6:98:27:0c:f6:e2:28:5d:6a:ec:
         a2:7c:7a:d8:ea:bc:0b:56:2b:58:5e:66:13:11:db:f3:08:39:
         23:98:1c:9d:ef:9d:1e:3b:8b:bb:e3:70:99:00:e5:be:5b:c4:
         68:c1:52:62:0d:3c:95:fa:a8:36:cc:34:2e:47:01:fc:eb:81:
         e3:89:50:8e:ed:bd:fb:88:d1:bb:f6:bb:16:70:71:af:89:1a:
         23:fd:1e:d1:46:cf:d7:53:77:a1:41:96:56:9c:88:fc:45:08:
         91:e7:0f:73:30:a5:28:2e:c2:83:b1:e6:12:43:33:88:8a:cb:
         a0:67:33:95:e4:06:86:99:77:30:83:f4:f1:7f:fd:2b:2f:5f:
         b1:17:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:54:09 2026 by rpki-client