Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
File:                     2077fbb3-a712-382e-8a9f-fa3151f59015.roa (raw, json)
Hash identifier:          UZBmc0ozO6rGW+sSu0exnQsGNSJK/bMwHflzqK2wyxs=
Subject key identifier:   16:68:F5:80:87:D0:6C:6C:BC:1C:E1:9B:3D:2B:18:C1:AF:9A:A8:5E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CC79CCBF2381834C9B9EC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:68::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:c7:9c:cb:f2:38:18:34:c9:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=9c4a7b2f-1c52-4f8a-979e-051791488511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:e2:d5:d7:59:6a:80:dc:83:c6:a0:98:8c:
                    d1:2d:cc:46:94:3f:de:70:18:57:c9:2f:b6:ad:c6:
                    de:39:37:d4:0b:27:8a:66:2c:6d:35:5c:92:ec:72:
                    c4:ec:2d:10:ad:32:0e:b0:f4:f3:7f:5e:3c:e1:60:
                    0e:75:07:ed:7b:fc:a0:11:ea:a9:71:eb:3c:cb:ea:
                    c1:b1:ec:64:2f:df:0a:e7:93:5d:bb:6b:21:f3:36:
                    4f:80:86:08:2d:ab:78:7f:04:5d:23:b4:d1:d2:4b:
                    42:93:6e:60:d6:63:9e:c5:12:6f:99:f8:04:7c:37:
                    62:0a:4c:96:81:b5:89:7e:90:2b:67:d1:be:d6:cf:
                    22:b0:30:2c:79:cd:0c:7c:41:03:5f:61:a8:e8:b4:
                    57:2f:36:6a:8c:f2:13:08:7e:0f:62:b4:5b:d9:27:
                    4a:23:20:03:19:1f:04:06:6b:d6:b0:bd:a1:16:ed:
                    6d:93:ff:fa:de:91:f4:ad:04:bf:d3:88:d5:ab:63:
                    69:33:b2:69:17:c6:98:dd:f0:e1:94:04:29:a7:65:
                    97:bd:1d:32:d6:d5:99:4d:32:18:a9:31:18:47:4a:
                    d0:a0:e1:f4:bb:64:a1:68:70:27:8b:1c:e2:e5:88:
                    58:09:ca:75:7c:97:33:ad:3f:14:8b:a5:28:62:52:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:F5:80:87:D0:6C:6C:BC:1C:E1:9B:3D:2B:18:C1:AF:9A:A8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:68::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:13:1c:29:94:d1:bc:e9:c5:ba:56:ab:a5:8f:cb:81:99:
         92:27:13:4a:74:73:7f:4e:44:b6:4e:62:d1:ca:61:ff:1c:65:
         92:2c:23:96:eb:8b:11:1f:f4:6d:74:f4:09:89:3b:3a:b0:e4:
         e1:02:9a:c0:4a:73:2c:4a:f1:94:47:43:10:56:31:ae:a0:f0:
         14:b1:f5:be:48:a9:13:60:56:61:63:18:bd:61:11:f8:16:78:
         d9:05:b9:d0:f3:84:b8:4c:9f:8a:89:8f:9f:90:a7:81:e2:43:
         3d:fa:02:93:93:36:7b:25:71:83:cf:1d:ff:73:36:49:23:93:
         ab:d0:68:bc:4d:b3:dc:ed:42:b5:72:e4:bf:a5:db:ae:18:e8:
         33:82:94:de:65:26:6e:15:79:bd:95:2e:58:e4:d7:f3:48:67:
         9d:b4:ef:66:d1:8e:8b:96:77:17:5e:0a:7c:9d:d7:2d:4c:a8:
         bb:dd:dc:e3:4a:0e:f3:a9:09:2d:a7:72:96:02:4d:32:47:d5:
         0c:96:95:35:b9:7e:ab:54:a7:11:18:24:50:ec:82:57:37:4b:
         d5:5b:5e:2a:80:d0:fe:2b:0e:f8:69:c8:a1:01:4c:e9:3f:a5:
         6e:77:07:df:74:bf:96:c3:c0:df:ce:ad:b7:b3:77:a9:c9:a7:
         41:d0:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:15 2026 by rpki-client