Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47cd00fc-be22-337a-b291-f72b2978ccd5.roa
File:                     47cd00fc-be22-337a-b291-f72b2978ccd5.roa (raw, json)
Hash identifier:          a3kevp4mmupE9xzDURycMLSIX/e31030A0Jy3rEvrgc=
Subject key identifier:   E5:AE:E2:CF:08:D9:67:25:B4:AE:A4:21:D3:DF:79:72:CD:6D:89:27
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE423238168A82E1883B7AF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47cd00fc-be22-337a-b291-f72b2978ccd5.roa
Signing time:             Wed 19 Aug 2026 18:03:37 +0000
ROA not before:           Wed 19 Aug 2026 18:03:37 +0000
ROA not after:            Sat 31 Jul 2027 04:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:23:81:68:a8:2e:18:83:b7:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:37 2026 GMT
            Not After : Jul 31 04:00:00 2027 GMT
        Subject: CN=1342f279-c09b-4f2a-a97d-30149a2ba9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:66:dd:e7:9a:05:b4:02:a5:e8:c1:5f:fb:
                    5c:89:f3:cb:7a:0a:24:75:5c:ef:d0:9e:c5:37:a0:
                    df:e2:a4:19:ed:7c:6b:42:d8:c4:e5:4d:ea:7d:2e:
                    62:a3:0a:75:ca:7c:b4:a6:b5:69:c0:6f:e7:95:5a:
                    bc:a3:9b:4b:8b:9c:6d:5a:8d:04:44:f8:83:4e:0c:
                    dd:14:c4:54:50:62:b6:9e:a0:eb:36:91:9b:b7:89:
                    9b:8f:00:dc:38:ec:e4:4c:90:d0:e3:7c:4e:59:30:
                    c2:2f:be:3a:79:f0:97:48:d8:5c:cf:64:eb:3f:2b:
                    cc:67:ad:59:20:b1:be:be:cd:53:b1:5e:99:26:76:
                    12:1a:3e:e3:5a:9a:bd:05:dc:62:a5:dd:f8:33:3a:
                    b2:f2:53:50:3b:d0:85:90:66:63:37:40:07:88:10:
                    a6:38:e4:70:7e:35:c0:f1:dc:a0:70:f2:3d:bd:e9:
                    d4:0d:8a:7f:5d:3a:94:a5:07:16:e9:13:d1:b3:4b:
                    50:6a:39:05:4a:40:82:f2:41:93:c9:b6:d7:03:77:
                    0f:51:2f:8c:07:f9:be:5f:f2:be:ee:59:d7:47:12:
                    fe:a6:1e:ab:3b:e6:75:9d:77:a8:18:59:9f:83:c9:
                    66:d1:75:e7:c8:26:dd:fc:b9:87:e6:4c:db:9c:61:
                    64:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:E2:CF:08:D9:67:25:B4:AE:A4:21:D3:DF:79:72:CD:6D:89:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/47cd00fc-be22-337a-b291-f72b2978ccd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:9c:98:ac:28:95:75:ff:f2:90:e6:a9:15:6b:1b:09:34:
         30:24:20:f4:be:e0:76:d0:d7:93:bf:f5:65:eb:db:9a:71:3a:
         a2:a7:32:e9:8f:18:76:b3:94:9f:31:d3:0e:d6:99:49:2a:e8:
         23:fa:cd:34:b2:41:b4:3f:38:a8:3d:d6:70:6b:78:d6:47:aa:
         8d:ee:00:60:83:e3:1c:2a:98:93:23:85:52:fb:68:81:25:b9:
         c5:de:fd:63:e5:d4:b7:53:9b:94:8a:53:2b:8d:4d:f7:fb:37:
         17:37:b6:9d:44:35:e1:4d:8c:1d:8d:3d:60:6b:75:09:39:58:
         5c:fa:54:9f:2b:b0:31:c5:ef:5a:0a:3c:11:c8:ec:3d:a9:b4:
         66:8b:eb:f7:cd:02:b1:b4:e4:43:9f:f8:85:5a:90:a3:9f:0a:
         a5:42:f5:17:f5:7a:6f:b8:39:d1:fa:10:63:b0:49:e8:be:cc:
         78:68:c9:c9:82:98:64:63:6c:c1:8e:4f:44:68:aa:d2:ac:1e:
         a8:0f:3e:ff:15:6d:0a:4c:81:36:62:e5:9d:3c:10:ea:64:86:
         65:be:34:c0:d7:51:5e:23:d0:ff:66:94:ad:9b:b3:a1:41:05:
         89:c8:7d:3a:66:a6:37:ef:25:0a:6c:23:e7:04:71:ea:6d:33:
         50:a9:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:17:39 2026 by rpki-client