Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa
File:                     4e8a663d-7931-3423-bf56-b1d511487fd0.roa (raw, json)
Hash identifier:          m9SEjQWNwho6MLMmwFuBcVahagmGQNTYIzqvuhnvQk0=
Subject key identifier:   D3:A8:03:F5:44:84:D5:9B:A0:11:23:D7:2C:B5:82:58:37:FE:87:AD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EEA87678B11A838D3735B2F00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:4404::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:67:8b:11:a8:38:d3:73:5b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=e6b80a2e-1b97-4c23-9c1e-dac291fd8ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:9f:9c:20:02:79:0f:8c:8d:6c:be:e5:46:
                    71:18:49:74:2a:a7:81:f0:7f:70:9f:5e:64:05:a6:
                    41:be:97:01:b1:de:65:fe:a5:43:1f:54:fc:b4:b3:
                    9e:ef:98:63:5b:f7:b3:4d:41:30:cd:a2:2f:b6:e6:
                    db:db:2a:0e:b9:63:12:18:70:e6:aa:ca:66:df:54:
                    f7:e5:23:2e:36:52:28:25:a0:55:bc:ee:fa:64:b9:
                    29:7c:3a:63:c3:4c:6c:df:be:ee:39:d1:54:89:ac:
                    26:23:8e:2d:85:0e:79:f5:36:b0:32:96:7a:c5:d7:
                    e9:1f:04:9c:88:c2:14:3b:38:e5:25:d0:10:7d:06:
                    11:68:0a:a8:fe:05:d1:7a:c2:26:cc:6d:df:23:46:
                    bb:38:d9:4c:38:d1:a5:34:b6:e8:5b:81:43:fd:ac:
                    13:d9:d2:d4:38:10:41:10:16:80:05:e6:33:40:f5:
                    fc:65:1b:e0:6c:cd:94:de:a9:6d:54:ac:76:9e:e6:
                    ae:4a:ea:b5:c2:47:f6:3d:37:4c:98:7e:59:77:69:
                    ae:c0:19:19:f8:f5:df:d3:ac:07:41:ed:9e:dd:d5:
                    4b:8e:c9:3f:42:70:fa:5d:3e:70:ce:4e:98:52:34:
                    e6:3f:a9:dc:39:66:03:46:e3:cc:44:17:a8:d4:7a:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A8:03:F5:44:84:D5:9B:A0:11:23:D7:2C:B5:82:58:37:FE:87:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e8a663d-7931-3423-bf56-b1d511487fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4404::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b0:1c:17:d1:95:bc:82:97:a0:fc:79:d1:f3:6a:27:fd:e3:
         79:60:6d:5a:88:0a:ea:45:5e:17:7e:3f:38:16:94:5d:9d:c1:
         b2:02:1d:82:99:f6:09:1b:9b:89:81:1e:b8:41:be:51:24:80:
         47:3d:45:3e:99:0d:59:80:bd:68:c7:26:eb:51:93:65:95:20:
         d7:ec:3f:df:c6:2e:b2:16:a1:d6:33:f5:6d:e6:1b:68:76:df:
         00:ec:96:54:80:c6:d5:79:1f:2a:c2:3a:e9:12:c1:e1:ba:8e:
         ac:67:54:40:b6:90:68:26:61:58:89:d9:13:13:a4:c9:5d:1a:
         0b:a7:43:1b:e6:f2:55:53:b3:c5:cc:e3:e2:ed:ac:65:c3:d4:
         7a:12:d1:4b:c0:cc:28:66:ba:59:ee:f7:17:b2:6a:44:07:cb:
         93:7f:c4:09:a6:80:05:ba:53:f9:f6:8d:3d:16:a6:17:21:0f:
         62:9b:c7:c2:8f:b0:ab:27:37:c9:6a:e9:c1:4b:2d:68:91:fb:
         20:d9:bd:35:2f:22:be:73:5b:a1:57:0d:9c:09:ab:e1:56:f5:
         3f:51:0a:91:26:ed:5f:46:bd:17:2e:6d:69:c2:e0:1c:2a:14:
         ca:a0:75:cc:02:4b:73:2c:a4:70:5c:33:3a:c9:ba:df:11:86:
         e1:b5:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:12:16 2026 by rpki-client