Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa
File:                     5a753a69-3aca-3dbe-926d-cd25401f855f.roa (raw, json)
Hash identifier:          uGFe8BiSR1VBX7DGbuEGCaUIL6d+zoCj6Zy/XNT3dvI=
Subject key identifier:   E7:F4:87:5A:E3:D2:AB:B4:E8:57:8E:2E:0E:B7:7D:2B:5A:FB:E1:7B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EF44CBE8FE82922FCD0017C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa
Signing time:             Tue 25 Aug 2026 13:00:12 +0000
ROA not before:           Tue 25 Aug 2026 13:00:12 +0000
ROA not after:            Mon 23 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:4c:be:8f:e8:29:22:fc:d0:01:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 25 13:00:12 2026 GMT
            Not After : Nov 23 14:00:12 2026 GMT
        Subject: CN=16d22918-b358-426e-a011-aaad56561def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9a:a6:9e:54:30:f3:12:47:9b:39:f1:92:bf:
                    d3:5b:d8:f7:97:4a:f3:36:06:70:d3:91:56:cf:ab:
                    87:a9:8a:ed:75:3f:b6:f5:49:d5:d5:87:98:7c:14:
                    b7:9d:28:27:c8:6e:d2:8a:b0:5f:5c:3f:84:cf:f2:
                    f7:6e:d5:b6:f7:b5:53:61:b9:97:a2:91:01:9e:89:
                    b9:94:09:57:be:bf:0c:8f:75:72:ae:2b:be:5a:64:
                    e2:de:66:f2:79:e2:57:b8:d7:8d:95:5d:f3:e3:75:
                    19:17:ee:d3:a0:2b:3c:d6:0f:a0:34:71:28:29:98:
                    e0:3c:56:3d:fc:fe:22:f2:db:17:b5:46:2f:aa:a5:
                    fb:af:5d:aa:04:0e:6d:a8:0e:85:0a:55:b6:7c:ba:
                    9b:3b:73:90:37:d2:63:be:17:59:60:c7:44:af:b1:
                    d2:08:de:a4:72:a3:24:9e:99:cc:93:34:80:59:df:
                    8e:7c:88:7c:d2:b3:1e:f5:25:fe:65:8f:8c:a4:f7:
                    43:ac:ff:a6:08:b4:d6:f3:5b:13:17:0e:74:ac:e7:
                    6b:7f:85:99:52:e8:53:0c:ff:25:ff:81:43:ae:e7:
                    0b:d9:bc:05:f0:e1:6c:04:58:db:b5:97:9b:ce:e1:
                    f9:d5:44:d6:21:b3:c7:44:ab:6e:bc:4a:e6:8f:9d:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:87:5A:E3:D2:AB:B4:E8:57:8E:2E:0E:B7:7D:2B:5A:FB:E1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5a753a69-3aca-3dbe-926d-cd25401f855f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:60:74:73:7c:ac:5a:bc:c2:61:52:f2:5b:4b:06:83:c1:
         a6:ff:8b:3c:8f:32:ba:fe:81:68:2b:cd:0b:18:18:f1:b3:20:
         cd:c1:94:d6:9b:ed:42:d1:89:a2:13:86:f3:86:cb:ff:4c:f2:
         8e:83:ff:46:4e:8d:07:63:47:16:c6:26:94:7a:6f:5a:98:d4:
         64:e5:c4:72:5f:44:82:9a:36:2f:20:be:80:57:24:85:8a:b1:
         0d:7c:24:b8:e3:00:ce:90:57:43:02:9c:7c:44:46:85:07:af:
         e9:2e:a6:a7:11:61:ae:4c:c1:f7:d3:6a:b0:29:5c:4f:b7:50:
         38:20:a0:54:e9:02:c0:7e:93:64:c8:df:90:81:24:d4:24:66:
         5c:9f:77:fb:0b:0a:76:78:26:96:ee:94:f8:78:bb:f1:42:4f:
         be:3e:58:49:b1:15:5e:57:f8:8f:e5:25:a8:0c:0b:2e:c8:40:
         51:ab:68:c8:4d:1f:d8:50:87:d3:97:43:df:99:d1:5e:72:9f:
         4e:e6:4f:73:2d:45:0f:49:e5:19:dc:4d:1d:ec:39:26:45:fa:
         87:a4:cf:0f:6b:46:1f:97:b2:1a:68:78:c0:aa:fb:ba:d5:fa:
         da:bc:99:d7:6c:06:ae:8f:c4:f7:1b:da:8d:07:ca:cb:9f:5b:
         fd:88:d3:67
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE70TL6P6Cki/NABfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTZkMjI5MTgtYjM1OC00MjZlLWEwMTEtYWFhZDU2NTYxZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pqmnlQw8xJHmznxkr/TW9j3l0rzNgZw05FW
z6uHqYrtdT+29UnV1YeYfBS3nSgnyG7SirBfXD+Ez/L3btW297VTYbmXopEBnom5
lAlXvr8Mj3Vyriu+WmTi3mbyeeJXuNeNlV3z43UZF+7ToCs81g+gNHEoKZjgPFY9
/P4i8tsXtUYvqqX7r12qBA5tqA6FClW2fLqbO3OQN9JjvhdZYMdEr7HSCN6kcqMk
npnMkzSAWd+OfIh80rMe9SX+ZY+MpPdDrP+mCLTW81sTFw50rOdrf4WZUuhTDP8l
/4FDrucL2bwF8OFsBFjbtZebzuH51UTWIbPHRKtuvErmj50i2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOf0h1rj0qu06FeOLg63fSta++F7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWE3NTNhNjktM2FjYS0z
ZGJlLTkyNmQtY2QyNTQwMWY4NTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAAAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABrWYHRzfKxavMJhUvJbSwaDwab/izyPMrr+gWgrzQsYGPGzIM3B
lNab7ULRiaIThvOGy/9M8o6D/0ZOjQdjRxbGJpR6b1qY1GTlxHJfRIKaNi8gvoBX
JIWKsQ18JLjjAM6QV0MCnHxERoUHr+kupqcRYa5MwffTarApXE+3UDggoFTpAsB+
k2TI35CBJNQkZlyfd/sLCnZ4JpbulPh4u/FCT74+WEmxFV5X+I/lJagMCy7IQFGr
aMhNH9hQh9OXQ9+Z0V5yn07mT3MtRQ9J5RncTR3sOSZF+oekzw9rRh+XshpoeMCq
+7rV+tq8mddsBq6PxPcb2o0HysufW/2I02c=
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:28 2026 by rpki-client