Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc25f0e-7e50-3b00-8dc7-1e03f0952183.roa
File:                     5fc25f0e-7e50-3b00-8dc7-1e03f0952183.roa (raw, json)
Hash identifier:          NQMACG/8AZ9iZ+fZCuF+yoU9sOBVeJldKCjUiEKz/aM=
Subject key identifier:   3D:9D:F0:51:BE:D2:DE:2F:13:98:4D:4E:88:F9:D7:B9:BD:77:6F:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EFCACD8B104014E21271E5E40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc25f0e-7e50-3b00-8dc7-1e03f0952183.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:300b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d8:b1:04:01:4e:21:27:1e:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=5128dc9c-a8d1-4d43-aa0e-d6edbfbd64e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:a3:e4:dc:61:e9:a4:6a:bc:c4:79:fe:44:
                    e0:e3:7f:32:2c:fb:6c:33:f1:3c:ce:50:72:f5:77:
                    a9:c6:db:aa:13:37:3f:79:d3:c9:1e:76:ba:83:2b:
                    9b:35:05:ba:8d:e3:b7:58:5e:75:11:18:5d:d4:3e:
                    e2:7b:b6:3b:ef:58:91:59:8a:29:ca:85:48:a9:a0:
                    85:49:e9:dc:e7:bd:31:9c:bb:3e:0d:24:ae:0a:8c:
                    ee:9a:5e:c0:09:50:2d:77:92:d8:83:a9:04:f5:99:
                    fe:7d:4f:10:4a:5d:52:2f:02:30:ac:36:7b:5d:49:
                    9e:e3:90:1f:6c:52:87:94:c6:2b:b3:60:9b:8f:bb:
                    6a:62:8d:be:01:e2:30:ef:32:65:32:95:47:e2:be:
                    16:88:b1:48:6d:59:4d:87:f2:ae:16:35:6b:39:83:
                    c3:38:8f:de:ff:a3:13:53:2a:b4:05:7d:9a:e5:a5:
                    3b:4b:6f:52:55:d1:7f:c4:2e:12:a3:6f:b9:91:b1:
                    1a:b3:52:22:ec:75:94:56:85:f2:ce:32:a4:64:c4:
                    1e:2c:f1:c2:af:7e:bb:16:cd:0b:4b:72:1a:7e:92:
                    73:28:33:92:c0:4d:7b:29:21:c8:b7:79:a9:88:13:
                    7e:88:65:2b:65:b6:06:a8:ba:0d:90:ad:52:bb:f6:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9D:F0:51:BE:D2:DE:2F:13:98:4D:4E:88:F9:D7:B9:BD:77:6F:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5fc25f0e-7e50-3b00-8dc7-1e03f0952183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:300b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:92:9c:75:c8:a7:8d:31:0f:ac:a4:dd:93:4f:3c:0d:22:
         72:00:12:8d:f8:86:8e:9c:e4:8d:ba:1b:94:eb:2b:cc:a1:02:
         9d:af:de:6a:39:b4:c1:42:4a:c3:55:b5:7f:1e:a4:0c:db:4c:
         72:ec:87:77:a3:47:23:39:f6:01:28:67:f8:08:68:24:3d:17:
         94:00:b3:61:f6:75:61:47:62:21:59:36:ca:df:44:8b:66:4c:
         1b:f3:d3:40:ad:a6:4b:6f:4d:d8:e1:48:1b:4f:6d:50:ad:61:
         fe:3d:bd:60:d2:37:60:b0:30:c8:b0:2c:42:73:0f:d3:68:1a:
         db:f9:be:63:68:7d:87:9f:16:fe:2a:b3:cf:a7:dc:25:a3:12:
         c2:86:52:73:9a:7c:70:07:4b:9a:31:d8:1b:fd:eb:71:36:15:
         b9:20:d8:e0:2e:09:5b:19:df:81:ca:0b:df:a4:a0:ae:7c:8b:
         f1:90:0b:a0:73:f6:56:a7:c3:10:69:7f:bc:b9:7f:cc:49:17:
         d1:d8:05:6f:5c:6a:f2:10:df:2e:84:bd:ad:13:cc:49:4c:98:
         97:ec:41:5c:fa:da:89:85:a6:f5:1e:9d:9f:c2:31:73:fc:b3:
         d4:db:ee:53:0a:a5:c6:26:44:f4:0e:ad:ec:3c:9b:c5:07:0c:
         1a:01:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:34 2026 by rpki-client