Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/731e1ab0-ff3a-3f8e-a1f8-408ac99e3409.roa
File:                     731e1ab0-ff3a-3f8e-a1f8-408ac99e3409.roa (raw, json)
Hash identifier:          xNjwVQFwn15AC7L1TO9eC7xllM2VAe6upMHCOvBigSE=
Subject key identifier:   D6:21:E6:D0:A5:4E:9B:70:6D:A2:A9:F3:75:6D:48:5C:03:E6:6C:5F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE42330D55A51809A8030EEC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/731e1ab0-ff3a-3f8e-a1f8-408ac99e3409.roa
Signing time:             Wed 19 Aug 2026 18:03:43 +0000
ROA not before:           Wed 19 Aug 2026 18:03:43 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:30:d5:5a:51:80:9a:80:30:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:43 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9a22138e-7779-49ca-81ab-1f7f38213fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:64:a5:58:74:96:bd:5d:b8:09:ef:ed:6f:
                    6e:91:30:2e:aa:a4:ac:8f:47:ba:4a:d5:90:c4:32:
                    92:56:d5:40:65:eb:e8:f2:83:cd:a5:84:b4:1f:c6:
                    7d:f2:32:90:3a:48:3d:47:b9:2a:27:63:e4:d8:9c:
                    4d:0b:f8:cd:5d:71:d7:80:07:85:4d:9e:cc:49:71:
                    3d:b2:9f:f9:12:99:ab:61:aa:5d:42:7e:75:0f:18:
                    fc:48:70:98:84:a1:3d:fa:7d:05:40:97:29:b4:ed:
                    f9:66:88:db:72:9d:07:09:35:14:9e:11:94:87:d0:
                    a9:4e:e3:de:1e:92:67:61:c0:f6:e1:58:95:dd:03:
                    51:87:2e:db:4c:98:df:46:a1:3d:57:f0:b5:e9:6a:
                    b7:72:88:d9:1f:ea:c4:97:55:ec:2f:60:0d:61:32:
                    0b:8a:0b:2d:85:de:2b:d4:21:70:92:72:c4:16:2a:
                    02:2c:65:ad:fa:78:1d:66:b8:37:d7:2b:a8:2e:7f:
                    d1:b6:97:1d:81:8e:e9:ff:74:9c:33:f1:3e:b4:4f:
                    d1:ed:cd:9a:1c:15:ea:13:aa:fe:f8:4c:7f:0f:1c:
                    c9:30:4c:f8:15:c1:b7:6f:7b:17:48:9c:72:55:18:
                    f2:78:f2:10:7f:1e:d2:c3:5e:88:46:4a:96:fc:5e:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:E6:D0:A5:4E:9B:70:6D:A2:A9:F3:75:6D:48:5C:03:E6:6C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/731e1ab0-ff3a-3f8e-a1f8-408ac99e3409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:2d:23:e2:28:d0:15:a8:dc:85:f1:5e:4f:2d:22:09:41:
         5c:66:1f:7f:49:42:03:7a:37:73:72:db:ef:3c:46:51:47:b3:
         db:3b:ed:97:99:36:7d:56:4f:e5:b7:74:ad:9c:df:d9:e5:1c:
         28:fb:0b:74:69:9a:09:de:ac:65:95:73:62:99:41:56:31:5f:
         5b:39:dd:04:75:ad:80:b3:f9:79:9d:d9:74:88:34:79:a5:61:
         39:2b:fa:fb:f0:f5:1e:6c:41:08:01:63:5a:04:7d:b6:70:75:
         bd:90:98:4f:6c:7c:5e:22:8e:83:6b:a6:fa:33:a7:f8:4f:4c:
         c8:9d:ad:6f:4b:25:5f:00:cb:8b:e7:34:0c:c9:7b:e2:a3:42:
         12:be:46:ef:cd:19:c2:eb:59:2f:c7:4a:f9:6a:88:72:dd:76:
         a9:d5:53:28:81:f6:68:c2:2b:4f:87:a0:fd:b1:a8:11:ea:8f:
         08:9f:36:18:6f:6f:9b:da:81:67:7f:e4:af:b2:b7:58:f7:e2:
         da:30:4f:f1:f3:09:54:6a:e5:92:d7:f2:8a:d4:18:95:a6:fb:
         79:bf:28:41:a9:da:21:e7:0e:ae:da:ed:03:01:12:b7:ad:ce:
         ff:4e:ef:6d:da:62:49:d8:9a:77:53:db:89:06:fb:6c:20:b1:
         14:0f:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:11:45 2026 by rpki-client