Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa
File:                     8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa (raw, json)
Hash identifier:          3h4PBZyE9tWnSL5Qp4O7HzZhf46ntDqljs7V65A06FQ=
Subject key identifier:   4D:69:62:F9:73:73:07:70:97:12:8B:74:45:5A:BF:B3:6D:C2:E2:04
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5A4A0E9BD6AFDD4B90251E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:4021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0e:9b:d6:af:dd:4b:90:25:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=759ec4f3-f6c3-4414-a2a0-f31d7bc265c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7a:f0:6c:59:6c:97:39:19:30:c0:e5:29:ba:
                    f6:86:22:82:b8:6b:f0:37:49:19:77:5e:a2:69:85:
                    7a:8f:34:14:c2:86:e8:c7:96:dc:7f:4f:23:d3:ab:
                    29:2b:90:1d:82:01:2c:6c:b7:02:84:b5:b4:43:5e:
                    b7:f7:27:65:53:34:98:fe:a6:a5:f2:1a:5f:5c:bd:
                    90:37:ea:0f:fa:00:93:2d:0f:8e:db:69:3f:1a:97:
                    93:52:6c:50:7a:27:2e:2d:fa:1f:0f:9e:18:a5:e7:
                    15:ac:96:14:59:a5:97:24:1b:fc:d3:1f:8f:7f:67:
                    de:33:39:9b:35:5b:02:81:e0:95:25:55:5a:21:a9:
                    ef:04:3f:90:81:ee:55:af:bc:b0:54:fb:28:95:2a:
                    6d:76:59:6d:29:ee:c6:d2:d4:f9:bf:05:d8:ff:50:
                    77:f0:e1:a6:e2:9c:6a:99:58:06:b5:11:13:9c:8c:
                    da:ba:b6:05:92:e8:99:cd:ff:7d:53:38:b2:bf:67:
                    57:94:0f:2a:b2:7a:aa:26:13:28:1a:6e:db:3d:6c:
                    ce:b2:8f:e1:32:4e:d7:4d:7a:73:4f:22:79:47:c6:
                    51:76:96:a2:b1:69:47:b0:73:5d:9a:1d:41:b6:c4:
                    d5:98:c0:d0:eb:da:84:ec:fe:fd:c4:f1:cd:59:56:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:69:62:F9:73:73:07:70:97:12:8B:74:45:5A:BF:B3:6D:C2:E2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f78a1e2-1d0b-37d9-9fe5-8ed913fac3f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:68:97:14:ea:f7:77:79:a6:aa:d5:4c:f5:a9:d8:64:ad:65:
         ff:a9:7d:84:02:7a:20:18:0a:00:c8:be:c0:c9:46:05:81:81:
         1f:4e:7c:17:75:f5:35:ef:81:aa:1d:50:31:6b:ed:25:a4:1f:
         66:31:ed:29:1b:39:60:da:74:f6:fc:38:2b:e7:03:c0:0f:cd:
         a2:00:e6:e4:ee:ca:f9:43:ed:1c:96:33:b5:dd:85:e4:76:95:
         06:59:51:5f:c2:ed:ca:2e:fc:9c:6a:46:00:63:2e:0b:0e:91:
         e5:af:ca:3e:60:9f:3a:0c:2a:f9:01:95:f3:6f:bd:42:9f:99:
         3b:6b:20:99:4c:48:65:99:3b:c6:32:9d:42:6f:6b:cd:f5:a2:
         3b:4a:9c:39:01:8a:68:47:01:ad:62:42:2f:d2:87:9b:89:9f:
         9f:48:56:07:0d:bc:9d:aa:0f:e4:f5:50:97:58:ca:02:c5:69:
         1c:a2:bf:21:00:8b:4a:fa:e8:93:e1:c8:7d:88:be:76:7b:4a:
         69:55:bd:5c:84:7a:e6:fd:72:53:a2:84:cc:73:97:fd:45:56:
         65:60:12:56:b9:91:a6:82:6f:12:65:1c:8c:f1:ad:ef:e4:be:
         72:a6:5f:79:38:c3:77:d2:f6:ca:7d:f3:f4:6c:83:8b:d6:07:
         e2:3f:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:51:33 2026 by rpki-client