Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa
File:                     9a32a677-fc56-3094-a8c5-ed55005a98c6.roa (raw, json)
Hash identifier:          VnuNESUUEk52o4xb+FF4hCSAUL3v2ZDw/VlFpTic1Rc=
Subject key identifier:   DA:AC:65:E5:BC:22:24:69:ED:DC:B4:FD:20:A6:8E:B9:0B:9F:A5:13
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5A4A0F1D613786F2ED297840
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:43d8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0f:1d:61:37:86:f2:ed:29:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=db3b12c0-d9d2-4ec5-9043-a3357ccf9bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:8b:e1:03:8c:a1:72:5a:62:d8:53:3c:e5:
                    11:33:d4:2b:62:8e:d0:72:07:2f:79:74:6e:60:d0:
                    18:81:4e:ab:a0:7e:00:c1:4d:48:2e:18:e4:75:e5:
                    04:f4:8b:ca:c4:15:23:76:0d:e4:fa:1c:11:11:7d:
                    01:c5:fe:98:55:48:22:46:4c:1c:5c:3d:0d:9f:91:
                    a8:4d:d6:c3:9d:e2:59:fb:87:63:4b:54:23:78:ef:
                    d0:e8:ae:0f:8c:84:c2:df:0c:f8:9e:45:f1:dd:c4:
                    31:51:50:ab:65:0e:c1:36:7e:ec:e7:39:5e:56:c9:
                    71:fa:f2:73:8b:33:f9:c4:53:bc:71:64:03:81:4c:
                    85:3c:c6:32:57:a9:ba:2f:a7:4a:15:d8:5d:92:fb:
                    e8:71:38:5e:e5:29:8d:32:ab:fa:42:56:86:97:28:
                    70:93:f8:b2:6a:62:c2:b3:62:a9:7c:70:48:4c:d2:
                    1e:a2:0a:c0:62:98:db:a1:e6:2e:7a:88:79:45:34:
                    b1:fe:09:b4:34:9f:77:8c:fd:0b:70:da:1b:ca:1f:
                    66:68:f6:dc:35:c6:c5:6a:bd:6d:14:89:0f:6b:2d:
                    d2:01:59:9e:1a:40:82:ee:f4:b3:85:23:61:f5:e3:
                    17:34:6d:02:c5:42:9d:2a:13:1f:c1:63:89:3d:ec:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AC:65:E5:BC:22:24:69:ED:DC:B4:FD:20:A6:8E:B9:0B:9F:A5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:43d8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:93:b2:65:4d:34:39:fc:ff:e2:b2:3f:6c:e9:93:28:51:
         a2:9b:ea:ce:e0:be:20:b4:f2:98:cd:e2:97:38:51:2f:4d:02:
         a0:6d:1b:40:1d:d3:21:4b:3b:3b:55:af:f3:0b:a4:92:a7:0c:
         99:5f:3e:26:3a:ab:33:26:d0:e9:e6:9e:0f:c0:58:b9:a0:27:
         35:20:e4:0f:e4:62:7c:5d:76:6d:50:74:78:cf:17:10:7c:d7:
         50:ea:1c:06:b2:7a:8c:f2:d0:f3:9a:de:6f:8e:64:06:96:22:
         dd:6f:3e:56:a8:6b:ce:84:1f:d9:77:11:a9:0d:01:3f:87:b1:
         21:a7:88:19:3c:08:1d:85:d5:c8:22:05:07:f0:c6:eb:f2:ed:
         d7:e7:95:0c:c3:15:32:0a:a3:e4:9a:00:e6:14:9a:8f:8b:4b:
         a5:7e:c3:e5:7a:65:a3:b9:54:5c:53:0f:3e:38:26:98:9c:92:
         ec:47:29:95:97:3d:53:ae:64:92:83:55:64:ee:60:b0:6d:2c:
         74:1f:6f:ab:d9:59:80:3a:a6:df:a3:d6:bf:2d:54:e4:e1:c2:
         46:cf:3d:68:d7:af:8b:92:25:c6:49:a2:16:4e:19:2d:d7:b7:
         26:c7:d9:bf:37:7f:da:22:8f:ee:84:93:3d:65:74:a3:1a:02:
         02:89:36:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:01:57 2026 by rpki-client