Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd252471-d14d-3936-bbe9-77914417d171.roa
File:                     bd252471-d14d-3936-bbe9-77914417d171.roa (raw, json)
Hash identifier:          IXaiKlMNfDlJxVgITeH9jegYX1nV07eOuO6ek5BrMZ8=
Subject key identifier:   D2:20:FB:20:8E:7B:8A:3F:86:6E:E7:20:A4:D0:41:F0:0D:4B:86:C4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EFE122F4E26485B3C1244D9A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd252471-d14d-3936-bbe9-77914417d171.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:311a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2f:4e:26:48:5b:3c:12:44:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=44db18a2-d11e-437d-b408-8bf3a8d6e35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:34:01:dd:6e:92:0a:8a:42:b6:b4:75:85:c6:
                    c2:04:8d:26:19:d1:f7:40:d7:1d:29:26:d0:70:bb:
                    a1:ce:ee:da:c7:39:6e:71:a0:67:5a:01:99:f3:bd:
                    7d:b9:85:1e:7c:87:00:44:41:aa:74:42:07:7d:d0:
                    b7:86:71:82:5b:5c:1d:7a:1f:68:b3:62:04:8c:66:
                    2e:c6:dc:88:95:69:a6:07:0c:0d:17:f8:58:13:5c:
                    1c:31:55:a6:2e:dc:cc:2b:ca:78:3d:f4:3a:1e:57:
                    d7:a4:d2:a1:28:6f:db:5b:2f:f3:3a:9b:c4:da:6c:
                    db:43:3b:21:9f:25:4a:fc:70:21:5d:69:8c:93:f6:
                    55:a1:d8:c0:b5:bc:70:fa:6e:13:de:02:a3:d4:58:
                    31:3a:a6:44:4f:97:66:b9:de:95:49:fb:9b:3b:a3:
                    46:44:97:36:02:1d:05:dc:0c:79:ac:06:13:a7:14:
                    73:7a:a2:3b:10:c0:b8:83:d9:45:23:ac:31:1e:99:
                    44:54:18:3f:ad:6d:b4:f2:f8:23:3b:68:93:1f:69:
                    55:f3:32:10:42:4d:fc:a5:ad:84:ef:ec:89:80:d1:
                    5d:78:f7:8b:42:37:e6:d4:fb:91:17:37:39:b8:f3:
                    d4:39:66:d1:6d:30:25:4a:b5:ab:2f:0a:0b:54:77:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:20:FB:20:8E:7B:8A:3F:86:6E:E7:20:A4:D0:41:F0:0D:4B:86:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bd252471-d14d-3936-bbe9-77914417d171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:311a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:00:16:31:ec:7a:a9:82:7c:da:a1:fa:90:e4:0c:c6:66:
         fd:37:c2:6e:1b:6a:5a:54:e5:14:71:33:68:03:02:db:e1:a4:
         e9:c4:cb:cc:f2:30:97:f3:50:05:88:ff:ac:af:e9:b1:b2:66:
         ac:61:e2:5d:1d:9a:31:60:00:63:3b:b2:cb:58:76:18:10:11:
         5e:99:26:8b:ba:c8:64:ed:01:f6:ff:9e:6b:52:50:11:22:fb:
         5d:c8:d5:3b:52:32:85:8e:ed:76:d9:30:b8:ca:a3:4e:d9:0d:
         be:3c:51:66:47:65:fe:65:05:25:19:51:8f:8e:ff:6d:7e:77:
         38:e6:9c:85:b8:50:2e:4d:fd:86:7a:92:3d:62:40:2d:9c:9a:
         41:b3:71:f7:69:38:21:85:ad:8b:d8:c2:0a:b2:95:1f:4b:51:
         79:67:65:ea:a7:4b:27:b2:a0:ed:5c:88:ab:47:78:f2:0d:a8:
         d4:e0:12:77:d7:99:0c:11:90:17:8f:9c:aa:f5:32:1e:b9:85:
         58:f7:05:56:2c:63:e6:00:43:5e:3c:24:ba:40:ba:d1:f5:5e:
         c4:1f:4e:fb:73:67:84:2f:ae:ee:0d:31:02:c8:d9:e3:78:bb:
         b8:6a:77:35:b4:d0:8d:9f:a3:44:e1:b6:24:d3:b7:00:ce:23:
         0a:a3:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:52:16 2026 by rpki-client