Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db1b00f9-8b17-34dd-96f5-aa6f99b9bd9f.roa
File:                     db1b00f9-8b17-34dd-96f5-aa6f99b9bd9f.roa (raw, json)
Hash identifier:          Ucogfn1njwRfjwwqjBPW6SMB7yjJlIMNdwL5WrKPGgs=
Subject key identifier:   D6:34:AA:2D:CC:9D:26:E8:60:E8:4D:7B:15:64:9D:D3:D4:93:DE:8B
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EE4233122566F731C0A26F900
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db1b00f9-8b17-34dd-96f5-aa6f99b9bd9f.roa
Signing time:             Wed 19 Aug 2026 18:03:43 +0000
ROA not before:           Wed 19 Aug 2026 18:03:43 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:4700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:31:22:56:6f:73:1c:0a:26:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 19 18:03:43 2026 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=0134ed6e-91bd-4fa0-a5ab-ba4253d62467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:9f:da:b8:70:e1:fa:c3:74:ad:8b:34:e5:
                    6a:45:aa:62:05:2f:ae:ba:37:6b:a9:2e:f6:c7:fd:
                    d6:cc:fd:85:b0:ce:0c:d6:74:30:44:aa:96:92:a4:
                    d5:5d:64:2a:75:cf:a1:f7:28:c4:f0:a0:1b:6d:8b:
                    82:52:28:c8:12:82:b2:85:b6:13:39:d1:cf:6c:91:
                    6c:3c:60:e1:2d:49:65:87:2a:c7:6e:49:84:0e:2d:
                    61:f6:97:b4:2b:a5:f9:f5:6a:d2:bc:50:3a:f8:44:
                    79:a0:1c:6b:fb:3f:7e:8d:65:db:2f:07:4c:e8:6c:
                    17:da:ac:51:14:4a:54:62:ae:b2:e1:3d:91:e0:dc:
                    b8:9d:92:2e:25:db:8e:73:67:5f:65:98:31:49:c5:
                    5d:04:8b:dc:10:af:a9:f8:1f:ab:cf:97:0a:61:47:
                    bb:2b:40:71:43:d6:7e:96:a7:5f:79:73:b7:a5:4a:
                    bf:1a:db:5d:9f:56:72:f5:3e:9a:9e:bc:44:30:85:
                    80:64:e7:59:b5:0a:e8:cc:92:64:06:26:05:6a:63:
                    90:9c:91:a3:62:62:c3:61:e2:9c:51:3f:46:bb:5c:
                    de:a2:83:96:c8:01:c0:2f:50:ce:11:00:17:93:c8:
                    55:e8:16:cd:27:b2:8b:b0:ef:7f:a9:7a:d5:9f:5a:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:34:AA:2D:CC:9D:26:E8:60:E8:4D:7B:15:64:9D:D3:D4:93:DE:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/db1b00f9-8b17-34dd-96f5-aa6f99b9bd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:c6:f1:aa:76:ca:81:21:7d:ce:b1:9f:7c:3d:fc:e6:f9:
         19:2d:c6:da:52:69:b4:05:00:44:11:c1:ef:f5:ce:21:b2:65:
         ed:53:43:d3:89:34:b1:4b:40:89:83:31:d9:81:3e:9e:b0:ab:
         78:2c:a5:b0:2e:b2:04:d3:d4:6f:b5:6c:d5:df:95:42:41:18:
         df:e0:4f:2a:55:81:b3:41:1c:97:b3:59:0e:14:b3:5b:d4:ec:
         97:95:91:64:0a:c4:a7:53:8d:5d:42:3c:7e:3b:22:59:c9:8f:
         02:9c:f6:4e:c2:fe:b9:7e:c5:57:37:08:7a:fa:4c:57:99:7d:
         45:bd:16:a7:34:9f:e7:9b:e3:ff:05:a5:98:f3:ce:6b:8f:4d:
         c3:52:56:f6:42:0a:4e:d7:8c:68:c1:52:66:5b:36:a0:95:4e:
         08:46:cc:c0:42:b0:7b:5f:dc:85:8c:1f:2d:e9:ff:88:74:a6:
         dc:81:6b:43:d6:36:73:40:fe:ac:45:39:38:e8:6e:75:c6:08:
         7f:91:6d:8b:8e:6f:f9:80:07:41:5e:6c:bd:5f:26:a5:bc:d3:
         c8:bd:db:80:a0:c2:76:31:7b:46:90:2a:c2:cb:17:30:84:ad:
         08:db:01:03:97:54:fa:d5:c3:6c:a6:7f:6e:a2:b0:70:63:1e:
         29:3c:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:23 2026 by rpki-client