Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
File:                     998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa (raw, json)
Hash identifier:          FKq8q2wUFUAAzVY0VrMxosYS8xn07oJejAftifbTQoQ=
Subject key identifier:   CB:93:58:28:F6:A2:EC:05:1D:3E:F1:A5:48:E1:0F:1D:94:75:CC:2C
Certificate issuer:       /CN=be206701-373a-467b-8de3-29a82f348469
Certificate serial:       010D0C9F4328584DBE6B20FE5B44184BEE397240
Authority key identifier: 95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     62605
IP address blocks:        2607:c940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:20:fe:5b:44:18:4b:ee:39:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be206701-373a-467b-8de3-29a82f348469
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=cf2b0b10-8f60-4414-8a98-d06fb5f0d7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:4a:83:41:dd:5d:ba:79:35:1e:bf:dc:3e:
                    ee:fa:e6:e3:49:d8:32:07:22:9e:2f:0f:dc:fc:e0:
                    22:d0:33:56:9a:51:d8:eb:6b:d3:4b:dc:d4:42:d5:
                    5a:eb:97:4a:48:86:a8:37:62:ce:d6:9f:5d:22:d9:
                    14:e0:18:47:96:c5:8b:ee:c7:e9:8a:1c:81:37:1b:
                    34:c6:22:86:62:ac:c3:89:7a:53:8b:fc:05:25:75:
                    c8:1c:47:d0:c4:32:8e:26:be:02:30:63:7e:18:e7:
                    25:e6:17:69:bf:c5:ed:3f:72:fd:23:21:03:93:9f:
                    d4:c8:ed:8c:17:2a:33:41:e0:b0:10:20:6b:d3:df:
                    06:2e:21:00:f5:b2:7d:8e:4b:1e:91:f1:ce:b8:79:
                    77:22:5f:4a:fc:eb:57:7d:9f:3a:bb:b7:1c:3c:71:
                    fb:6d:19:4c:a3:17:81:5d:c1:33:9a:4c:d2:35:a6:
                    52:20:10:3b:18:2f:2c:57:89:5d:90:1e:fa:c2:87:
                    84:e1:eb:c5:b1:e9:5a:f2:0e:4a:61:f9:e3:05:58:
                    82:f0:c3:1c:8f:81:9f:10:ad:bf:9b:9f:71:c4:01:
                    aa:33:bb:79:66:ae:d9:08:a6:43:75:fc:de:58:4a:
                    cb:c6:83:42:33:1d:86:dc:4a:ec:60:aa:e2:a5:98:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:58:28:F6:A2:EC:05:1D:3E:F1:A5:48:E1:0F:1D:94:75:CC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/998c7a78-f332-37f8-b53c-b7e6b9cc8536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469/be206701-373a-467b-8de3-29a82f348469.crl

            X509v3 Authority Key Identifier:
                keyid:95:A7:1D:64:F6:31:39:42:29:FA:63:D8:E5:7F:B7:EB:C8:0A:92:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be206701-373a-467b-8de3-29a82f348469.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:1f:77:3c:1e:93:c7:56:d8:6e:2e:86:b0:5e:1b:19:c8:
         31:f5:33:c4:d4:5c:85:66:58:dd:42:1f:c9:59:72:26:63:e5:
         be:7a:f4:e3:0b:53:5d:d1:1d:e7:92:67:4a:77:44:8d:4d:e2:
         8d:2f:6a:75:47:7d:3a:eb:3b:63:1d:d6:4b:61:8d:ad:1d:54:
         7e:26:67:e3:d5:3a:db:41:69:8c:a9:9a:33:e5:d9:2b:64:2b:
         1a:a8:29:00:c1:2f:09:2c:40:80:f0:d8:67:f1:26:9c:0f:d6:
         fa:c0:99:b4:84:75:3d:1e:29:a3:c5:15:d3:77:27:cb:f4:4a:
         f7:7c:f0:df:15:9d:0c:05:d9:9a:42:f9:f5:7d:25:3f:59:3a:
         e6:c1:8d:9f:5d:08:9e:77:a8:5a:aa:20:b2:53:de:2f:da:96:
         c2:25:89:cd:d7:5b:3a:5b:44:40:72:5e:e1:26:1d:4b:1b:bc:
         0b:5c:c9:b4:b2:e4:c2:ef:b5:d0:24:b1:8a:ec:73:49:53:81:
         ed:4d:a9:ad:95:49:fd:07:f4:22:52:9c:08:68:2f:db:04:61:
         4f:4d:7e:10:fe:c0:bc:91:14:e9:c1:9b:b5:4b:f6:ed:77:fa:
         d3:16:99:d5:65:c1:6d:49:10:4d:45:21:76:16:1e:e0:6b:76:
         b6:47:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:28:43 2026 by rpki-client