Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
File:                     2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa (raw, json)
Hash identifier:          KXykbaFBgvDX4E2vRCBfci24va+3alJHrnxJUXvbo+U=
Subject key identifier:   DE:27:D8:2D:C8:84:31:A3:F4:84:53:9C:20:2C:C8:05:0F:D7:EE:A7
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584EE0C2013CC19A7B04A2889290
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2620:113:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:01:3c:c1:9a:7b:04:a2:88:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=2c266145-f6df-4b90-92f5-faa5e3bf7ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:55:3c:8b:da:e1:79:6f:96:88:1f:45:35:
                    63:00:3b:e7:c1:4f:e1:1a:30:e4:b9:5d:a3:61:5c:
                    50:0e:95:63:4b:b1:f4:c2:2c:25:90:7a:16:25:b6:
                    69:f7:eb:b8:24:3b:9c:26:c8:34:bd:6f:8c:97:f4:
                    f6:3b:cf:cc:62:07:85:80:9f:af:d9:d3:88:14:5b:
                    4a:20:00:2a:66:11:70:a8:82:eb:c1:e7:47:9a:07:
                    20:db:80:78:09:79:4e:aa:b6:aa:1f:22:1e:11:9e:
                    a3:28:3a:30:f1:79:6f:b2:47:e8:ac:5c:49:74:25:
                    ab:3f:02:c0:81:c8:e9:99:0b:c8:3d:81:3f:63:9a:
                    ff:5c:20:db:7b:d7:b3:7d:d8:dc:d0:b7:8c:74:39:
                    2b:ae:a7:07:cc:45:01:d2:7b:e5:da:5e:e2:d7:11:
                    85:4e:bb:71:51:f3:07:1c:a6:37:9d:d0:8d:1b:f7:
                    56:e3:2f:b4:b8:6e:49:7f:18:65:47:38:18:99:ea:
                    44:79:c1:5c:f5:84:f2:e8:32:55:da:a1:2b:41:99:
                    fd:5e:17:f7:e8:b2:2b:f9:cd:df:b6:57:7f:60:cc:
                    c7:af:61:ff:4c:f4:12:f6:f1:9e:01:7f:1c:ed:0e:
                    61:b2:13:93:15:b5:4e:5a:69:41:5e:68:5a:d3:a2:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:27:D8:2D:C8:84:31:A3:F4:84:53:9C:20:2C:C8:05:0F:D7:EE:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/2dcc3161-69c7-38a5-82ef-b7752c6e7c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:15:93:8c:cb:85:f6:7d:53:87:66:ae:68:90:72:e0:5d:83:
         be:b3:9f:02:68:70:3a:12:14:01:ef:dc:2f:70:5b:5d:e9:26:
         28:96:d0:ff:07:f5:dd:9c:88:fd:7a:40:5a:10:2b:be:22:2a:
         e2:4a:a6:53:3f:0c:69:fc:d3:c6:e2:98:48:e4:29:14:88:70:
         0b:44:d3:46:65:6d:82:7c:6e:5e:fd:78:66:28:ea:42:bc:4c:
         bf:3f:c1:00:f5:e9:7e:22:13:95:f1:73:98:72:0f:6b:54:05:
         3d:d2:63:d3:34:93:23:14:3d:91:3a:12:e3:78:b9:a4:ba:a8:
         f5:6a:61:85:ef:21:9b:ab:17:ee:46:08:7f:d6:9a:45:24:54:
         d4:f4:6c:4b:91:23:a7:04:bf:e5:70:64:5f:d2:08:3a:1d:f0:
         af:5f:cd:47:55:21:6b:4b:47:eb:07:4f:1f:76:ae:92:ca:bc:
         15:9b:07:3d:b4:52:df:81:92:fc:09:74:46:7a:50:e1:44:85:
         42:5f:32:7f:19:99:d8:ca:ee:54:95:76:14:51:cb:d4:a5:83:
         61:66:3e:d3:e8:02:99:f8:0e:de:ef:1b:dc:ec:f3:30:14:c8:
         8a:3a:22:8f:fd:04:c2:79:c9:d1:d3:0e:c6:a8:ba:51:67:f3:
         2d:08:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:35:34 2026 by rpki-client