Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
File:                     c5f5b31f-c025-3789-a914-9b5232041348.roa (raw, json)
Hash identifier:          BWDzJ7+89HJ2yxbZuDM0ndK3OfvDhk5De5c1qCuf2wI=
Subject key identifier:   FE:EA:6F:99:19:25:34:E2:B0:EC:4A:E0:80:D6:4D:2F:0E:0A:B8:61
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584EE0C201304D60D3938553AAC0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2620:113:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:01:30:4d:60:d3:93:85:53:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=584bc7c2-673f-4d08-adc8-e041aaf5e7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:ac:bb:02:dd:0b:e5:39:ad:a8:45:51:0c:
                    cb:a8:c5:ff:81:52:4a:86:39:6b:ab:3a:97:b6:26:
                    ee:65:cd:f4:2f:2c:24:e5:22:28:ed:c7:79:bd:91:
                    36:44:56:1c:d7:c1:de:8a:90:dd:0a:5d:d1:df:8f:
                    b0:2f:66:a8:03:51:43:19:11:46:2b:84:ed:93:a4:
                    62:b6:03:80:31:72:be:ce:ac:66:3c:a3:db:b7:33:
                    9b:ae:41:df:83:37:81:68:84:25:ea:77:7b:71:08:
                    2f:d2:6c:82:b3:7a:92:a6:27:35:eb:c3:69:f3:71:
                    7b:1f:72:db:97:2e:96:76:cd:64:51:37:51:c1:52:
                    c3:d1:a3:d1:49:4e:a6:b9:56:7a:78:46:14:50:96:
                    11:6e:56:7e:f5:0d:bd:7c:00:0d:19:40:6c:74:22:
                    e3:6c:8a:85:b1:5e:0b:8f:4d:ab:35:c7:3c:31:1c:
                    80:b2:1c:7c:dc:2e:8a:88:3b:9d:59:e6:ae:c2:65:
                    96:58:06:0c:c1:cc:4b:8a:5a:8d:0e:4b:01:86:c5:
                    7b:a2:a8:ea:59:02:46:74:c3:90:60:17:5a:1d:f1:
                    a5:f7:1f:e5:2b:cc:e4:2a:ad:f5:6e:5d:54:08:5b:
                    64:74:6c:20:11:a3:95:a1:95:22:a8:f1:3b:9e:5f:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EA:6F:99:19:25:34:E2:B0:EC:4A:E0:80:D6:4D:2F:0E:0A:B8:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:aa:e7:e0:73:99:e7:87:2b:08:59:ef:48:03:56:fb:49:
         7e:13:87:00:6e:ed:f1:b5:78:25:9a:c5:d9:13:f1:f0:6d:50:
         d8:c8:f4:dd:29:34:11:5b:bd:4a:31:43:69:c9:92:c4:f4:be:
         e6:0b:d8:6a:0a:ee:60:4b:56:ea:31:90:11:32:f8:f1:87:70:
         86:9e:d5:df:12:2b:62:e6:de:f3:76:3c:8f:8b:46:25:84:b6:
         92:eb:6c:7c:36:46:12:64:cf:8e:f0:d2:16:0a:1b:8f:c2:74:
         c3:a0:56:14:ef:50:77:a6:20:b1:87:11:f3:25:ee:f0:c0:76:
         63:cc:05:b6:eb:a6:30:9e:06:92:fc:47:3d:3c:b4:d5:db:7f:
         5b:49:60:82:3d:b0:16:ba:2b:5b:89:89:f0:cb:ef:3c:8d:aa:
         74:bd:7e:76:48:f1:d4:5f:e2:81:e4:ec:2c:0b:99:8b:9b:93:
         ff:17:8e:0d:0f:6c:cd:48:85:be:ae:37:ba:53:a2:95:3c:d3:
         a6:0f:f9:3b:fa:95:e5:0a:39:bd:77:b7:8e:fa:03:12:ea:4e:
         1a:f5:b5:64:17:58:09:e9:37:3f:8b:92:3d:66:41:51:c3:0f:
         24:b3:67:a1:d1:0d:1e:75:0c:fe:63:61:08:87:34:bd:48:5c:
         fe:12:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:35:55 2026 by rpki-client