Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
File:                     2077fbb3-a712-382e-8a9f-fa3151f59015.roa (raw, json)
Hash identifier:          mkmigsM1+d7F2cJ5TiCn7hoXh8l7JaBGc+Y5FEgIDZE=
Subject key identifier:   CB:DA:81:DD:27:AE:27:24:C3:F2:D9:B1:70:40:D1:B1:1C:D1:A6:01
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A52415C0669EF0091BA8A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        2606:4700:68::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:24:15:c0:66:9e:f0:09:1b:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=4b757123-17d5-42ea-919f-c9ab2c4bfec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:81:65:2e:c7:6a:79:07:f6:48:01:75:f5:
                    56:d0:0c:71:46:25:f6:9d:d8:d3:95:2a:1e:70:aa:
                    aa:30:d5:c9:3a:b2:df:5d:43:2e:9e:0c:bb:4b:2c:
                    f5:82:8f:cf:49:ac:d1:40:3e:26:1c:1d:58:e1:62:
                    61:6b:34:c9:c3:8d:ec:7c:f8:c8:4c:bb:d8:33:56:
                    f1:88:36:cc:ec:f7:94:ea:08:a1:10:fa:f5:43:9b:
                    e4:59:6c:0c:6f:1a:81:3b:ee:b3:78:56:fc:87:e4:
                    bb:4b:cc:b3:68:8f:b3:e2:5e:c2:a5:b4:61:59:48:
                    30:fd:b8:82:1a:2d:56:f3:51:82:02:1c:b3:f8:72:
                    a6:77:1b:f4:09:04:06:34:a3:b3:9c:65:bd:57:d2:
                    29:fa:0e:b3:a7:cb:4b:dd:5f:f5:de:5d:cc:d9:cf:
                    60:fe:62:71:51:1c:1b:fa:b2:7f:4b:4a:c4:73:50:
                    70:e4:f7:06:dc:61:1c:f0:3c:3b:84:a4:32:2f:fa:
                    9b:6c:ef:54:4d:33:7d:c7:72:a2:b1:18:b9:dd:8c:
                    01:fb:54:93:56:88:fd:fb:df:73:4d:8f:25:dd:96:
                    64:3e:71:8a:2b:7b:df:ce:38:3f:2a:e1:cd:a9:c5:
                    7e:40:e1:8c:a0:e7:79:62:9e:3f:52:d6:ee:ef:54:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DA:81:DD:27:AE:27:24:C3:F2:D9:B1:70:40:D1:B1:1C:D1:A6:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2077fbb3-a712-382e-8a9f-fa3151f59015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:68::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:aa:bf:95:fb:1c:d6:77:f1:d4:67:1a:2b:79:c4:1c:b8:d1:
         f3:4e:68:92:16:a7:a1:b2:d0:76:85:aa:ca:e5:79:c5:03:19:
         29:fe:98:2d:33:2f:78:8f:b8:37:4a:93:40:76:98:a1:70:98:
         98:4e:e0:f3:bc:76:44:41:9f:5c:4e:7d:35:15:41:50:73:8c:
         6f:34:63:c3:68:af:fb:69:ec:8a:45:e6:65:3a:e8:32:60:46:
         b3:63:87:41:0e:8e:6f:0b:a9:28:4c:30:58:30:6c:28:04:37:
         ab:7b:4b:d8:18:8f:dd:0a:f1:57:c9:9b:10:a5:f0:f8:c3:7c:
         6d:ea:59:f7:ae:e1:ac:0b:5f:53:73:d5:e2:75:61:89:fd:05:
         7f:6e:da:97:0d:f0:39:01:78:b0:d3:04:88:f1:b5:03:fb:b3:
         e0:70:4d:14:6a:d4:30:49:b0:d2:80:78:03:26:dc:f0:32:68:
         79:19:a1:25:f6:dc:b9:41:e3:33:58:20:79:92:6b:ca:3f:6c:
         da:f5:c6:23:94:98:d4:74:d1:ca:58:7e:0d:8e:d5:da:35:e7:
         25:99:62:f5:3a:5b:b6:e0:5d:1f:31:8b:80:83:23:c6:77:45:
         6c:6b:42:53:39:55:ac:ab:e9:2e:d1:82:fd:dc:3b:71:53:26:
         5e:1b:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:39 2026 by rpki-client