Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa
File:                     7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa (raw, json)
Hash identifier:          Cw98iJB2QN3SAHWy9cVueJfkptfuWLyL4LJc2qJMeFc=
Subject key identifier:   C8:67:F2:D8:08:CA:30:63:43:26:15:D4:B9:2E:30:7D:02:47:B9:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A054A79B0DCFDD20AA3C880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        2606:4700:3005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4a:79:b0:dc:fd:d2:0a:a3:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=829392c8-d628-435d-818e-da6ae15a7c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:f0:bf:e2:81:f8:88:4e:99:ed:1c:ad:54:
                    15:ca:a0:38:e7:08:43:89:4d:b1:5c:cf:39:93:63:
                    d7:be:16:ed:dc:13:aa:b0:82:89:26:06:02:b9:b4:
                    d9:20:aa:3c:f4:32:8a:3e:af:b1:97:ae:bd:c9:56:
                    a5:48:ac:4a:f2:51:9e:83:67:6d:fa:89:9f:e0:9a:
                    85:89:b7:16:29:e0:90:01:19:8c:3e:fb:99:6f:02:
                    c1:b4:1e:5b:5f:aa:7d:75:3c:ce:b4:fc:9f:33:0b:
                    4e:9a:73:9a:4e:e6:ba:28:98:b5:d5:44:f9:f4:ae:
                    e4:e9:6e:91:d1:85:77:3b:c5:cc:3f:a7:12:d7:1c:
                    ed:77:b5:5c:1d:e2:cb:cf:07:cd:cc:db:f7:32:1d:
                    02:15:d4:02:59:31:24:b2:d6:fe:e9:75:ec:d6:7e:
                    14:6e:b3:bd:5b:8a:84:ec:54:ab:b5:80:5b:52:ee:
                    6a:0e:b9:57:e1:ff:fb:ae:96:bc:3e:83:3f:b1:f8:
                    ad:07:55:5d:01:cd:c8:93:f8:e1:2e:4b:b9:fa:ed:
                    a7:ee:40:6a:18:08:f9:d1:ef:77:45:20:fb:1d:33:
                    4f:7e:00:ca:99:c6:a9:3e:77:2c:3b:72:41:c4:11:
                    ca:04:32:70:ac:92:2a:65:07:d1:67:1f:a5:65:f8:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:67:F2:D8:08:CA:30:63:43:26:15:D4:B9:2E:30:7D:02:47:B9:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c1:69:c7:4e:4c:be:22:6b:d8:07:0f:a1:71:2e:1d:4c:5c:
         a5:ff:c3:d7:16:97:1f:2a:c4:e0:c5:82:b5:34:a6:5d:83:2d:
         da:9f:d5:36:80:9a:60:61:83:bb:68:7e:8e:ea:50:59:d7:7a:
         8e:af:0b:36:6b:a1:44:15:64:0a:82:1c:84:97:86:6b:6d:ab:
         ca:ae:06:3a:92:d9:4a:21:09:47:4d:a6:67:72:0c:ec:7e:f2:
         0a:62:6c:09:16:08:65:c8:b8:1a:5b:9a:9c:56:4f:cc:91:c1:
         6e:8c:81:95:74:7e:ff:6a:64:e3:c5:eb:57:ae:6b:4f:fc:79:
         ae:1f:f3:96:5a:cd:b9:c1:86:33:cf:9b:30:2e:e3:2a:be:d7:
         ca:d8:27:bc:66:48:5a:94:2a:1e:68:bb:ca:15:50:89:18:de:
         2a:76:d7:cd:e9:6c:83:ae:a1:88:e5:23:51:65:0b:12:4b:56:
         bb:4f:9a:c7:e9:3b:ba:43:cc:88:24:3d:7f:0a:de:cf:a9:fa:
         7b:91:79:5a:c3:cc:71:2c:a8:df:39:50:2e:91:78:e2:0c:7b:
         32:27:64:ca:0c:3b:52:89:37:da:2f:7f:da:04:3f:f8:b1:ce:
         6e:15:b7:f5:e1:eb:0b:89:4a:6b:54:85:0d:66:13:44:94:41:
         df:55:ea:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:30:37 2026 by rpki-client