Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a07ee477-a3d7-3ab6-977c-1fa71df6a094.roa
File:                     a07ee477-a3d7-3ab6-977c-1fa71df6a094.roa (raw, json)
Hash identifier:          Rd9PbpEwwY/4QF72CZ83j60W8FIj9JD7nI3q3/+XjwU=
Subject key identifier:   58:FD:99:6C:A9:23:D2:EB:DF:76:E1:36:AA:70:32:F5:74:34:E4:0C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A054A5670FBA4CC2E701800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a07ee477-a3d7-3ab6-977c-1fa71df6a094.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        2606:4700:1200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4a:56:70:fb:a4:cc:2e:70:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=4170c130-7529-4464-8183-e2130ff3544a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:d2:c0:0c:65:75:9c:c7:4c:4b:d5:ca:86:
                    37:0d:9d:61:79:9b:23:d6:eb:7a:0a:f0:aa:80:b1:
                    00:f7:af:29:86:41:dd:8e:b4:62:c5:2b:6e:69:cd:
                    a4:e5:b7:b6:af:78:51:ff:54:48:32:8c:2f:88:46:
                    94:56:83:d0:38:3b:b6:ff:16:d8:26:3f:9c:b0:c5:
                    30:c4:89:50:9b:f0:56:17:d6:0b:34:20:10:86:80:
                    7e:ab:87:c4:2f:51:df:c4:91:56:bc:b2:5e:91:4d:
                    7b:96:28:c4:be:7b:04:50:65:25:e1:49:76:18:04:
                    40:29:c2:f3:dc:a3:2e:c7:88:81:37:88:12:ef:ca:
                    12:0f:c3:c0:5a:19:1f:3a:8b:b6:9b:6c:7b:47:3c:
                    4e:a0:db:bf:12:38:df:fa:6b:ce:08:86:16:89:19:
                    32:7c:46:29:48:f4:bb:a3:0a:93:10:42:0d:43:a4:
                    c6:8c:ac:e7:df:a7:07:80:89:03:00:2a:2e:b3:d9:
                    d4:01:52:f0:3f:d9:08:71:6f:c4:79:83:ba:36:df:
                    36:60:67:b7:4b:7c:2e:7b:5e:76:2e:92:a7:1b:7f:
                    36:8b:e1:dc:3c:a8:95:e7:ea:43:46:02:71:2b:30:
                    ff:2c:13:3b:37:7e:a4:52:0f:3b:c2:40:a4:15:f6:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FD:99:6C:A9:23:D2:EB:DF:76:E1:36:AA:70:32:F5:74:34:E4:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a07ee477-a3d7-3ab6-977c-1fa71df6a094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:1200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:91:cb:9a:06:1b:8f:3c:7f:a4:c3:93:78:7c:69:3f:fc:07:
         74:ed:39:6b:fe:7b:fd:24:74:a4:18:b2:94:45:ad:33:ba:75:
         36:70:de:91:d6:03:68:d7:50:36:f5:6a:db:01:09:e2:52:5c:
         0e:bc:50:fe:4e:0b:e9:83:74:80:03:22:4e:9d:ac:17:fc:8a:
         96:e3:72:78:48:b1:0f:4d:69:44:ba:76:0b:68:ee:75:fa:52:
         b6:74:b2:35:93:8b:5f:bb:1b:47:4a:c0:6c:77:10:0d:64:ca:
         24:d5:e5:97:2f:f3:4f:9e:d2:a3:30:bf:d9:82:db:cf:76:9b:
         b6:55:1e:75:ca:b6:b4:fe:13:55:59:3d:fa:d7:43:bb:89:eb:
         55:80:3a:58:b8:42:6a:84:3b:f1:8f:c2:14:97:d2:2e:71:2b:
         3a:3c:87:ab:c7:48:6b:9e:ed:d9:27:c6:f1:04:4f:4c:63:2a:
         50:fe:ea:76:50:28:0a:26:19:83:0a:76:93:19:98:2c:19:35:
         33:d1:ff:d7:a8:97:fc:e3:3c:42:08:c6:90:60:37:30:e5:89:
         2c:6f:25:00:72:8e:9d:8a:4d:1f:4c:bd:75:0d:f2:e5:f2:c6:
         6a:b1:f7:32:4a:9e:a7:e6:41:77:16:a2:74:61:89:04:96:c3:
         0f:66:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:03 2026 by rpki-client