Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa
File:                     b026a338-2420-3466-9787-79afa7d7ac4c.roa (raw, json)
Hash identifier:          EV/kRaR24FeKYvDmeDg0Oj2vENLHVIXgOwYAHSyP7oA=
Subject key identifier:   AC:60:F1:13:20:CD:28:2B:89:E0:DD:BB:FC:BB:77:80:B2:37:7B:71
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A053B855A4469122147DF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        2606:4700:302c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3b:85:5a:44:69:12:21:47:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=375dc07e-8218-4f7a-b4a5-e8aae90e4e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:61:60:86:0a:96:b3:c7:4a:0d:72:73:fe:
                    69:35:cf:e5:14:08:f3:32:01:ac:ab:94:b1:c7:6e:
                    ae:63:a0:56:06:d7:df:f7:f6:c0:bf:98:43:c1:64:
                    74:f7:c8:43:e2:f4:6b:65:a2:77:8d:5d:8b:ab:a4:
                    13:4d:2e:2a:2c:72:a4:91:a7:f2:08:9f:25:dd:16:
                    d6:76:aa:7d:c5:4d:c2:e4:b8:9f:c2:84:85:17:56:
                    ce:5c:1b:dd:8d:07:3b:5d:df:39:df:40:e7:32:57:
                    22:c2:a4:8c:13:2f:38:b2:c9:40:65:d2:18:86:d2:
                    2b:be:25:f3:df:f5:3d:74:05:9b:21:f0:3e:4d:15:
                    4d:03:f8:6f:76:93:1f:e3:6b:45:7d:78:fb:23:96:
                    aa:2e:e9:13:2f:d6:6a:e7:0f:a6:9f:64:b9:46:d6:
                    f7:3c:d5:5b:e6:a2:1f:7a:23:be:fc:e5:be:11:e2:
                    f0:5c:23:2b:8e:a1:c5:15:b1:4c:27:58:c8:c8:a4:
                    ee:b2:ca:b5:3c:9f:df:8b:48:d9:2c:b7:dc:58:77:
                    b8:7f:6f:fb:f0:04:78:64:12:83:d8:13:f6:d4:72:
                    5a:5e:c0:fa:82:ae:b9:d2:c4:f5:72:d4:f2:eb:bc:
                    cb:3a:9d:39:1f:29:1e:a8:85:82:5d:94:87:0a:18:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:F1:13:20:CD:28:2B:89:E0:DD:BB:FC:BB:77:80:B2:37:7B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b026a338-2420-3466-9787-79afa7d7ac4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:302c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:85:db:66:89:75:03:d8:a8:73:cc:d4:a1:fd:6f:e7:a9:
         0b:8f:c8:f0:0a:0f:31:fc:80:bf:92:f6:a9:64:75:7d:d2:c8:
         01:b3:5c:2f:01:60:4a:fd:31:72:a1:76:ac:39:84:59:c2:1d:
         10:0d:2d:f6:ab:7d:4c:aa:f3:cb:55:75:f8:80:83:41:07:c2:
         4d:45:a3:0f:b2:0c:35:e2:a7:2d:4d:8c:18:01:cc:b5:52:19:
         c0:a2:e0:83:c0:a8:61:c8:14:e0:ac:14:a1:ec:20:85:b6:b4:
         66:de:d5:3b:26:62:97:ef:99:43:13:8e:26:3f:f6:ff:4a:2a:
         a8:2d:70:e5:db:e6:95:8f:0e:52:f4:3d:27:44:1c:d3:1c:ed:
         f4:1f:87:84:17:5c:13:fe:df:b2:2c:6e:f0:1b:45:ed:25:7c:
         9d:48:95:49:e4:37:60:d2:c1:3c:bc:27:4f:7b:fc:85:82:99:
         d3:c8:49:75:bc:ed:8b:4a:3b:7a:c3:91:f6:89:ca:71:47:9c:
         6b:dd:b2:98:75:f5:87:00:fc:a4:f1:4b:d2:ca:bd:b6:e2:42:
         9a:2b:dd:17:46:80:de:44:0a:c6:84:b5:db:35:e8:95:0a:1a:
         81:c8:4b:b9:3a:cd:d3:ec:3e:50:93:b9:b2:12:9e:d3:76:e0:
         c6:79:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:43:01 2026 by rpki-client