Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa
File:                     bb74e8f0-7c3e-3594-9839-a58337795d0e.roa (raw, json)
Hash identifier:          nLGKwXPk5HId7MCUtQ1V1RRNkaE+wmULiYXQpsnjux0=
Subject key identifier:   07:E1:BD:25:47:B7:79:1F:8C:8E:A6:97:84:73:85:78:1A:6A:7F:6F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584C996721810A768C481EE0DBD0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:3032::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:67:21:81:0a:76:8c:48:1e:e0:db:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=03e96df9-4312-4610-b97a-767ff60f48a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f4:af:3b:ac:e0:46:4d:b5:13:37:b0:a9:
                    17:72:b1:3b:39:b6:32:1a:8c:f9:25:fb:b8:b2:67:
                    5a:cd:2e:9a:92:f7:97:22:df:c4:db:eb:4d:6b:7e:
                    dc:ca:da:6b:6a:f6:41:51:98:2a:85:e9:0e:2e:2e:
                    2b:33:b1:24:16:d9:09:49:5f:e6:95:f7:dc:d2:c8:
                    f5:92:6a:0a:78:83:40:b3:68:4d:fb:d1:d0:02:58:
                    b3:bd:0c:47:5c:ab:19:64:d7:56:93:af:9d:ff:87:
                    8e:af:68:b6:1b:cb:84:61:f8:ff:4b:8f:99:99:69:
                    bb:a8:02:b2:94:90:93:3b:8e:d1:97:0b:fc:e2:99:
                    66:f8:69:6f:dc:ed:f5:01:e9:87:8e:aa:c0:c0:92:
                    61:ac:d1:e4:e3:52:ad:ac:f8:0e:6d:8c:54:e4:40:
                    a7:74:1a:9f:21:9e:ad:4b:b5:13:50:2c:81:d3:1b:
                    09:27:1c:28:d9:63:58:c6:dc:35:43:10:12:13:0d:
                    c1:40:42:a3:66:47:ef:6e:81:c6:f7:16:43:41:03:
                    6f:49:95:9d:04:2f:20:67:04:03:ca:5e:25:e7:71:
                    bd:de:d9:77:5b:5a:b7:ac:59:fc:8f:0e:66:b0:b5:
                    85:b5:e9:82:a7:b4:11:61:06:9b:09:e7:de:91:2b:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E1:BD:25:47:B7:79:1F:8C:8E:A6:97:84:73:85:78:1A:6A:7F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3032::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:61:65:19:78:91:1e:b1:69:6d:84:9d:df:d3:e5:69:e3:57:
         cf:43:82:34:c6:1c:68:17:f1:e1:c1:7f:e6:38:2a:d5:cb:4f:
         81:87:6a:22:ce:46:3b:6d:3c:62:ad:30:e9:00:09:16:f2:8d:
         46:15:37:26:af:fe:66:2d:86:f8:8c:7e:6c:4a:0e:b8:94:fb:
         d4:69:c8:18:0a:8b:8c:73:26:ac:e0:b9:68:a9:3f:9e:27:b2:
         ef:65:0c:ee:07:ad:1f:0b:89:f3:ec:82:df:15:50:e6:7b:df:
         53:6e:07:66:e8:92:05:db:db:d7:e6:5b:02:26:6a:d9:b3:68:
         d1:66:73:1e:eb:38:44:41:01:36:db:30:a9:0b:72:04:9e:11:
         77:9c:ac:55:98:0f:f8:2b:f0:cc:e2:f9:76:e9:76:ef:ba:95:
         15:19:72:dd:2d:e3:5b:c7:b1:14:9c:50:c7:3a:52:61:9e:d9:
         28:46:dc:4d:5a:fe:22:5f:73:10:85:da:d4:d5:6b:76:25:4e:
         08:6f:4b:5b:79:af:07:74:45:44:96:21:6c:d1:86:82:2a:74:
         58:c6:ad:2b:04:fc:19:d8:5c:6b:b0:93:ee:11:1b:96:05:d4:
         19:18:da:50:48:39:dd:c9:1d:5c:aa:18:d9:21:72:18:80:1b:
         a9:a1:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:55 2026 by rpki-client