Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa
File:                     d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa (raw, json)
Hash identifier:          61KcY93TkaT6N1dClxAjXEk21WSF4rmY4jl87BfNS9k=
Subject key identifier:   64:F0:49:F9:FF:7F:EB:B7:18:71:7E:C0:15:0A:1E:3E:86:61:5C:42
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584EFCACD8EC1EC4CF24FD792980
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:3017::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d8:ec:1e:c4:cf:24:fd:79:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=dae3271e-4eac-4f63-84f6-2702e8335ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:07:1d:cc:c4:a3:57:ff:da:6b:c3:bf:b3:
                    dd:72:71:e8:83:b4:29:48:fa:12:c6:4d:cd:c1:96:
                    10:a8:d8:b8:56:eb:2a:84:85:52:8d:27:fa:b6:9a:
                    0c:ff:71:8a:39:ae:21:82:8d:ec:f8:2e:35:24:b9:
                    62:87:59:07:40:ad:11:99:75:fe:39:e6:94:0c:b5:
                    45:90:c8:0e:ca:82:6c:38:00:d7:96:d5:f7:b9:96:
                    fb:15:fe:8a:35:1f:4e:e3:56:3d:0b:11:2e:ef:79:
                    70:7f:f7:a9:23:d5:8b:23:76:5c:ae:30:0c:31:85:
                    23:34:6e:71:03:32:c7:03:d2:28:50:8e:09:d3:55:
                    0f:83:c0:0a:9a:ea:74:c6:f9:23:b7:80:a0:1c:6d:
                    62:5e:00:9b:2c:7e:0c:1f:59:3f:24:1b:a8:20:d9:
                    2f:1e:f4:81:ca:91:37:d7:f9:ad:d4:ee:07:54:b5:
                    62:bd:46:c3:4f:3f:7a:9b:4a:cd:1c:da:2c:ae:f2:
                    29:7c:94:45:cb:2e:6a:3e:7f:0a:00:49:80:23:49:
                    ba:23:d9:9c:16:dd:3b:b8:bb:48:2c:d6:ec:d0:2e:
                    29:e3:f4:e4:93:bb:fd:33:7d:6f:b9:40:ec:af:d7:
                    9f:25:cd:e5:dd:f9:40:28:31:44:49:d4:5b:20:3e:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F0:49:F9:FF:7F:EB:B7:18:71:7E:C0:15:0A:1E:3E:86:61:5C:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3017::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:5d:23:67:5d:61:28:20:d0:52:20:2e:df:64:5b:b0:5e:f4:
         eb:e6:56:d7:43:8f:80:dc:5e:07:e6:e7:b9:50:7e:da:77:27:
         02:e2:99:fe:3d:73:25:5e:95:fe:ab:44:65:67:ec:38:5b:2b:
         a4:c7:88:87:75:90:4c:d4:ab:98:9e:ee:d6:ac:a3:fb:2d:48:
         da:01:ac:07:f2:1b:b5:72:0a:57:f6:1e:a2:9c:69:9e:7b:53:
         fb:aa:78:f3:99:65:7f:17:75:a1:ce:1c:96:11:d2:18:8e:ca:
         34:d9:62:d8:a7:4e:da:d3:f0:75:24:1b:36:ee:6b:40:5e:15:
         cc:61:8c:58:f8:d7:f6:53:a1:2d:b5:dd:c0:c1:22:c2:4b:36:
         28:52:4c:75:f2:6b:cb:6d:9e:98:4c:da:ee:7f:a4:b2:91:f8:
         99:8d:c2:a0:cb:36:c3:d5:b4:a5:94:ab:76:7d:2f:ac:94:a5:
         88:8c:d3:8c:29:fb:59:89:2b:4c:de:00:ba:11:67:c2:15:c8:
         59:8b:89:02:21:0b:b6:37:ff:04:72:73:1a:c6:f7:cd:84:ab:
         57:f1:f2:b7:29:07:dc:c4:bd:80:da:0b:01:e2:d8:f1:fd:d7:
         91:7b:f8:b1:8e:99:ff:b0:52:4a:09:89:fb:56:d7:25:84:2f:
         0f:2b:d4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:10 2026 by rpki-client