Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2aa1ee8-28de-31b6-8739-a4457b98b2fc.roa
File:                     d2aa1ee8-28de-31b6-8739-a4457b98b2fc.roa (raw, json)
Hash identifier:          7lAZ+stBuSp1d28kqhOXb4IY5Z5eb7JeOxUJSPmlgxs=
Subject key identifier:   70:81:2D:5A:7A:64:EA:E1:69:ED:A1:B7:3F:CE:DA:6E:B8:59:89:EB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A053AFF709A0D4BF8380B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2aa1ee8-28de-31b6-8739-a4457b98b2fc.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     13335
IP address blocks:        2606:4700:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3a:ff:70:9a:0d:4b:f8:38:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=db9e77a8-d73b-4c9e-b2f2-17a2c595bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:a4:e1:5b:db:75:9b:30:82:74:46:57:e1:
                    cb:38:51:7b:98:31:0d:a5:03:64:d6:72:5a:79:15:
                    0a:fb:9c:5e:07:64:a1:fd:31:ab:6e:87:b6:03:82:
                    27:9a:5f:f5:45:4c:b9:b5:16:2d:f5:99:9b:47:9e:
                    a2:23:d6:02:34:e6:86:21:34:6f:13:7b:9d:c2:1b:
                    8f:43:37:e9:a1:ad:f3:86:fa:7f:fb:82:22:df:71:
                    08:ab:89:07:bd:f8:76:7f:9d:67:04:25:c3:9b:91:
                    00:e1:d7:ff:e7:20:7d:86:e0:0c:f5:2b:e1:f1:90:
                    c1:68:3c:99:c0:df:15:c3:b5:4f:14:5f:bc:00:9d:
                    6d:c3:bc:05:3c:9e:88:d4:44:88:ca:56:26:96:8e:
                    2b:e8:60:8a:4d:d6:25:b7:4d:06:91:31:44:95:c3:
                    44:37:40:ee:87:82:0d:06:27:9b:2b:29:8a:91:28:
                    9d:7c:67:48:e2:58:ed:86:41:f8:fb:1b:90:55:e9:
                    b9:f8:4b:fa:32:a2:ae:ae:b2:ae:92:3c:1c:c7:c4:
                    c9:43:48:c2:4c:b9:bf:1b:60:dd:3e:8e:71:72:89:
                    ef:9a:71:4a:7f:c9:de:a9:f3:d4:1e:c5:6d:44:71:
                    06:7c:58:ac:74:52:cb:25:6f:fd:6b:09:1f:74:60:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:81:2D:5A:7A:64:EA:E1:69:ED:A1:B7:3F:CE:DA:6E:B8:59:89:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2aa1ee8-28de-31b6-8739-a4457b98b2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:d9:b4:11:42:8a:d8:32:99:d0:f8:54:f8:d2:fe:20:c6:
         ed:d0:4a:b3:6c:db:28:72:7c:ed:6c:b3:65:82:f6:45:cf:d3:
         b0:2c:b7:d0:c3:8f:d2:76:9c:f9:f8:a9:7d:11:33:c7:44:37:
         7e:e7:76:de:21:3e:08:29:13:e2:08:6f:5f:6b:0a:a8:ff:61:
         23:0a:84:6b:3b:7a:71:bc:a8:3f:56:d9:5b:0d:c4:f3:17:1b:
         7a:10:03:4f:39:b9:ea:2b:01:32:4e:92:54:d1:ce:83:05:07:
         5d:df:52:68:6c:14:cb:0a:47:9d:7e:11:5d:2a:89:2c:2e:3c:
         2e:05:42:79:df:cf:79:92:6c:56:ad:79:4c:03:b3:15:ee:67:
         f0:bb:d5:20:e2:7a:16:e0:d8:d5:34:c6:57:76:d7:3e:0e:c7:
         26:2b:c6:e7:3f:e9:f1:e1:c9:6f:55:67:ca:0b:69:fd:99:4d:
         8e:6e:03:45:2c:c0:31:ac:51:17:a8:88:bb:70:75:7d:6b:3d:
         ff:60:ff:99:bd:5f:ca:b5:44:2f:e1:2f:97:22:bc:65:41:ac:
         db:52:79:75:73:77:a8:fc:56:c0:7e:4b:db:79:1b:fb:26:fe:
         a9:86:94:c7:04:4d:66:7a:8e:ef:f5:13:c1:cd:2b:0d:92:be:
         bf:a1:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:33 2026 by rpki-client