Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa
File:                     dc025816-699e-3d55-83b2-314082b93aad.roa (raw, json)
Hash identifier:          l3ew6Bd1AlZx9Me5+N3i/QENRTeVlfqd2jOusV2sWEo=
Subject key identifier:   63:12:E5:5C:58:DF:BC:E0:AD:B4:FA:26:DD:7B:55:5B:12:B7:BB:BA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584C996734C5A7F91C8933EF1D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa
Signing time:             Wed 21 Jan 2026 14:00:38 +0000
ROA not before:           Wed 21 Jan 2026 14:00:38 +0000
ROA not after:            Tue 21 Apr 2026 13:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:ec::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:99:67:34:c5:a7:f9:1c:89:33:ef:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jan 21 14:00:38 2026 GMT
            Not After : Apr 21 13:00:38 2026 GMT
        Subject: CN=f600f406-f5a4-4b56-b5f7-7016adbde0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:7a:fd:b7:06:b4:ae:e8:2a:ae:a9:32:c1:
                    6a:52:4f:76:a5:58:bf:83:84:0e:eb:ce:e0:26:37:
                    c3:c6:e4:db:a2:23:ea:ee:19:17:b9:98:ce:01:bb:
                    bd:25:7b:81:d3:84:af:c3:04:68:77:ab:c3:b0:8e:
                    ac:34:54:7b:8f:9b:a2:dd:0f:f4:27:ed:78:6e:a0:
                    16:d0:70:4b:8a:6f:32:e4:c8:8d:11:de:8d:6c:92:
                    ca:1e:98:81:19:41:b9:33:00:22:20:92:98:d5:78:
                    75:2e:02:da:1a:43:7a:6e:26:fe:4a:72:b1:ac:82:
                    5a:4c:45:a3:60:87:3b:e5:98:e0:f3:54:79:0f:f9:
                    f4:46:29:d5:78:fb:b8:26:31:7f:85:97:23:fc:4a:
                    ee:9f:4e:f8:69:e1:36:c0:b6:2c:ca:59:f9:c4:da:
                    6c:67:ae:fd:25:d4:cf:6f:43:d0:4a:a1:db:dc:83:
                    07:d5:5b:25:33:88:c6:01:bb:4b:ad:38:b5:4e:ef:
                    d1:9f:65:86:7c:68:91:a1:5b:a7:d8:4e:df:8a:1c:
                    8a:e1:fa:0b:b6:7d:68:de:25:2f:e5:c1:04:92:87:
                    11:96:87:b0:b7:93:97:c6:2b:c3:dd:a5:8b:3e:e1:
                    7e:9e:04:9c:bf:0f:e9:82:bf:c1:52:71:bb:d1:86:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:E5:5C:58:DF:BC:E0:AD:B4:FA:26:DD:7B:55:5B:12:B7:BB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc025816-699e-3d55-83b2-314082b93aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:ec::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:65:03:38:bd:ea:3d:39:b0:7c:a2:98:45:26:39:0d:a3:
         a8:f5:f0:80:d9:61:aa:99:04:b1:8d:30:1c:f2:ae:82:2b:25:
         28:79:ce:ed:1d:5e:19:b5:6a:9d:fc:f1:a1:99:46:33:6a:d0:
         f1:c0:70:b8:ed:f3:76:fc:1e:0b:8f:0c:1b:9f:3b:22:1e:64:
         91:ed:e3:8d:f3:8a:c5:d2:e7:1e:1a:f9:8d:bd:5c:25:29:0f:
         69:71:4f:b2:09:8e:47:c9:ef:81:e0:8e:31:b9:21:5c:a7:fd:
         76:f3:08:0a:25:23:85:df:cf:6f:64:6a:cf:1f:1e:2a:6e:e0:
         a8:20:f7:36:9d:e7:cb:5b:f1:44:19:84:d8:26:f6:23:0f:28:
         11:8d:3b:b6:f9:c9:c3:20:7b:b1:bb:25:3a:bb:85:9e:06:4c:
         34:93:68:89:fb:72:d6:f5:32:32:1f:86:6b:bb:3b:70:bd:15:
         a8:61:db:df:12:48:7d:0c:9c:2f:a9:75:35:b8:c7:61:e0:e3:
         74:f7:cf:0d:7f:5c:a8:aa:ec:fe:c0:7a:b2:fa:c7:e4:eb:21:
         e6:86:b8:c1:a5:22:b1:e7:95:be:e6:1a:43:43:4c:da:c5:ad:
         b3:e1:9a:02:0f:4b:a7:8f:f8:68:15:4b:db:3e:f7:62:4c:01:
         55:cb:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:56 2026 by rpki-client