Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa
File:                     dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa (raw, json)
Hash identifier:          Ve+mKIMHCVz0L8oSBoPrGDqZzqmpmOyAH2xqnjx5euk=
Subject key identifier:   1D:55:08:EE:10:55:F1:C8:FF:BD:4C:1A:32:21:BE:8C:CA:9B:7E:A0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D7A053E002B402459CB03B880
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     395747
IP address blocks:        2606:4700:3131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3e:00:2b:40:24:59:cb:03:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=62dd799e-6e70-4d3c-86fa-02262adb4164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:a5:4e:ff:e9:d5:eb:66:6f:60:74:1e:5f:
                    79:72:df:09:47:89:a0:77:84:5b:38:66:87:3d:82:
                    5a:b3:dd:72:f6:06:0b:c1:6d:23:74:08:39:1d:95:
                    90:24:26:e6:88:13:5b:a8:1b:03:ec:cd:7d:b7:9d:
                    3e:a6:cd:93:76:30:23:a9:c1:ad:af:22:02:62:64:
                    69:e8:d1:6e:47:f2:31:e3:8a:5c:3d:73:5b:69:77:
                    3b:cb:60:41:a0:f5:0f:18:7e:40:cb:57:0a:53:4d:
                    ed:32:7e:db:1a:12:f9:10:c0:33:20:3d:e0:ff:9b:
                    99:c2:76:a0:90:b5:f5:e4:a7:9b:50:ec:2c:05:49:
                    bd:90:0e:a3:e6:91:da:5d:e0:b6:77:d5:ea:5a:c4:
                    fd:ec:64:e8:52:9b:1b:47:63:83:39:91:7a:47:d1:
                    43:bd:a3:97:e8:97:d0:ce:88:b3:65:fc:d6:50:5b:
                    0f:c6:58:a7:9d:de:cb:e2:32:c7:cf:ca:77:d0:cd:
                    47:92:2e:54:7d:83:e5:47:2c:34:f6:95:91:42:6f:
                    46:50:b8:1b:a2:db:77:f2:12:c8:4a:dd:58:52:83:
                    2f:df:a7:1d:6e:a9:96:a6:da:e3:56:61:c8:3c:d4:
                    0d:66:06:47:fb:b2:4c:8a:c0:db:0b:32:bf:7a:4e:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:08:EE:10:55:F1:C8:FF:BD:4C:1A:32:21:BE:8C:CA:9B:7E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dccdf9c2-fafc-361e-b4bf-8d082a11de70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:88:06:bf:ae:f6:80:60:33:a8:03:f4:d2:e4:e4:e0:66:86:
         bb:87:51:0c:c3:77:47:a6:4d:16:ab:00:3c:45:c1:b8:33:ec:
         b7:f6:0f:8c:d0:84:2b:9b:ee:e7:c3:ca:8d:d1:48:de:d0:f7:
         a0:fe:f1:40:a1:cd:5f:81:9e:4e:b8:0f:ad:29:23:55:c0:e6:
         40:b7:9c:bb:fd:43:28:2e:5c:e7:77:7c:91:e8:2a:4b:db:dd:
         0a:4a:92:e5:3d:23:58:4b:5c:6f:1a:88:b9:4c:6c:cd:5e:93:
         63:00:de:a3:f9:e6:7f:31:21:b5:5a:74:7a:93:77:6b:65:e7:
         55:b3:88:36:03:58:0a:0f:cb:d5:e2:31:36:82:0a:5b:c8:7f:
         27:3e:e6:cb:38:6f:31:c4:8d:79:b3:06:fc:a3:31:f0:0f:8b:
         a2:2d:3c:e6:bf:3c:fa:13:63:d2:5b:e4:f2:d6:e0:d1:90:40:
         f2:0a:52:10:25:3e:24:52:a8:c9:8e:8f:82:f0:f8:77:e1:60:
         f6:40:4e:9f:c5:8e:8b:c2:f3:fd:da:d4:dd:e7:1f:9b:11:6a:
         66:0d:b3:80:24:4b:4f:ac:37:be:97:e5:34:6d:1d:f4:05:09:
         57:5e:6f:9a:3d:3f:41:3b:89:d7:8f:41:54:42:42:4c:81:a5:
         dc:cc:0f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:01 2026 by rpki-client