Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e068aa75-a530-3dd8-835b-20966ce327a3.roa
File:                     e068aa75-a530-3dd8-835b-20966ce327a3.roa (raw, json)
Hash identifier:          dlHs9G2qYOY7L/q+lRx+BRmOT/Yu43zLztweo1a+DIU=
Subject key identifier:   B4:22:A5:5C:44:51:7A:0A:C1:A3:50:CB:94:D6:92:A8:72:70:90:08
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D651534A074C7C94C939CED80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e068aa75-a530-3dd8-835b-20966ce327a3.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     13335
IP address blocks:        2606:4700:b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:34:a0:74:c7:c9:4c:93:9c:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=fded9131-950b-4325-9cea-38f144cd83c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:3a:ee:d7:f3:45:77:7c:82:cd:3c:74:31:
                    3d:ec:6c:3a:a6:cd:62:67:e2:e0:8f:0b:13:67:96:
                    5c:72:65:e0:24:91:f7:b9:8b:b9:d6:81:ce:48:82:
                    41:f0:8d:0b:3f:e9:2a:fc:98:bc:d8:0e:38:88:77:
                    5b:1e:c2:4c:9b:63:ab:66:af:6d:c5:be:de:49:66:
                    a1:3e:c6:e0:3a:d8:5c:a5:3a:96:96:22:cc:c5:91:
                    94:b5:86:dc:70:d3:d4:17:35:3f:c1:52:c7:a6:b0:
                    a8:d0:8f:2b:33:eb:0b:c6:8e:ac:f3:91:b2:35:40:
                    a0:4e:5a:ca:8d:df:f6:7e:b0:55:92:b1:bb:87:53:
                    4e:2b:62:5d:eb:b5:ae:0f:1e:15:9f:34:8c:2a:98:
                    45:b1:f8:20:9e:47:7c:6c:5f:08:a3:f0:a1:32:a7:
                    66:97:f0:7f:a3:e3:13:9a:e9:d9:af:78:ea:21:cc:
                    0f:ca:76:59:73:43:ca:f5:35:8c:c4:8d:7c:fe:84:
                    ff:bf:cf:c3:5c:53:80:cc:d8:bc:e5:a9:43:12:4a:
                    64:ab:56:f9:99:b3:ef:eb:84:8b:5c:32:6c:77:59:
                    85:c7:8f:16:e3:b6:ca:89:7b:42:09:fa:31:3d:39:
                    b3:25:4d:3c:56:81:28:fb:59:26:30:7a:d4:72:46:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:22:A5:5C:44:51:7A:0A:C1:A3:50:CB:94:D6:92:A8:72:70:90:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e068aa75-a530-3dd8-835b-20966ce327a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:b0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:f4:74:c7:30:dd:e0:a1:00:f1:bd:22:39:6f:13:18:20:15:
         85:06:e3:04:ca:f1:a8:8e:34:b9:dc:0e:fe:f1:db:31:bb:5d:
         45:33:93:01:5b:bd:07:e0:b6:d6:5d:fd:13:dd:9a:90:3b:9c:
         04:4e:1f:5a:cd:a1:8c:66:35:68:01:90:2e:5a:01:96:37:0a:
         0a:88:86:56:ab:de:a9:92:f6:81:57:fe:d0:33:08:c7:81:d9:
         d3:af:7b:05:cd:c8:fc:14:82:d6:ec:ea:b5:9a:a4:45:d8:89:
         ca:84:2f:20:03:d0:d8:08:c1:19:7a:9b:95:77:58:32:2e:83:
         87:fb:03:32:e2:e3:22:e0:42:3a:0c:4e:ba:4d:a1:28:ae:3d:
         dd:74:ad:92:3e:e7:67:60:a7:3f:48:5e:30:bf:65:bb:fd:a4:
         ac:d8:0c:f4:b6:71:f1:1d:5a:ba:f1:7a:77:d6:32:2d:9e:cc:
         c0:fc:6f:44:30:31:64:77:cb:73:19:17:e9:22:b3:6e:1e:b2:
         46:1f:25:1d:25:9f:97:b7:32:50:c1:bd:4d:a8:21:55:35:cb:
         de:a0:a4:d6:ba:30:e9:28:48:eb:8f:d0:c0:d1:e1:e5:b2:56:
         c9:f6:88:91:d8:28:6f:4f:a0:2a:53:7a:39:b0:c7:d0:2e:1e:
         15:89:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:56 2026 by rpki-client