Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa
File:                     ef20946f-57c3-3a83-97c2-6893c93b3951.roa (raw, json)
Hash identifier:          2mQ8eXC01soM9jPffZ/HE7cucBWaiQlmKuCyIDe64Y8=
Subject key identifier:   46:EC:89:61:85:55:3B:3B:AA:B5:F9:9F:45:C8:82:3B:B5:7D:AF:33
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D71A523BD68ADEBCDBD302E00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     13335
IP address blocks:        2606:4700:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:23:bd:68:ad:eb:cd:bd:30:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=5e0b240c-395e-4994-9d2f-cd7363de1514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:df:82:85:9f:8d:9a:b6:17:66:cd:78:09:
                    b3:dd:89:85:b3:9e:5a:0b:0c:71:a4:83:c1:e5:46:
                    0c:bd:42:17:16:fb:c9:d1:3c:11:19:14:d3:46:58:
                    4e:ab:d6:47:57:db:fd:37:ca:4a:aa:7a:b1:5e:b4:
                    1b:0b:db:57:94:22:39:e3:12:89:40:11:22:3e:4c:
                    f3:80:0c:40:21:15:a3:d2:ec:b6:4c:30:87:ed:1c:
                    e7:77:ac:27:35:13:76:bc:e1:78:8f:69:fe:4e:2b:
                    19:06:8e:f9:fc:0f:c3:e5:3b:f3:41:dc:10:c0:49:
                    05:78:6b:89:c4:c9:d5:39:9a:1b:35:a7:6e:30:37:
                    e8:05:f0:dc:d8:90:64:7d:e9:46:f8:e8:af:3a:c1:
                    94:be:bc:08:df:60:b2:07:f2:5e:70:26:6f:db:e9:
                    bb:ef:83:7d:b2:fb:39:f0:42:81:a7:3a:80:70:68:
                    c8:b7:33:32:9b:bd:85:ff:49:d5:52:bc:ea:68:0a:
                    06:89:37:aa:fd:6f:2d:c9:92:ac:93:87:f6:1f:26:
                    6e:cd:2b:1b:ff:0c:79:f3:c3:f7:7b:11:2c:cd:8e:
                    51:e6:3a:a0:25:44:96:b9:74:0f:76:5b:64:da:84:
                    dc:0f:53:b6:45:db:ed:8c:4b:fb:3a:94:35:a4:e4:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:89:61:85:55:3B:3B:AA:B5:F9:9F:45:C8:82:3B:B5:7D:AF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ef20946f-57c3-3a83-97c2-6893c93b3951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a8:fd:69:8a:d9:86:2e:4c:1a:f9:41:66:a5:4b:4f:fd:82:
         7b:2f:04:58:7f:57:ca:86:56:4e:0a:f8:ab:51:68:2e:75:b2:
         6f:14:34:15:eb:2d:9f:37:a7:e6:6b:90:d0:e5:d4:1a:0c:46:
         67:26:65:fb:d5:35:ba:97:61:e1:d8:75:e4:29:fb:19:77:80:
         0d:8c:99:9c:0c:36:f1:96:d5:5d:53:21:be:4b:11:a8:d3:2f:
         f7:38:2f:88:1d:2c:37:47:9a:17:e3:43:90:f3:86:b6:c6:3d:
         d9:b0:a8:c9:95:28:b9:45:89:73:c2:60:52:0e:83:4e:29:dd:
         3a:ba:00:1b:31:dd:2e:fa:e1:cd:75:5e:b7:83:25:5c:ca:d6:
         14:52:36:5b:ec:1e:9f:06:ed:41:d1:f2:d1:e4:54:ce:35:1a:
         8d:bd:a3:3f:d5:f8:8d:fc:20:fe:d7:83:7e:16:09:72:e2:5c:
         6b:da:76:43:e4:bb:74:9b:4a:12:40:80:85:1c:ec:fc:ca:4f:
         d4:32:7f:15:5f:cf:37:71:2a:6e:83:e0:59:a5:46:75:eb:7b:
         23:10:6e:f2:c0:39:81:61:c3:ee:91:e2:ed:b3:e0:11:b0:7f:
         f6:68:fd:a7:6f:1c:1c:8d:87:cd:b0:26:b3:d1:ba:94:d0:43:
         0c:1e:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:44:52 2026 by rpki-client