Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc14f177-f976-3270-af13-df78e5e68aec.roa
File:                     fc14f177-f976-3270-af13-df78e5e68aec.roa (raw, json)
Hash identifier:          Xx1D1btbl9uFUr27N7PR4KBfBRuLcGx/OCp/ZB93ueI=
Subject key identifier:   6F:EF:59:46:B2:E3:CC:C9:A3:F5:C7:7B:11:1C:F3:09:DB:29:BC:F7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584D67DFD539A69C2C006E696100
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc14f177-f976-3270-af13-df78e5e68aec.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:4408::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:d5:39:a6:9c:2c:00:6e:69:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=6c8758f3-38a2-4591-a446-b921fd7527c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:30:20:4b:5e:31:bb:04:79:ed:b0:7d:f8:
                    e2:85:75:a4:13:a2:26:7d:f5:74:2d:f5:f4:88:f7:
                    ff:88:56:b3:47:c3:bf:4e:de:75:9a:d6:a2:6a:0c:
                    ca:de:b0:f9:40:3d:7b:a5:17:31:0b:3d:c9:df:4d:
                    0e:1f:fd:bd:ae:10:3a:91:69:3d:72:03:09:0c:3a:
                    8d:67:e8:28:ac:10:50:8d:32:23:89:93:b6:b6:11:
                    65:95:6c:8d:70:8f:94:51:4c:03:ee:e7:59:7d:1e:
                    53:fa:8d:82:1e:4a:86:3c:53:8a:2c:2f:4e:c7:66:
                    23:f3:5f:83:6b:03:e4:e4:63:8f:3d:bf:79:4e:4f:
                    34:e8:e3:b6:83:e5:5f:bc:89:80:8e:dc:70:0b:54:
                    b9:61:93:54:6e:e7:f5:30:67:7e:2c:87:b2:23:c1:
                    c5:4b:eb:47:42:c9:14:55:f3:bd:9e:45:ea:91:76:
                    05:93:fc:99:00:3f:f8:37:ed:b3:b1:50:2b:bd:db:
                    15:a5:25:49:16:23:a6:30:a6:76:71:af:20:c9:bf:
                    58:c7:e6:d4:80:92:30:b6:84:1c:bc:73:fc:0b:ab:
                    da:b1:6f:90:dd:90:f4:dd:43:bd:9d:88:d3:80:38:
                    9c:33:d0:39:a8:d7:89:54:e8:31:6a:31:fc:31:9f:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:59:46:B2:E3:CC:C9:A3:F5:C7:7B:11:1C:F3:09:DB:29:BC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fc14f177-f976-3270-af13-df78e5e68aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4408::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:6e:6d:09:5c:bf:fb:6d:e6:49:76:ba:88:a1:66:00:9a:72:
         b7:4f:bf:3c:88:47:8f:a0:22:36:b3:5f:45:77:46:be:fc:73:
         45:95:98:a9:16:32:06:07:7d:e6:fb:37:2b:8a:8c:b4:55:51:
         e1:61:53:96:8c:9c:10:7b:e3:49:8c:f9:f2:80:4b:d3:d1:1e:
         2f:74:06:d8:32:14:31:39:a2:c8:4e:72:f0:3c:fe:11:b9:12:
         d5:ba:94:a3:dd:d7:bc:6e:25:74:e7:98:ab:8e:9a:0c:b5:6e:
         70:18:11:9e:f2:45:a3:0a:08:a5:c3:78:3f:5f:f5:72:29:39:
         59:0b:6f:28:4e:c6:f6:c2:3b:b2:fd:82:08:ce:f1:4c:01:a4:
         01:55:fa:43:76:33:5f:90:0f:63:bc:d1:2d:cc:78:5f:11:cc:
         22:3f:e6:ce:b9:e7:8f:ca:93:8f:47:08:98:e3:ef:02:8e:62:
         8a:47:a4:b6:3e:2f:ee:70:f7:50:3a:f9:9b:14:f9:90:bd:9d:
         d0:7d:6f:3f:6b:9a:cd:90:e7:29:31:ee:a9:08:fe:13:8b:a3:
         dd:72:27:fe:b2:87:ef:2f:33:7f:de:e1:0b:64:40:31:b4:3b:
         cd:c1:f7:66:1c:bf:4c:3e:07:c7:9c:ec:b0:0e:31:c0:75:3a:
         26:bc:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:01:23 2026 by rpki-client