Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa
File:                     fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa (raw, json)
Hash identifier:          NXSNA2eycKnL9SB8yAIhsanb+2o4r2XVPXqsoBEGBoo=
Subject key identifier:   5C:EE:33:47:CF:24:54:4E:8A:AF:A1:F0:43:A1:A9:40:C0:FB:5E:1C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E5A4A1CFBA1B31F8307212A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     13335
IP address blocks:        2606:4700:3012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:1c:fb:a1:b3:1f:83:07:21:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=46896f9a-b8ee-4cb2-8593-41e275765b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:48:32:2b:d3:67:d9:b1:1f:69:36:a6:56:
                    8c:9f:ce:4a:54:7c:b6:d8:44:4c:c4:c6:c0:1c:0e:
                    f8:14:ea:4a:1e:cb:5a:42:13:5c:dc:ee:ff:52:56:
                    1c:74:41:ba:7d:2e:0a:a7:a6:23:8e:f3:5a:df:88:
                    f2:30:a0:ca:1f:fb:da:a3:ff:68:64:ac:d0:74:bf:
                    4b:ee:7e:81:67:bf:01:af:13:dd:e4:cf:85:3d:71:
                    e5:a1:c5:a9:07:f1:f6:ae:2f:dd:7c:0d:f8:18:1d:
                    55:4c:db:90:cd:a2:c3:e0:da:f6:3e:e8:dd:b5:6a:
                    a6:d1:af:52:ad:42:f8:fc:85:f6:8f:f6:f7:4e:f2:
                    cc:15:1e:17:f7:99:84:40:c4:6f:2e:3e:bb:46:a6:
                    2e:62:b6:5b:b1:1e:e6:84:a7:ab:82:1e:12:72:05:
                    40:79:d3:dc:28:87:1c:69:a1:76:8b:d3:ed:56:c8:
                    30:c5:af:57:96:8b:d1:5e:bd:92:78:65:fd:db:98:
                    9d:91:ca:40:c2:f8:ed:5a:3b:51:02:52:52:54:1e:
                    31:5d:9c:06:bb:c2:72:8b:97:21:29:67:93:14:d4:
                    78:58:69:32:9e:65:3d:ab:0f:6a:36:ca:d7:6a:9c:
                    e9:92:e6:e6:d9:64:1a:05:63:13:68:41:ea:e9:c0:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EE:33:47:CF:24:54:4E:8A:AF:A1:F0:43:A1:A9:40:C0:FB:5E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fe31aecd-d2c7-3f5c-84a8-930c3f19f2e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:0a:32:a6:87:35:e1:38:7a:c8:17:15:aa:9b:47:d9:98:ad:
         5d:65:25:a0:25:14:8e:bd:a3:eb:87:99:40:b3:4e:b6:34:06:
         5e:a8:a7:3f:6f:de:b4:1c:ca:db:2c:3a:97:df:7c:f7:90:9f:
         97:fb:8d:86:e3:e4:ac:82:50:42:1a:e6:19:c0:0b:c2:d1:ae:
         94:29:ac:f0:9a:30:28:4f:52:75:90:33:a1:e0:94:95:dc:f7:
         3d:09:77:da:b6:09:c5:4a:4d:a0:eb:2b:e6:ea:42:9e:7c:1a:
         ee:8f:45:6e:56:ea:98:f5:17:2e:8c:25:33:94:38:c4:c8:56:
         08:38:30:14:6a:34:88:75:45:d6:9f:ae:62:38:bd:6e:6e:89:
         7c:0e:3d:10:38:c6:b1:c9:6e:92:87:d3:fb:aa:cb:fb:ed:b2:
         13:42:7f:ff:f9:bc:85:45:a0:7d:95:f3:78:15:64:31:af:ef:
         b5:07:cc:22:81:e7:a8:55:a4:a9:01:01:a0:61:2d:2b:9b:33:
         5f:8f:29:4f:07:98:cf:93:c2:9a:20:fc:7c:dc:97:19:8b:59:
         ce:be:83:67:a4:9e:8c:c5:fd:a5:d9:e4:22:0e:9b:27:50:12:
         22:0e:0d:3b:73:47:77:43:0e:10:c1:e0:7a:19:f3:95:ed:89:
         0f:17:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:22:01 2026 by rpki-client