Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa
File:                     44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa (raw, json)
Hash identifier:          z9hdJTJVyk48tSc3+EaaYPTq2UbFuO8zV6GQng1KtqA=
Subject key identifier:   55:AE:FC:AF:43:C6:CC:8B:76:AE:F7:63:82:47:CA:9A:76:46:D5:19
Certificate issuer:       /CN=befc84f3-62e1-4148-9252-a5e35e1f9afc
Certificate serial:       010D0C9F4328584E85898E3AB27AC46115674700
Authority key identifier: DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa
Signing time:             Thu 16 Jul 2026 20:48:11 +0000
ROA not before:           Thu 16 Jul 2026 20:48:11 +0000
ROA not after:            Wed 14 Oct 2026 20:48:11 +0000
asID:                     2732
IP address blocks:        2607:23c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:89:8e:3a:b2:7a:c4:61:15:67:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=befc84f3-62e1-4148-9252-a5e35e1f9afc
        Validity
            Not Before: Jul 16 20:48:11 2026 GMT
            Not After : Oct 14 20:48:11 2026 GMT
        Subject: CN=4cb2d006-4526-41dd-a61b-0ce375221438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:a2:67:57:27:42:ff:99:68:23:a2:53:a9:
                    bc:7d:54:ad:7f:7d:9a:48:b5:0b:ed:c8:9a:15:f3:
                    55:e7:a4:a5:3e:39:7b:09:c1:c8:b7:f6:8d:bf:f4:
                    9e:8b:e1:78:11:e8:b4:db:a7:18:c3:0d:7b:c2:1f:
                    6e:6a:e5:63:b3:1e:2c:e2:e8:38:91:58:a8:15:f8:
                    e1:e9:e8:a2:f8:7d:44:34:45:0c:70:30:30:ee:55:
                    7a:84:63:f8:81:62:73:05:8d:d7:3a:45:95:3e:34:
                    20:fb:e3:31:3d:80:f7:d0:91:e2:37:7c:76:7e:4a:
                    24:80:dd:fb:fb:a6:23:ee:ea:34:d6:40:d5:3a:72:
                    2c:56:19:b7:9f:6e:2c:e2:c6:dd:51:be:cd:c7:61:
                    e1:20:da:44:77:0f:8e:de:db:70:da:d3:0e:5f:e8:
                    5d:ff:aa:fc:5b:95:63:6a:ee:59:c8:90:c3:ca:e7:
                    36:0b:ea:ae:d8:50:f1:58:30:24:be:c0:3e:dc:28:
                    49:94:15:e7:e3:68:65:36:53:5c:6c:5f:69:8f:61:
                    16:03:69:c0:a4:b7:6c:93:e6:84:c2:d8:d7:ac:a4:
                    82:e4:3b:46:02:74:07:01:e5:3f:54:d9:b9:d1:cf:
                    9c:27:6a:a9:85:13:5a:bc:d5:14:52:11:d5:6b:f5:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AE:FC:AF:43:C6:CC:8B:76:AE:F7:63:82:47:CA:9A:76:46:D5:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/44c2d3b5-fb9c-378f-8f1b-c457d969c969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl

            X509v3 Authority Key Identifier:
                keyid:DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:23c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:bd:31:59:f3:12:bf:68:3f:2f:a7:c7:bd:c6:3b:00:e4:
         11:54:eb:86:00:46:bc:32:b3:54:90:cf:6d:0a:8a:36:97:a6:
         b0:e8:93:74:5e:73:41:da:60:3d:dc:b1:55:af:ab:a8:24:db:
         0c:82:01:3c:51:35:29:a4:eb:e1:69:d2:0d:34:08:54:a1:92:
         bc:fb:8d:9c:57:ba:25:aa:9e:69:6f:f2:5a:7f:dc:3d:d8:9c:
         a5:f9:ae:2f:52:68:34:ba:ba:0e:d5:ef:5f:de:70:6b:9f:f9:
         8b:ce:65:1f:52:e6:e0:c5:37:7c:5a:9b:06:fd:37:7b:b7:c3:
         05:8c:c6:68:2f:ae:ef:e7:7b:72:46:1b:c3:79:b9:4b:29:a1:
         f5:08:a4:15:8f:5e:22:17:c0:2f:dd:05:7c:5b:e9:52:ea:c7:
         b7:47:97:9d:df:18:74:cb:22:79:78:46:72:d5:0e:f6:31:93:
         d2:4d:3d:7e:dd:26:1c:c1:65:76:30:a6:03:2e:62:c7:e0:42:
         32:90:fb:b4:71:4e:0c:96:85:03:88:ad:51:ec:2b:94:f6:d1:
         e2:4a:02:72:fe:ef:32:c9:8c:f6:3a:ca:51:18:05:fc:2b:15:
         08:12:f3:b9:9e:3f:bd:98:3d:5e:32:c4:62:a2:80:20:d3:15:
         5c:3d:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:26:55 2026 by rpki-client