Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b940f7d-8e47-343e-9f2d-c50bcb49db8e.roa
File:                     0b940f7d-8e47-343e-9f2d-c50bcb49db8e.roa (raw, json)
Hash identifier:          eCg43rZ0W93/QLttUP3lr0bggOTDiCXPkoB9mxhnwX8=
Subject key identifier:   E9:9D:CB:F7:AE:47:C4:57:94:D2:EF:2D:C8:AD:01:2D:97:17:A9:BD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D14B5ABD9D1DEDF08ACF60
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b940f7d-8e47-343e-9f2d-c50bcb49db8e.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:4700:3007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:4b:5a:bd:9d:1d:ed:f0:8a:cf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=a204e16d-662d-4fa8-a294-abd02bd1c6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f9:96:3c:79:00:47:f0:e4:ed:84:3b:4b:5a:
                    74:54:4c:d3:9b:b3:c0:4a:06:c5:30:9e:66:8b:ac:
                    46:e4:2e:ce:6e:74:58:2c:f6:12:f7:51:5f:ef:12:
                    98:45:6e:ce:10:58:63:db:ef:e5:ca:08:e8:b5:95:
                    d0:31:c6:b9:32:c3:eb:bd:ef:e8:9b:2d:89:0e:40:
                    8d:52:e9:00:80:b0:99:20:b5:c8:e1:de:7f:04:a7:
                    67:5e:d2:82:ef:9e:5a:f2:79:bd:5a:6e:07:04:3d:
                    8e:7e:11:d8:45:33:95:39:81:74:f6:25:9f:4d:8a:
                    49:ca:58:be:18:bb:19:e1:69:65:f3:33:d2:c2:56:
                    b6:99:6b:ad:55:a2:b1:1f:57:50:88:c0:77:83:83:
                    79:97:f7:48:5e:61:18:3b:16:6b:c9:00:e4:85:84:
                    fd:d1:8d:34:a7:f7:d4:8d:d4:4b:6a:e7:d3:c1:ff:
                    31:92:de:19:a9:b5:d1:ac:6e:7f:ca:6a:0f:9e:2c:
                    81:05:30:e2:4a:f9:8c:33:c5:6e:43:c0:bb:d8:51:
                    28:26:8f:cc:23:de:d0:89:15:9c:de:de:a3:ab:28:
                    29:cf:27:7f:55:ea:e2:7d:d2:bc:44:1a:4b:2d:13:
                    e5:2f:96:21:e7:5c:50:07:8b:a0:51:ad:62:14:06:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:CB:F7:AE:47:C4:57:94:D2:EF:2D:C8:AD:01:2D:97:17:A9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b940f7d-8e47-343e-9f2d-c50bcb49db8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:76:07:08:8f:1d:d7:1e:35:11:8c:3f:b0:7b:67:01:cb:1c:
         95:45:0b:78:a1:dc:d0:94:20:ff:b9:88:21:7a:e1:a4:66:92:
         e0:34:f1:ae:56:da:ad:b7:51:1d:6b:41:b0:e1:4f:5d:86:58:
         26:af:93:c9:d6:78:00:cc:16:30:57:87:8f:2a:a1:95:67:c4:
         62:72:ac:d6:8f:ab:d6:82:b2:3b:1c:f6:e3:54:3e:5b:3b:e5:
         3d:ca:fa:74:f2:e5:2e:d8:d1:90:ea:30:68:b9:c4:5d:c4:88:
         e9:18:a0:6e:b5:0d:19:d6:3b:c0:ad:b8:be:9d:a3:c9:56:13:
         0d:e9:99:4c:c0:2f:ed:00:d9:8e:5c:50:92:b8:b7:b7:5d:01:
         6b:b6:b8:d7:62:05:58:94:10:9c:74:45:fe:73:9b:d0:3a:85:
         83:9b:d7:55:4f:bb:50:18:65:c8:1a:77:31:0f:f9:35:b1:d7:
         b8:6a:f6:f0:06:99:05:57:7e:64:23:71:c8:2e:ff:f4:93:09:
         51:90:ce:f4:99:fb:35:e3:71:d7:b1:35:d9:bc:b4:be:b5:8f:
         14:5c:e5:0b:99:a7:05:b0:eb:96:fe:ad:2f:5d:9c:48:1b:ff:
         78:f8:cc:e4:79:57:6c:00:e3:54:42:d2:cc:9c:0f:69:95:a3:
         a1:32:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:50 2025 by rpki-client