Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa
File:                     0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa (raw, json)
Hash identifier:          QcOx1llmYZpkh6/j17rrkaJhc/pwskoCKlQYaE9I6po=
Subject key identifier:   AD:32:60:DE:94:D5:93:E0:A1:60:4A:A8:D1:48:B1:88:CA:69:24:F0
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D13855111A79AC45AC8D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     139242
IP address blocks:        2606:54c1:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:38:55:11:1a:79:ac:45:ac:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=58d60901-7ecd-43bd-b604-2cc4073d9b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:da:44:b6:03:5c:87:33:7b:f0:d5:20:86:66:
                    50:7f:bc:bf:44:ee:fd:96:8b:02:d9:5c:38:75:19:
                    26:e0:36:5c:46:87:9a:9d:c5:a6:0e:db:0b:7f:e8:
                    5c:27:38:d9:7e:45:25:16:bd:f3:45:63:e0:a9:a4:
                    64:9a:66:c3:46:e3:be:f6:05:44:02:94:49:fb:4e:
                    49:42:a9:f0:f2:ed:83:df:9d:b4:1f:23:cd:e5:79:
                    10:ab:0c:a4:1e:91:75:03:b6:1a:51:e4:be:27:72:
                    b5:45:ac:54:d0:e5:80:38:ae:4d:0f:2d:70:53:19:
                    69:de:8a:3c:31:4a:83:b5:51:ec:38:08:bf:fb:7b:
                    82:08:f3:39:ca:d4:b7:75:f0:c3:c7:a6:29:b2:8f:
                    8e:ac:cf:e3:02:0b:ff:a1:83:d9:3f:34:9c:a7:53:
                    56:3f:d5:33:01:3a:a5:e3:c2:c4:57:62:96:71:c4:
                    32:db:45:12:7a:ee:92:df:53:b0:36:c8:5b:8b:a1:
                    59:e8:80:59:d3:fc:e2:c7:7c:d2:0c:5b:4f:f1:95:
                    cf:bc:6e:79:4d:9d:b2:4e:27:a3:f3:ba:62:6d:4d:
                    10:45:9d:7f:b6:7d:2e:8c:ee:f5:15:7e:bf:af:0e:
                    98:07:42:12:ba:98:33:3a:8c:9e:03:3a:7e:d4:07:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:32:60:DE:94:D5:93:E0:A1:60:4A:A8:D1:48:B1:88:CA:69:24:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0bf7d3b8-f798-31be-a25a-13efeea9c27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:bf:34:aa:25:c3:9e:6a:b5:8e:99:98:4c:5d:3d:e6:65:
         e7:16:b5:22:72:ea:b4:69:d7:43:4b:39:d1:6c:11:b8:a2:23:
         cd:2e:e4:9b:05:27:da:87:b1:dc:0b:69:a4:66:46:41:51:3c:
         7d:1e:72:ca:58:58:50:f4:d6:4e:81:3a:06:98:1f:8e:5b:ca:
         0e:de:48:55:2a:6e:d3:52:e7:8e:b9:69:d9:6b:be:4f:4c:fc:
         51:88:30:0a:5f:1d:6b:5a:25:26:b0:91:1b:98:17:b5:12:f7:
         9d:8b:74:13:31:75:3b:48:00:a3:ba:1f:40:b4:99:66:fc:d1:
         59:85:bd:7b:6f:42:10:c7:cf:76:f1:8a:dc:f3:ce:a6:0f:a6:
         34:78:e6:5e:e4:08:96:9b:c3:ed:4d:01:77:39:a7:7b:6c:05:
         c5:f8:ef:09:38:95:32:30:68:8d:2c:1b:87:57:2e:9c:49:a0:
         3d:00:3f:07:00:9c:55:7f:a6:35:e0:12:0d:92:ba:27:79:76:
         ed:91:f9:0d:87:4d:2a:15:d4:a8:93:9c:25:05:4e:9c:29:00:
         8a:41:0e:c5:00:26:dc:e8:8e:0f:66:e7:0c:42:bf:ed:ed:b5:
         c5:1a:e5:23:f7:a7:8d:9a:04:72:91:94:bf:23:8f:4e:e8:3c:
         52:d8:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:10 2025 by rpki-client