Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19c03a1a-401d-3dd1-91a1-84f360632a8f.roa
File:                     19c03a1a-401d-3dd1-91a1-84f360632a8f.roa (raw, json)
Hash identifier:          dZCyMo299BF7PjAeIBEVSKxp7Or2H99pxooW9+2B9PU=
Subject key identifier:   F1:62:B8:99:27:91:11:DA:85:7F:D6:1C:01:45:CE:2D:A4:6F:CF:98
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584ADD66701985629341A2798D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19c03a1a-401d-3dd1-91a1-84f360632a8f.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:54c1:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:70:19:85:62:93:41:a2:79:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=285f8547-725d-4a2a-8bd3-f19781a801ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:53:f0:a9:c8:b7:8c:22:fc:4f:2a:0f:f3:
                    00:95:9f:db:f0:9c:8c:69:37:f9:02:6b:c1:be:a6:
                    3a:65:2e:75:51:2e:41:c4:7f:a6:88:21:6a:b8:98:
                    12:2e:22:47:7c:46:a2:b2:f4:59:12:3b:a6:54:af:
                    2a:ea:4b:fa:78:f3:52:6b:5e:c2:ef:56:09:d7:27:
                    b9:33:1f:8d:32:7a:24:b9:d0:2b:fa:1c:fb:cb:84:
                    3f:35:af:95:f7:b6:fc:00:6a:7f:75:1c:81:12:50:
                    37:c6:90:06:5e:79:a5:2f:72:e9:d2:b6:1b:23:6d:
                    55:5f:8d:2b:ef:90:b3:75:72:67:8f:7a:da:de:31:
                    32:76:e8:b7:01:9f:5f:bb:5f:3f:99:73:82:cf:d5:
                    45:07:7b:af:a1:6b:81:3b:8f:49:d8:e5:97:d3:a1:
                    3f:f1:69:e9:83:e9:4e:b4:4d:d1:fa:42:e4:73:ff:
                    06:88:f7:0b:5d:fa:b8:00:8c:7f:69:11:f0:06:14:
                    09:1c:23:1a:50:c9:65:15:61:d6:6d:0b:52:b8:d7:
                    d5:3d:dc:f3:42:3b:67:44:1c:a2:93:e4:7e:e7:2a:
                    09:61:56:f8:0a:6a:50:db:b2:90:b7:b5:2d:99:fa:
                    56:b4:80:70:ef:83:96:fd:2e:3f:9b:10:c5:b5:03:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:B8:99:27:91:11:DA:85:7F:D6:1C:01:45:CE:2D:A4:6F:CF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19c03a1a-401d-3dd1-91a1-84f360632a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:f3:4a:8c:87:07:8d:34:b7:4e:03:dc:64:c4:7a:a7:78:
         9e:64:70:26:32:1f:d5:19:e3:0c:2b:8a:ea:2e:45:7d:34:9f:
         71:eb:2f:c0:00:b7:8a:2c:c3:94:b8:35:46:5e:f9:dd:be:41:
         8b:cc:a5:09:c4:e3:d9:9e:7c:53:27:e3:d8:76:2b:9a:5f:55:
         48:ee:80:11:b7:20:5c:ed:a3:2f:77:62:7f:5b:7b:be:77:0f:
         68:ae:da:1d:44:23:4f:6e:17:0c:eb:5c:c4:d6:41:d0:90:52:
         b7:14:89:f4:d4:3b:9e:84:6a:d8:4d:41:f0:97:94:49:c5:e2:
         67:ca:96:20:89:09:1c:c2:b8:f3:2b:dd:a9:f0:bd:f1:4d:11:
         f0:c0:7a:b1:b2:02:d0:c0:47:19:f3:aa:48:75:03:b2:48:25:
         fa:82:45:5d:fd:f4:6c:16:7e:37:7d:d3:6f:ee:9d:dd:c8:fd:
         5c:4c:d2:ff:e5:2f:d6:da:67:53:20:20:4d:0d:9d:b0:ef:32:
         4b:a0:61:3a:d4:bb:8d:cb:7a:1c:f8:74:3a:86:90:5f:51:12:
         38:40:de:20:8e:2f:e9:06:49:b9:61:ba:3f:f3:af:40:8a:1a:
         6c:d4:c8:18:c5:87:8b:93:46:c9:f9:89:cd:e5:3f:7f:af:a7:
         ee:d8:78:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:19 2025 by rpki-client