Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa
File:                     1d291463-b306-352e-828c-b8b107b89019.roa (raw, json)
Hash identifier:          OWlSJy3G9kRw//RwI/wNmo/uu2fokhBibLebroJgnew=
Subject key identifier:   A1:7C:17:F8:8E:8E:1E:5E:C2:B7:37:37:33:BE:E1:E9:50:A1:E8:4D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584B59A1E1F6BB13021B46770F10
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        2606:4700:4b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:e1:f6:bb:13:02:1b:46:77:0f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=d324e9ca-7f75-40a2-b0f0-1524dfa31400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:5d:a3:56:63:9d:f3:18:4a:3b:7e:54:4f:
                    d6:8e:01:bf:03:80:91:10:48:44:e0:dd:cc:cb:15:
                    40:07:7d:f7:de:f6:c1:25:ab:74:d3:3e:71:1f:94:
                    d2:5a:0b:d3:02:74:78:ac:42:ed:1e:4d:85:44:24:
                    8f:ab:4f:16:16:3a:2d:27:5c:58:6f:b6:7f:af:d7:
                    af:df:4f:78:9c:25:e3:d6:08:97:79:da:d5:9e:98:
                    5f:bd:0d:41:20:28:eb:0b:7e:d5:f4:99:ed:11:39:
                    6d:ef:2b:87:c6:45:b8:db:18:04:5d:39:36:19:a4:
                    a5:81:47:89:e1:21:60:b5:ae:ff:0f:0f:e7:38:87:
                    03:35:1d:dd:ac:7d:d7:d0:63:d9:2f:70:5c:c0:b5:
                    91:b0:1e:eb:8a:19:99:cf:da:9c:2d:d7:a6:4e:24:
                    37:da:49:25:8e:30:72:02:49:b5:fc:9b:08:82:ba:
                    21:4d:b3:18:26:b6:50:d8:9a:38:14:6a:23:e1:eb:
                    f9:1b:75:d6:56:b8:8f:2e:ee:1b:f9:5c:0c:b7:77:
                    e4:22:75:c9:85:21:71:b0:00:0c:43:f7:3e:60:09:
                    eb:25:2b:82:f8:90:52:38:9e:a2:b6:c6:e8:de:b8:
                    07:23:72:14:53:8b:d0:fa:83:ab:48:da:29:5d:05:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7C:17:F8:8E:8E:1E:5E:C2:B7:37:37:33:BE:E1:E9:50:A1:E8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1d291463-b306-352e-828c-b8b107b89019.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:c8:99:e6:59:13:6a:29:d8:94:5d:61:78:86:50:5d:e7:bf:
         a1:b1:a4:28:41:0e:af:b2:12:1b:4a:7a:b5:98:70:df:42:d7:
         e0:89:c7:43:9d:17:ce:46:b1:38:03:32:30:bb:30:c5:d6:f1:
         45:b0:3a:19:cf:0e:3d:c3:ea:8e:65:90:fc:9f:89:70:f0:4c:
         62:88:be:dd:c9:82:8d:a8:a0:64:2c:90:90:ae:9f:2e:ed:9e:
         b1:30:4c:36:2d:9b:00:4d:b4:11:45:93:b7:10:e8:46:e4:1d:
         78:09:94:6f:8b:cf:97:cf:25:1a:14:26:5b:b5:48:58:b6:de:
         67:a2:ea:0e:fa:01:c6:ea:a8:ce:c3:fd:07:d2:54:ff:11:52:
         22:6c:fb:22:17:15:c9:7d:a7:54:bd:56:f3:f7:19:6a:f9:03:
         52:91:53:48:7c:92:43:4c:cf:a9:db:4a:8c:ad:03:ce:ac:6e:
         55:ab:83:a9:07:a1:7a:c4:59:a4:84:38:06:63:d4:18:b5:d0:
         e9:26:75:b8:be:29:a5:b2:6e:78:83:43:0e:4d:d1:b4:c6:3f:
         d5:ea:85:70:5a:3c:65:59:f0:74:e6:41:aa:0e:2b:f3:dd:29:
         78:68:5a:d8:5e:6f:7f:97:e6:ef:25:ab:6f:0d:7d:76:de:70:
         c8:f7:1c:4b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtZoeH2uxMCG0Z3DxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
ZDMyNGU5Y2EtN2Y3NS00MGEyLWIwZjAtMTUyNGRmYTMxNDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibVdo1ZjnfMYSjt+VE/WjgG/A4CREEhE4N3M
yxVAB3333vbBJat00z5xH5TSWgvTAnR4rELtHk2FRCSPq08WFjotJ1xYb7Z/r9ev
3094nCXj1giXedrVnphfvQ1BICjrC37V9JntETlt7yuHxkW42xgEXTk2GaSlgUeJ
4SFgta7/Dw/nOIcDNR3drH3X0GPZL3BcwLWRsB7rihmZz9qcLdemTiQ32kkljjBy
Akm1/JsIgrohTbMYJrZQ2Jo4FGoj4ev5G3XWVriPLu4b+VwMt3fkInXJhSFxsAAM
Q/c+YAnrJSuC+JBSOJ6itsbo3rgHI3IUU4vQ+oOrSNopXQUULwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKF8F/iOjh5ewrc3NzO+4elQoehNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWQyOTE0NjMtYjMwNi0z
NTJlLTgyOGMtYjhiMTA3Yjg5MDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALnImeZZE2op2JRdYXiGUF3nv6GxpChBDq+yEhtKerWYcN9C1+CJ
x0OdF85GsTgDMjC7MMXW8UWwOhnPDj3D6o5lkPyfiXDwTGKIvt3Jgo2ooGQskJCu
ny7tnrEwTDYtmwBNtBFFk7cQ6EbkHXgJlG+Lz5fPJRoUJlu1SFi23mei6g76Acbq
qM7D/QfSVP8RUiJs+yIXFcl9p1S9VvP3GWr5A1KRU0h8kkNMz6nbSoytA86sblWr
g6kHoXrEWaSEOAZj1Bi10Okmdbi+KaWybniDQw5N0bTGP9XqhXBaPGVZ8HTmQaoO
K/PdKXhoWtheb3+X5u8lq28NfXbecMj3HEs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:21 2025 by rpki-client