Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d847471-fc9f-3640-bb69-8f30f54c3e95.roa
File:                     4d847471-fc9f-3640-bb69-8f30f54c3e95.roa (raw, json)
Hash identifier:          0hJyqs1byDYkGw3//xE85CgOAoQ0aeGpibb99Nq2XiI=
Subject key identifier:   8B:27:EB:7C:5C:1F:50:30:99:51:82:E1:17:92:6B:C9:96:F3:F0:4A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC876731E240BA54CE3A3D740
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d847471-fc9f-3640-bb69-8f30f54c3e95.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        2606:4700:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:73:1e:24:0b:a5:4c:e3:a3:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=1cf573c5-f0dc-4740-b9a3-56411c130d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:23:48:9f:2c:ee:1f:cf:88:49:df:84:b8:
                    8c:80:5a:45:85:b7:f4:12:7f:6e:26:17:41:2a:ec:
                    0d:c8:fa:99:c9:fc:5a:4b:68:e4:be:fe:96:09:8e:
                    0c:33:f2:f9:93:08:34:1c:ce:c3:92:e7:5a:5d:83:
                    4e:a7:9f:e8:44:6a:6e:4e:01:af:bd:be:b6:24:ea:
                    c9:81:ad:de:52:ff:ce:88:2e:99:8d:9c:a5:9c:67:
                    6f:c2:05:e9:2b:b7:6f:20:51:10:d8:5f:29:ad:bb:
                    ea:ff:f6:c6:1e:39:b7:13:44:1e:86:f3:07:e9:cc:
                    a4:7d:49:39:71:66:73:5e:b6:36:b0:e7:44:a3:b6:
                    10:bd:3b:a6:f4:2c:ab:1d:03:ef:dc:ec:df:e9:74:
                    79:fd:9d:93:3d:e1:c6:70:b9:36:c2:66:c4:0b:8f:
                    3e:79:b7:0a:d0:f8:bc:26:12:26:ff:d2:e1:7b:e6:
                    4c:80:0f:48:1a:12:78:59:14:5d:fe:21:13:14:55:
                    71:70:a1:6d:34:59:8e:61:7b:b7:ae:7f:47:5c:58:
                    df:2b:3e:37:93:e0:30:52:84:d9:85:61:34:3f:13:
                    50:0b:31:e5:52:77:a8:18:be:50:7c:7f:4d:8d:94:
                    9c:cc:b1:39:9e:4e:bd:0c:aa:b6:c0:73:e1:f4:91:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:27:EB:7C:5C:1F:50:30:99:51:82:E1:17:92:6B:C9:96:F3:F0:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4d847471-fc9f-3640-bb69-8f30f54c3e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:e5:63:ba:32:b6:7d:7e:0a:ec:7b:17:8b:18:4e:e5:8e:
         5e:75:1d:96:3e:00:76:22:f2:57:a3:0f:67:7b:8c:ae:7f:b4:
         93:5e:52:ac:1f:22:e3:55:2b:6e:72:4a:e4:f8:54:4a:d6:af:
         2d:67:59:c9:2b:3f:9e:08:12:38:bb:8d:ac:a0:3b:7a:f2:1a:
         e8:1b:50:eb:bf:bf:69:5d:d8:de:fb:44:11:db:41:60:af:eb:
         80:b2:ba:55:25:34:7b:4a:a2:95:41:e3:bb:d4:60:8c:c5:45:
         28:3a:f3:c7:ff:df:37:cd:3c:d1:d6:ea:64:55:ee:f9:99:84:
         70:e8:e9:f6:23:0a:c1:3c:3a:fc:dd:da:fe:45:9b:2f:ae:3a:
         bc:c4:fc:4f:2e:db:af:c7:0a:5e:95:8d:bc:84:d5:69:67:85:
         0f:ce:26:73:fc:be:ac:94:c9:a5:59:48:eb:97:4b:3b:d0:06:
         9a:9a:13:7e:eb:5c:d2:d1:b7:b3:1b:58:b8:b2:21:c5:8c:0c:
         2a:7c:5d:cb:1a:cf:be:20:15:8e:0b:95:1d:22:eb:a0:32:f3:
         61:7a:0b:01:74:a0:60:3e:a2:d8:1f:0e:87:66:d5:8f:36:49:
         43:f9:1e:ba:7d:2e:29:dd:0c:ee:7e:b3:7c:54:2f:f0:44:47:
         c4:75:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:08:43 2025 by rpki-client