Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa
File:                     546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa (raw, json)
Hash identifier:          dJp8F9ahTIMqe4wdfaWAru7D1eget2s1j7CvNNeig4U=
Subject key identifier:   75:F5:A7:B4:A5:82:7F:41:A8:1C:F5:7C:07:9A:97:DE:E8:B3:A1:B7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D14D880FD8EA5DE54B2D00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:4700:403d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:4d:88:0f:d8:ea:5d:e5:4b:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=6dd208e5-0c83-4414-9e8f-e172565d05ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:d6:aa:b8:2f:5e:5d:7f:6e:8b:29:ef:2b:
                    c0:b1:4b:30:0a:ac:07:0f:ad:72:5e:69:9b:51:98:
                    a6:e7:1a:d6:b4:3c:f5:e3:25:6c:09:23:5b:77:ec:
                    33:34:0a:5e:5d:5c:d0:e6:ff:81:1d:6d:f0:f9:47:
                    2a:13:50:78:ca:17:0c:ed:ac:79:bb:68:40:9a:f2:
                    5f:c5:69:8a:52:6f:83:b6:c5:f5:82:07:25:73:d0:
                    a6:31:a3:01:e9:69:0b:2d:d6:ab:71:4b:63:83:fa:
                    6a:49:af:4a:2f:ef:d3:74:cd:d8:ee:d1:91:2f:d2:
                    dc:33:0b:7c:e4:d6:b6:c3:d5:f4:1e:b6:3e:68:82:
                    f3:a9:b1:65:c5:71:9f:76:c7:d1:78:29:72:af:f5:
                    c5:92:90:f9:94:6f:00:c1:35:b2:f7:12:48:45:37:
                    9c:b6:ed:96:17:79:61:75:f4:c0:44:5d:3c:46:98:
                    08:2f:f8:df:6e:1e:9a:46:9c:d6:b4:89:1b:54:c6:
                    6b:ee:6d:c0:8a:36:d7:53:a4:1f:d2:ab:6e:51:46:
                    a6:37:30:f1:8e:83:56:86:ee:2d:79:ac:bc:5f:22:
                    63:e0:e5:71:30:50:39:0d:b0:2d:06:49:7d:de:4b:
                    ea:3a:0c:49:16:06:87:18:88:74:24:53:f4:83:d1:
                    ff:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F5:A7:B4:A5:82:7F:41:A8:1C:F5:7C:07:9A:97:DE:E8:B3:A1:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:403d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:33:c3:3f:52:2f:70:be:6a:49:43:83:a1:75:b3:ac:54:
         89:aa:f7:6b:19:38:47:2f:9f:09:9a:aa:d8:69:61:a4:3f:35:
         e6:b6:c3:0a:ae:61:c5:45:4d:02:09:9c:f0:95:fa:d0:3d:4c:
         8e:2b:60:4e:97:ff:e1:1b:95:81:20:24:c1:9a:a9:f9:cc:cb:
         a0:87:18:f0:f4:75:83:14:cd:fe:ab:e0:8f:42:43:92:45:78:
         49:58:fb:8f:25:14:d7:d8:98:f7:4d:53:ef:67:80:0d:89:57:
         c6:47:e3:86:e0:df:4a:3e:0f:62:49:93:5f:e3:66:b7:2f:06:
         dd:d7:85:45:ff:f2:b2:24:30:9d:9f:55:10:bd:2d:3c:79:b9:
         7f:c4:37:6c:32:fd:07:e0:9d:cd:6e:b7:c8:77:52:0f:d5:81:
         27:d1:36:f2:64:07:99:c3:2b:c1:ad:7b:7c:2d:1c:f0:a2:13:
         35:7b:d5:be:34:df:50:f5:3f:d4:96:51:b7:9b:a7:e0:a9:a3:
         d5:15:44:f8:6d:b5:d2:df:c1:5d:41:68:4f:83:83:bb:83:fc:
         a0:c8:aa:1d:38:14:90:e5:7c:d8:3d:25:c8:d9:d7:3f:90:5d:
         84:c2:a2:43:41:a5:73:00:23:8d:0b:f9:8a:26:93:4d:a7:79:
         4c:c6:e2:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0U2ID9jqXeVLLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
NmRkMjA4ZTUtMGM4My00NDE0LTllOGYtZTE3MjU2NWQwNWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0rWqrgvXl1/bosp7yvAsUswCqwHD61yXmmb
UZim5xrWtDz14yVsCSNbd+wzNApeXVzQ5v+BHW3w+UcqE1B4yhcM7ax5u2hAmvJf
xWmKUm+DtsX1ggclc9CmMaMB6WkLLdarcUtjg/pqSa9KL+/TdM3Y7tGRL9LcMwt8
5Na2w9X0HrY+aILzqbFlxXGfdsfReClyr/XFkpD5lG8AwTWy9xJIRTectu2WF3lh
dfTARF08RpgIL/jfbh6aRpzWtIkbVMZr7m3AijbXU6Qf0qtuUUamNzDxjoNWhu4t
eay8XyJj4OVxMFA5DbAtBkl93kvqOgxJFgaHGIh0JFP0g9H/1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHX1p7Slgn9BqBz1fAeal97os6G3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQ2ZjZkMzMtYzBkMi0z
YjA3LWExYTEtZTU3ZDJlZWRlN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAtaM8M/Ui9wvmpJQ4OhdbOsVImq92sZOEcvnwmaqthpYaQ/Nea2
wwquYcVFTQIJnPCV+tA9TI4rYE6X/+EblYEgJMGaqfnMy6CHGPD0dYMUzf6r4I9C
Q5JFeElY+48lFNfYmPdNU+9ngA2JV8ZH44bg30o+D2JJk1/jZrcvBt3XhUX/8rIk
MJ2fVRC9LTx5uX/EN2wy/Qfgnc1ut8h3Ug/VgSfRNvJkB5nDK8Gte3wtHPCiEzV7
1b4031D1P9SWUbebp+Cpo9UVRPhttdLfwV1BaE+Dg7uD/KDIqh04FJDlfNg9JcjZ
1z+QXYTCokNBpXMAI40L+Yomk02neUzG4gY=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:54:53 2025 by rpki-client