Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa
File:                     59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa (raw, json)
Hash identifier:          W+AbnH5sg+aCvF4QFuEsx6JjqUv2fjRnqaD/+/om0fU=
Subject key identifier:   68:74:EC:A8:AD:48:DF:ED:00:7D:76:57:D5:0B:92:20:03:C3:DB:96
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D13478CDA3459C84030180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:4700:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:34:78:cd:a3:45:9c:84:03:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=3df7d56e-96c4-4263-96fd-0e14c450670c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:c9:36:fb:fc:33:96:44:fb:30:df:ab:e8:
                    a5:2c:c7:e3:eb:39:5b:83:bf:d4:4e:c5:b6:91:55:
                    8a:8c:a5:8b:6c:89:c9:ec:65:68:ab:1a:9b:27:db:
                    68:7b:9f:f3:23:7b:4d:e6:2f:37:13:41:c3:aa:f7:
                    96:69:93:77:ee:75:7e:47:bc:db:81:31:a1:ab:ac:
                    fd:6f:28:cf:ce:48:bf:2b:b7:6d:29:ff:06:28:c4:
                    98:5c:39:ce:04:4a:94:07:8f:95:69:02:8a:3f:7c:
                    2a:54:40:26:13:44:88:a6:77:fa:61:78:57:c2:f2:
                    98:c3:6f:16:ca:1a:ca:bb:b5:f4:d8:0e:d0:01:41:
                    b9:b9:be:d1:72:e0:d2:30:b5:a5:aa:e2:37:8b:2c:
                    1a:f1:4c:08:c1:57:16:2e:3e:e2:80:fd:0f:ac:44:
                    75:8c:ef:9d:a7:66:03:b8:2b:5d:8e:21:2e:4a:b4:
                    35:3a:aa:47:04:1a:64:87:ee:42:8a:88:0c:49:14:
                    15:34:2b:0d:9a:2a:72:3e:be:d9:dc:57:a1:ee:03:
                    1e:e7:86:36:56:3d:ad:22:26:02:fa:e8:0c:77:02:
                    3f:cf:de:39:42:f2:1f:00:92:a6:a2:70:e7:e9:a0:
                    51:5a:28:e8:18:0d:fb:e8:02:83:e4:2b:dd:4f:e3:
                    cd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:EC:A8:AD:48:DF:ED:00:7D:76:57:D5:0B:92:20:03:C3:DB:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c710cd-45e2-32d5-9563-d0b26d6f9f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:30:5a:f4:1f:84:6f:06:61:92:75:7d:e0:14:d1:04:69:c5:
         bc:12:ab:dc:70:f5:ff:b2:87:04:4a:2e:d1:24:b4:7d:94:54:
         0d:88:40:b0:ff:0b:5b:be:de:d5:79:39:0f:9d:a0:52:ee:62:
         9a:27:13:16:fb:2c:3a:65:e5:26:26:5f:c2:13:e5:56:46:0a:
         95:d0:5e:0f:fb:71:87:e6:81:c1:00:fe:f2:b9:73:0d:30:98:
         e8:0f:fa:20:ec:cd:d9:5b:a7:84:4d:8e:0b:53:22:a7:37:5c:
         bd:52:0a:7e:35:6d:fd:b5:2a:fa:5c:df:d4:34:c6:48:31:db:
         b6:da:db:1d:cd:7e:d0:3c:a2:5b:fb:f7:d5:f3:47:3c:bb:cb:
         7e:51:88:46:fd:27:a1:f5:f6:99:be:25:04:27:6d:61:df:5a:
         e6:5b:50:50:bd:25:9b:07:84:51:93:02:92:3e:76:97:d9:11:
         aa:b6:93:af:df:b5:7d:5d:00:62:3d:d2:48:d6:07:5f:55:9e:
         7a:2e:b8:7f:8f:c9:dc:8b:a8:03:17:c5:22:ac:1e:24:f0:5f:
         58:d0:dc:66:4d:80:2d:44:78:52:bd:44:73:28:16:77:49:a0:
         7a:d4:fd:0c:d6:bd:e9:d5:36:57:56:c6:6c:93:e4:ad:dc:24:
         8a:38:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:08 2025 by rpki-client