Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa
File:                     5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa (raw, json)
Hash identifier:          bjvMD3444NFeSH7rHLKAIzlo9IxQqWQX08FwqyWwanc=
Subject key identifier:   AE:AA:0B:79:EC:E2:83:1E:21:EB:20:33:2E:55:0B:BC:D9:7C:E9:50
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC87674118BD87307444D8AD0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        2606:4700:130::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:74:11:8b:d8:73:07:44:4d:8a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=9f9a9b6d-ccf8-4c7d-9bcd-f63a57ccffc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:b4:a8:36:76:60:77:c4:0c:47:5d:c7:3a:
                    d6:c0:12:03:20:4c:80:b4:3e:89:87:c1:d1:7a:da:
                    16:7d:71:e3:96:4d:92:c7:43:01:85:8b:ae:eb:01:
                    02:ac:75:8e:9e:24:1c:d3:fa:b8:b3:a6:2a:5b:fe:
                    7b:33:b2:ac:ad:58:88:68:d7:31:ed:d2:3a:41:a5:
                    bc:73:3c:e2:81:6a:82:3d:e1:4e:b4:ea:9d:25:fd:
                    31:8e:46:29:49:8b:d0:48:43:cd:70:6b:c7:1f:02:
                    72:6e:66:09:9b:9f:c1:5e:16:89:52:6c:78:b9:f8:
                    34:75:ae:f9:18:8c:74:27:e6:76:85:f2:bf:29:3e:
                    86:19:0c:7d:45:19:04:96:eb:03:c8:31:35:12:05:
                    8c:1e:50:34:28:4a:d2:9d:b0:7e:7f:1e:79:28:3c:
                    b1:57:f0:36:5c:97:75:f1:33:a8:84:71:bc:8b:8b:
                    55:8c:12:61:fa:52:62:0c:58:09:76:b4:07:d5:16:
                    7d:cb:4f:fa:50:bc:9c:55:b8:48:15:6a:96:54:c1:
                    d6:58:b1:43:a0:bb:6a:c9:fb:82:ca:a3:cb:b1:c1:
                    7f:d0:7e:98:35:e9:c0:87:82:5e:69:9e:cf:98:f3:
                    80:c6:3f:a6:63:7d:12:81:35:c8:d0:d4:da:f3:54:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AA:0B:79:EC:E2:83:1E:21:EB:20:33:2E:55:0B:BC:D9:7C:E9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c1609d0-24e4-3b86-b70a-ceda9f20f791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5c:51:65:6a:27:6b:df:7f:43:ab:33:4e:15:83:bd:2a:f7:
         99:b7:a4:12:ea:d8:0b:8f:78:83:f0:78:8b:3c:b8:07:22:d3:
         27:25:7a:ee:85:32:f5:76:45:ad:4a:e0:76:28:df:d7:47:f5:
         06:55:a4:5f:1f:80:e7:4b:3e:08:04:71:c4:4a:ba:bf:cc:e3:
         ae:51:34:d6:db:85:be:85:87:42:99:5f:e1:ce:a0:31:c2:a3:
         83:97:6c:b5:67:58:fb:d3:ac:b3:62:61:59:57:9c:2d:33:5d:
         b9:a8:ad:7b:2a:5a:e3:62:2d:73:e8:19:5c:b5:1c:2c:d2:33:
         32:4a:85:c4:cc:70:dd:00:84:b8:7c:55:00:50:fe:21:ec:36:
         2e:7d:2d:32:59:44:b0:58:3d:dd:43:29:ea:66:ca:a3:91:49:
         ff:f8:7a:0c:18:5d:7b:99:34:23:1b:0c:2b:7b:38:eb:76:16:
         a3:8a:7d:60:00:3b:21:b2:4f:70:75:65:73:7d:ef:30:a5:fe:
         3b:e6:0e:19:b9:6f:93:f9:b0:f6:7e:86:42:4d:2a:23:5e:f9:
         2f:da:48:ba:b3:91:27:6a:9a:93:a8:53:18:c0:36:a2:c4:41:
         73:da:b8:bc:2c:3f:f5:a3:88:fd:80:09:a6:96:74:ca:52:9f:
         62:87:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:34:23 2025 by rpki-client