Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90b1fb4f-be0b-390e-9f02-214edfadc027.roa
File:                     90b1fb4f-be0b-390e-9f02-214edfadc027.roa (raw, json)
Hash identifier:          ZyW013AuvVA/GQgg0dE7po2dPCDaw0z80a8uwLZXJjI=
Subject key identifier:   A4:F5:C9:C8:7E:B5:BE:97:9E:B2:7B:D2:65:47:14:C8:B0:3A:9D:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D137DD3D96454954FE13A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90b1fb4f-be0b-390e-9f02-214edfadc027.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:54c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:37:dd:3d:96:45:49:54:fe:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=8946d5f2-b4c8-4f59-a671-2efda59646d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:2c:bb:a2:ab:f3:42:d2:8e:26:ba:f8:e9:
                    63:ea:41:cc:e7:cc:f4:f3:fb:2a:f1:1f:4e:62:ec:
                    37:95:eb:b1:9e:21:af:05:01:59:d6:7e:7d:53:ae:
                    5b:7c:f1:9f:b5:a0:23:ec:7e:d8:99:75:1a:67:ed:
                    0c:15:75:b3:d9:7b:12:5a:e6:d0:ef:a7:4f:c6:70:
                    d0:c7:cf:ae:bf:60:19:5b:1f:8e:0c:73:53:36:50:
                    85:ce:4d:55:d9:da:d7:7e:e5:28:45:a7:a3:d9:a8:
                    d8:e0:9e:a8:99:c5:e5:65:50:29:5a:89:db:0d:9f:
                    3c:32:97:87:41:25:f9:19:05:74:cb:2f:f7:38:12:
                    98:dd:99:f6:fc:b9:ab:e6:93:14:6f:41:2f:fb:36:
                    b0:cf:7f:92:2e:8e:90:65:e9:5e:27:d6:e2:bb:a2:
                    c4:e7:f0:2c:da:71:c4:db:8e:08:22:da:39:6b:ff:
                    5e:b3:eb:92:66:01:11:c2:d2:ef:3a:81:ca:62:18:
                    90:70:5e:ea:00:e7:e7:bf:ba:bf:be:b8:11:99:73:
                    a9:30:90:c9:93:1b:41:bf:79:03:69:00:42:23:69:
                    45:4b:95:bd:e8:81:c6:01:0d:d1:67:c0:45:6c:88:
                    ff:00:ff:75:0f:48:8a:26:ac:85:59:08:d5:f1:30:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:C9:C8:7E:B5:BE:97:9E:B2:7B:D2:65:47:14:C8:B0:3A:9D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/90b1fb4f-be0b-390e-9f02-214edfadc027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9b:a2:c8:a4:fd:15:02:91:b1:45:b0:40:ec:d3:d1:af:aa:
         0d:0e:6a:d7:a8:1b:f0:b7:e7:db:b1:07:26:de:da:fb:f6:39:
         c3:50:69:17:b8:07:76:91:2f:a2:5e:16:97:a8:ce:7e:e1:f5:
         8a:58:a6:20:75:2f:9a:c8:d9:28:3c:0d:c6:aa:ea:f8:39:cc:
         12:34:51:d7:a4:9e:73:55:4f:6c:1b:28:9c:dd:7b:31:76:be:
         15:f1:6a:5a:f5:39:a4:57:96:9e:1a:ce:60:d2:2c:be:d9:f7:
         9d:20:ef:d3:9d:6c:7c:2c:fa:fc:e5:87:0f:61:12:c0:23:d0:
         32:5c:05:f7:57:0c:07:c8:2b:c8:81:2b:cf:38:64:cf:b7:c4:
         be:9b:e6:d6:07:48:62:2a:7d:5a:63:f0:5f:00:40:07:d8:df:
         eb:b5:30:1c:04:0b:a4:be:4f:5f:c9:f2:98:16:4b:5f:37:fd:
         c0:40:50:0e:0f:98:2a:3e:ca:d7:f4:18:08:e0:54:e0:07:d3:
         74:68:88:7f:8a:71:3e:24:e3:a5:94:91:b3:f0:67:c3:4a:b7:
         fc:8f:55:95:90:c6:60:58:c1:e8:5c:82:fb:06:81:92:b1:85:
         6e:af:0c:68:f8:f9:67:a1:d1:cd:1a:86:f5:46:c7:26:6d:d7:
         01:4c:45:00
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErX0TfdPZZFSVT+E6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ODk0NmQ1ZjItYjRjOC00ZjU5LWE2NzEtMmVmZGE1OTY0NmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kosu6Kr80LSjia6+Olj6kHM58z08/sq8R9O
Yuw3leuxniGvBQFZ1n59U65bfPGftaAj7H7YmXUaZ+0MFXWz2XsSWubQ76dPxnDQ
x8+uv2AZWx+ODHNTNlCFzk1V2drXfuUoRaej2ajY4J6omcXlZVApWonbDZ88MpeH
QSX5GQV0yy/3OBKY3Zn2/Lmr5pMUb0Ev+zawz3+SLo6QZeleJ9biu6LE5/As2nHE
244IIto5a/9es+uSZgERwtLvOoHKYhiQcF7qAOfnv7q/vrgRmXOpMJDJkxtBv3kD
aQBCI2lFS5W96IHGAQ3RZ8BFbIj/AP91D0iKJqyFWQjV8TCGywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKT1ych+tb6XnrJ70mVHFMiwOp3VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTBiMWZiNGYtYmUwYi0z
OTBlLTlmMDItMjE0ZWRmYWRjMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+bosik/RUCkbFFsEDs09Gvqg0OateoG/C359uxBybe2vv2OcNQ
aRe4B3aRL6JeFpeozn7h9YpYpiB1L5rI2Sg8Dcaq6vg5zBI0UdeknnNVT2wbKJzd
ezF2vhXxalr1OaRXlp4azmDSLL7Z950g79OdbHws+vzlhw9hEsAj0DJcBfdXDAfI
K8iBK884ZM+3xL6b5tYHSGIqfVpj8F8AQAfY3+u1MBwEC6S+T1/J8pgWS183/cBA
UA4PmCo+ytf0GAjgVOAH03RoiH+KcT4k46WUkbPwZ8NKt/yPVZWQxmBYwehcgvsG
gZKxhW6vDGj4+Weh0c0ahvVGxyZt1wFMRQA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:00 2025 by rpki-client