Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa
File:                     9a32a677-fc56-3094-a8c5-ed55005a98c6.roa (raw, json)
Hash identifier:          qLYkm4G5CMm06/y5OzaVMQTaoRnzXaKzsgidnpyt+lc=
Subject key identifier:   FD:F1:02:99:52:9E:67:7A:CF:B6:5E:AD:B1:D3:FE:99:77:B2:66:4C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D13770DBE86E8573A3A300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:4700:43d8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:37:70:db:e8:6e:85:73:a3:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=320d6221-6712-427b-b564-a8a3ca718a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:75:bd:eb:40:73:0f:dc:03:d8:a2:ae:42:
                    ba:05:64:30:07:e8:a0:34:b1:50:2e:39:ac:5a:ed:
                    4f:41:0c:47:f0:da:ed:b3:30:50:d0:2e:85:89:04:
                    66:0c:5b:cc:8f:ea:ff:36:f7:f9:49:e3:cc:c3:87:
                    ba:10:29:cc:24:8e:15:47:c7:bc:4e:43:fd:07:44:
                    b6:01:1d:9d:09:f3:39:16:c2:d1:5c:d4:bd:f7:cf:
                    6c:ea:cf:7d:9d:28:e2:19:47:7f:ea:62:4f:cb:10:
                    9d:9a:bd:86:2a:72:fc:57:b4:2a:f2:2e:f4:68:73:
                    39:36:28:df:8f:8e:a6:55:df:5e:3e:70:8b:7e:10:
                    ca:36:32:a7:bd:ba:91:62:07:04:71:3a:aa:c9:9a:
                    e0:63:7d:1e:25:59:1c:d0:d3:c7:e1:eb:05:d7:8c:
                    24:66:a0:7f:df:8f:d1:ce:71:12:33:5f:38:06:c7:
                    d6:14:ad:fb:32:53:5a:10:a9:39:3d:73:8b:1b:20:
                    54:92:98:c9:6f:a7:34:62:b3:b4:c8:5c:66:f6:d9:
                    67:d4:af:4a:d8:73:42:57:81:9b:96:dd:75:9b:a7:
                    ec:6c:ab:09:a8:ca:ee:a1:0e:81:4f:e6:cc:e5:97:
                    99:d2:f2:f0:91:3d:01:e8:74:ce:c8:0f:ef:22:13:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F1:02:99:52:9E:67:7A:CF:B6:5E:AD:B1:D3:FE:99:77:B2:66:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9a32a677-fc56-3094-a8c5-ed55005a98c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:43d8::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:84:17:e8:91:76:f6:58:0d:bb:91:c2:21:99:46:3d:64:21:
         f9:76:a0:69:fd:78:43:58:bb:39:03:25:35:9b:87:11:56:e3:
         1e:1b:b7:a5:07:99:51:a5:4f:25:78:e7:7f:06:a7:2c:87:34:
         30:f3:94:fd:5b:79:52:18:b6:9f:99:eb:c7:f7:ea:fa:e9:e4:
         17:5e:5e:21:ac:61:0a:60:7c:8d:25:6f:10:7e:d6:7f:ad:d5:
         5b:c4:06:a9:e0:21:34:ac:33:e0:6a:15:f9:51:c9:9f:b4:ff:
         a2:ea:10:fd:30:be:67:ee:a6:3b:a4:5f:b7:06:48:64:1a:8f:
         ef:76:2d:bd:ac:e3:cb:45:a6:61:4a:df:f8:a7:b3:30:f9:4f:
         f9:c4:a1:22:32:54:7a:cf:dd:bd:6a:25:a6:3c:43:53:12:72:
         9c:d2:0f:96:0f:9f:ab:af:c0:13:a3:41:d3:4e:60:20:6f:db:
         7a:df:4a:89:07:b1:24:05:0d:c5:37:21:16:e8:da:e1:f8:fb:
         0d:77:f1:63:0f:fd:89:81:cf:0c:5b:70:03:59:c5:8a:8a:7b:
         a1:20:f5:13:cb:7b:1c:f2:58:e3:cc:85:67:3d:cb:0d:bd:cf:
         32:6b:62:30:de:aa:c1:34:67:0f:fa:43:2b:e7:50:cd:33:4c:
         0b:96:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:11:17 2025 by rpki-client