Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a786f8f5-d544-3563-825d-fd8eaafb359d.roa
File:                     a786f8f5-d544-3563-825d-fd8eaafb359d.roa (raw, json)
Hash identifier:          13Cr9oBxCNDQ885YqH2gca2CN9hzMM6b06zxPcIu63s=
Subject key identifier:   5A:8A:6D:3B:98:4E:92:AD:EC:B1:57:16:5E:55:DB:66:58:BC:65:38
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D13729D2EA0FFCED7CE200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a786f8f5-d544-3563-825d-fd8eaafb359d.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     13335
IP address blocks:        2606:4700:403c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:37:29:d2:ea:0f:fc:ed:7c:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=ad1b29cf-666b-4509-8cfc-5e79ce4ae1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:b6:bc:48:d5:8a:8b:a8:1e:b3:5d:43:a2:
                    02:58:53:68:73:4c:73:b3:da:3b:56:4f:ec:ef:5c:
                    14:da:ab:96:9b:70:9d:15:f7:4f:09:70:1a:72:7f:
                    a2:7b:54:bd:fa:cb:b1:ae:ec:23:a4:13:0b:a5:60:
                    cc:5b:4b:0b:cc:52:cc:4b:73:76:d0:34:ae:c6:f7:
                    cb:75:01:06:0c:26:2b:99:95:90:8b:69:5c:b4:49:
                    fd:b5:99:3a:57:0a:e4:28:ee:ff:29:b1:87:ab:53:
                    af:cf:99:62:4c:57:39:8e:df:9a:51:f7:b1:d2:c8:
                    03:00:a5:99:32:a9:5c:ff:fb:40:e5:8e:f2:37:f6:
                    49:cf:7f:fb:33:50:85:49:3e:ee:c6:4e:84:37:09:
                    de:77:d4:b2:95:58:e8:8a:ec:cd:3e:0f:66:5c:64:
                    75:9f:7e:ac:39:58:5b:27:85:71:9b:90:e5:83:6b:
                    81:a9:93:b0:3f:a7:44:78:e9:9a:e2:b4:56:1c:b7:
                    07:34:0b:62:e2:8b:9f:35:d4:37:af:52:7f:33:bb:
                    cb:90:7f:50:69:be:90:f3:94:3b:50:44:c2:5c:a4:
                    1f:29:5f:7c:9d:68:e4:07:4b:c3:c9:62:e5:bb:53:
                    30:14:ff:af:b3:d0:52:36:ec:42:8e:ec:76:5b:7e:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:6D:3B:98:4E:92:AD:EC:B1:57:16:5E:55:DB:66:58:BC:65:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a786f8f5-d544-3563-825d-fd8eaafb359d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:403c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:31:57:9f:d0:e1:5c:57:de:dd:52:2c:82:1d:47:96:a6:
         91:0d:a9:d1:55:4e:85:9a:ea:80:14:6d:4d:77:99:57:3a:2f:
         ba:7e:98:26:66:80:11:08:d5:c4:eb:c1:b8:c9:78:e2:b2:d2:
         dc:5f:b5:e3:91:81:1b:51:a3:f2:5e:3d:e1:3e:1e:f8:96:07:
         89:3b:f5:82:15:9c:c2:d2:bb:43:ae:77:e8:63:1e:ed:67:96:
         7b:d2:4a:8f:b1:b3:9a:88:c6:b3:00:02:23:e8:4d:7f:65:0c:
         6b:2d:fb:33:56:ca:2c:76:e6:39:88:b3:a8:f5:9e:e9:62:67:
         5b:4a:af:fe:d4:7e:5d:5e:1c:19:09:02:eb:7a:95:52:14:42:
         4b:75:37:b8:66:c2:1e:4c:0b:b5:5c:d0:a4:35:18:c6:ba:af:
         88:22:e7:56:ea:2b:5b:c0:d4:3a:c8:ff:2c:3d:71:e1:33:a5:
         73:af:63:d1:e8:80:c5:a0:7b:ce:42:1d:c5:db:8d:20:e9:a6:
         d1:0c:49:bd:1f:44:db:c1:35:e4:05:fa:39:3c:0c:79:e7:52:
         dd:3e:2a:67:a2:3b:de:ab:96:f1:b9:21:32:c3:df:7c:22:e0:
         a2:4e:30:21:e8:8d:90:a3:29:f1:1c:4b:eb:93:81:14:34:18:
         b6:02:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:33 2025 by rpki-client