Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3cc6ecb-0b65-36b5-b26c-8400986315f7.roa
File:                     b3cc6ecb-0b65-36b5-b26c-8400986315f7.roa (raw, json)
Hash identifier:          wB8Z0FyRsQTEBq054pP6Fp8oVW0Z8jfiqw0rCVlW0UA=
Subject key identifier:   04:7E:96:8A:FB:89:03:52:A2:20:36:2F:37:80:83:F6:12:2A:8A:AB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD9367404DA99AEC74AFF4700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3cc6ecb-0b65-36b5-b26c-8400986315f7.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        2606:4700:311b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:74:04:da:99:ae:c7:4a:ff:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=c952dd31-442a-4722-ab23-a23b04305c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:e9:6f:c4:a9:42:58:dc:02:56:c3:7d:9b:
                    16:fe:1c:f9:2d:c1:34:d7:89:46:f8:a0:75:4f:19:
                    85:bc:0b:84:96:6b:01:03:26:42:b7:1c:b9:c7:7e:
                    67:88:6b:2b:43:37:b3:5b:cd:18:87:6c:f1:0f:72:
                    51:33:29:3e:e1:e5:b6:52:f4:69:4b:e8:19:30:ba:
                    38:64:34:71:4b:dd:8d:72:f6:ab:b1:4e:9c:ff:b6:
                    0d:02:a6:fb:f1:94:7c:bc:7d:86:64:81:8d:90:77:
                    07:b2:73:f6:a1:9d:e0:93:85:1d:42:8d:b3:d1:54:
                    88:03:94:b7:f4:81:b6:a5:06:2c:5b:8b:e4:fa:a1:
                    09:d9:3d:7f:37:80:f6:79:cd:a5:02:b3:c3:20:d8:
                    73:1d:52:06:09:ee:8f:2b:a4:f5:da:ad:47:61:63:
                    d4:b7:cb:58:c0:c3:a1:21:fe:b0:11:40:ca:26:5a:
                    47:1a:6f:d7:74:7b:c9:96:2b:97:57:e7:1e:38:2b:
                    91:58:97:c5:18:2a:4a:c4:8b:38:b4:40:3e:bf:ce:
                    73:9d:41:91:ef:c9:f0:e9:94:fe:a3:89:c6:eb:8a:
                    51:0c:1c:cb:8d:01:dc:d7:06:fe:5f:0f:7c:f1:90:
                    da:62:67:cd:81:3e:38:b8:b2:73:5c:b0:13:79:e2:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7E:96:8A:FB:89:03:52:A2:20:36:2F:37:80:83:F6:12:2A:8A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3cc6ecb-0b65-36b5-b26c-8400986315f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:311b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:30:21:f8:26:1c:8a:7c:d7:aa:66:92:c5:09:aa:95:84:
         10:bd:75:5c:4d:0e:3a:cd:94:47:61:4c:c1:e4:30:b0:af:c4:
         a5:dc:f8:37:64:b0:57:21:ab:89:19:41:8d:a6:10:76:1e:c0:
         2a:fa:f7:23:a9:f0:48:d8:78:46:ca:80:14:a3:cc:39:82:03:
         31:4f:fd:d0:8e:03:15:2e:39:a4:86:c9:79:a2:07:55:b3:26:
         ef:42:a6:ef:73:3c:fb:80:e4:7c:a8:80:38:8e:d1:ef:69:83:
         3f:02:f4:cc:45:af:a0:45:64:7a:58:07:ba:ad:cb:06:3a:ff:
         90:bc:86:89:45:44:5b:44:28:54:eb:b6:c8:34:30:11:c3:1e:
         67:29:35:a5:63:27:67:e5:8e:88:5f:0e:34:4d:11:df:e0:ad:
         ea:dc:69:9c:65:fa:8f:25:60:48:80:15:60:94:46:24:08:d8:
         e7:9e:86:f9:07:6b:94:92:24:4d:68:9f:25:d1:57:a5:a2:e4:
         ba:75:2d:28:59:68:ba:d3:a9:fd:f7:a7:db:1d:ee:a6:c9:75:
         25:7c:1c:a3:09:6a:35:5a:94:20:d9:33:27:3e:f5:1b:58:30:
         c2:a9:61:3d:bc:43:33:95:03:17:d9:2e:fc:30:4f:26:a7:79:
         22:70:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:34 2025 by rpki-client