Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa
File:                     b44b2b8f-1d34-3a71-a304-97aea63ea638.roa (raw, json)
Hash identifier:          V4DW+CrM1hR1Rrowkcjp6XhrxEEPy2+sqIkI6cU+FEw=
Subject key identifier:   42:7F:7C:97:A6:05:BA:EA:EA:42:A0:23:02:8B:BE:FD:8F:10:0E:FD
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD9367418EB65CAB23AF69780
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     13335
IP address blocks:        2606:4700:311d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:74:18:eb:65:ca:b2:3a:f6:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=48fda792-83e3-4eee-ba13-64ee70ccf803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:38:b2:e3:32:6b:aa:af:5d:f5:22:cc:ee:
                    dd:c7:7c:a9:41:01:ac:4b:52:12:fe:a5:2f:54:31:
                    fa:8a:fc:e2:d2:3f:01:a9:af:07:3a:36:f6:a7:b5:
                    23:0d:28:c8:e8:fb:ef:f4:38:03:1f:03:c2:32:2e:
                    ea:4e:85:72:1f:5b:25:83:eb:20:1d:17:5b:85:66:
                    67:de:e0:5c:00:d2:d7:ad:22:fc:16:bb:e2:8a:4b:
                    1c:e8:76:26:bf:89:d5:d2:f3:6c:da:82:26:11:1d:
                    49:84:42:63:71:15:7c:ce:24:85:36:f8:10:56:08:
                    df:f0:ca:70:26:9c:19:27:45:75:fa:d6:2c:4c:51:
                    75:23:6e:c9:fd:7c:b4:30:35:95:a7:e1:1c:ea:01:
                    44:a3:79:58:83:98:e5:5f:bd:64:db:b7:a9:4f:61:
                    b0:07:ce:2f:78:eb:0e:b4:89:8e:61:11:7a:2d:39:
                    ce:22:bf:46:cb:4a:79:49:ff:69:56:37:fb:f6:77:
                    10:cc:17:a1:46:d2:70:fb:96:79:d9:b8:f3:ac:84:
                    c4:34:e0:ab:67:d1:50:39:1a:e1:eb:be:d7:6e:f3:
                    93:6d:b2:11:89:6d:e0:0e:73:e2:37:25:8b:c1:6d:
                    e7:07:39:63:bb:f2:1c:72:3d:c7:d4:52:7c:c1:17:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7F:7C:97:A6:05:BA:EA:EA:42:A0:23:02:8B:BE:FD:8F:10:0E:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b44b2b8f-1d34-3a71-a304-97aea63ea638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:311d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:4e:c9:52:1d:e6:fa:4a:cc:64:76:63:35:61:71:6e:d7:
         96:48:09:1e:a9:62:99:49:2f:8f:6d:53:ca:56:a6:c7:5c:90:
         02:dd:54:6b:02:31:da:70:71:73:f2:c1:7b:40:39:f6:1a:e2:
         f2:e0:b6:30:a8:03:d3:db:c6:d8:54:f5:75:a4:6e:f8:d1:36:
         a0:2d:75:6a:8e:2d:b9:0b:62:4b:fe:b9:6f:04:1b:d9:60:cc:
         62:0c:6c:d3:32:1f:c7:77:19:bd:0c:2f:95:02:aa:e3:fc:8d:
         1e:8d:d6:9d:5d:ac:a9:a6:e6:da:d5:bd:fd:89:fa:8d:06:95:
         95:d9:0d:f2:d0:e1:6f:72:2d:9f:75:6b:b5:98:5a:fb:4f:6c:
         50:4b:f4:fe:68:f0:00:3a:47:0c:93:4d:11:33:cb:5f:90:65:
         01:77:76:28:cb:1c:c3:2f:f9:7c:23:91:3f:06:48:67:57:75:
         64:9e:f5:c8:09:85:45:82:28:b8:76:4d:2d:76:f1:fc:de:56:
         b8:34:53:94:e6:f4:22:af:0f:a4:63:b5:b6:6a:4d:49:ed:3f:
         35:f7:9e:05:00:09:9e:12:79:fb:eb:95:93:91:82:68:72:7a:
         fc:3f:5a:e2:eb:6b:a6:b0:ce:86:46:15:7d:79:f8:e4:84:1f:
         20:9c:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:27 2025 by rpki-client