Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/238c1077-33fe-3446-bf70-23facf1e0285.roa
File:                     238c1077-33fe-3446-bf70-23facf1e0285.roa (raw, json)
Hash identifier:          O6Pcmg82Ebzs36+t9YpojGnID1EqADynBtj48B8NQgg=
Subject key identifier:   66:03:74:16:EE:B0:17:AC:1A:CE:2D:1D:32:51:B6:97:2D:32:D4:99
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D4EC60DAFB6DFD4E9C200
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/238c1077-33fe-3446-bf70-23facf1e0285.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:3056::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4e:c6:0d:af:b6:df:d4:e9:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f33d486e-f1d4-46ca-8aa8-a409ecb296ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:41:e5:45:06:56:bd:ce:28:f1:42:cb:d4:
                    dd:7b:29:ba:00:76:27:6a:93:89:35:08:e5:68:81:
                    c2:97:7e:33:2f:17:dd:0b:c5:02:d4:09:e4:90:db:
                    69:83:78:0d:29:b3:95:97:4f:9d:0d:44:fe:83:f5:
                    e3:44:ff:0a:27:93:2b:a3:5f:26:cc:62:0c:8b:2f:
                    db:a3:2f:eb:cf:31:45:0a:94:89:61:5b:da:0f:df:
                    23:6f:5d:13:56:ce:af:49:9b:72:02:80:e7:0c:8f:
                    84:21:85:4b:39:58:10:22:f5:b5:56:91:38:f2:d9:
                    c2:a5:33:2f:43:a0:10:34:88:9e:01:a3:42:49:9f:
                    7c:40:cd:0f:62:60:b3:b4:a9:7a:e7:c4:3b:74:0c:
                    03:29:3a:d3:43:34:bb:e7:82:23:55:0b:cc:41:f9:
                    ce:36:5c:92:ab:c0:39:58:2f:5b:56:cb:ed:33:03:
                    96:79:b4:ee:be:8d:53:c1:39:eb:de:2f:b1:f3:4e:
                    9c:df:be:d2:22:5e:0f:4c:6a:a3:4c:4a:24:49:97:
                    c0:f7:f4:6e:3b:e6:f0:b7:1a:3f:50:3e:4d:8b:b7:
                    31:99:e8:ef:19:e9:ce:a4:fd:30:0d:13:0c:e4:08:
                    44:8f:78:e9:37:87:cf:ff:5e:02:c3:89:95:d2:89:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:74:16:EE:B0:17:AC:1A:CE:2D:1D:32:51:B6:97:2D:32:D4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/238c1077-33fe-3446-bf70-23facf1e0285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3056::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:de:dc:b9:87:58:5b:61:e3:a4:ee:a8:7a:28:d4:4e:6c:f6:
         65:7d:40:7c:e9:e8:45:8d:f9:1e:2a:01:db:d7:d4:ea:32:86:
         10:2a:0e:f0:c8:5e:74:ce:bd:7f:f7:9e:bf:f5:22:6b:74:32:
         a5:cd:b4:33:e2:13:e3:44:d3:56:e6:02:64:68:cd:da:ac:18:
         ec:00:8a:20:f8:6a:cf:9c:e7:87:7a:df:ac:14:01:d8:e1:37:
         ca:06:fd:a2:82:3b:93:40:8a:5c:b2:e5:1c:84:b7:0d:3f:e3:
         bb:76:af:8f:d7:fd:80:da:0e:04:a7:78:73:dd:07:f8:72:d1:
         2d:8b:e8:51:39:4f:75:0f:29:a2:b9:19:38:a7:85:52:c2:05:
         eb:e1:a1:b9:72:01:db:50:3a:87:61:71:06:7c:49:c2:a5:43:
         f5:8d:72:4b:08:58:c5:1c:a2:ed:f0:8b:03:b8:f3:75:45:7a:
         b1:2e:6e:8a:77:54:20:72:96:96:20:78:6e:59:aa:e5:75:1f:
         83:72:4a:f2:4e:6f:cc:20:2f:90:1c:e2:6a:85:42:44:e1:72:
         73:d2:c3:d9:c7:1b:5d:d6:d2:42:7f:4e:cb:1f:8c:fe:15:2f:
         ef:0b:10:96:26:50:41:0f:53:8e:d7:69:cd:da:e2:06:df:47:
         2f:df:c6:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jU7GDa+239TpwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjMzZDQ4NmUtZjFkNC00NmNhLThhYTgtYTQwOWVjYjI5NmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/FB5UUGVr3OKPFCy9Tdeym6AHYnapOJNQjl
aIHCl34zLxfdC8UC1AnkkNtpg3gNKbOVl0+dDUT+g/XjRP8KJ5Mro18mzGIMiy/b
oy/rzzFFCpSJYVvaD98jb10TVs6vSZtyAoDnDI+EIYVLOVgQIvW1VpE48tnCpTMv
Q6AQNIieAaNCSZ98QM0PYmCztKl658Q7dAwDKTrTQzS754IjVQvMQfnONlySq8A5
WC9bVsvtMwOWebTuvo1TwTnr3i+x806c377SIl4PTGqjTEokSZfA9/RuO+bwtxo/
UD5Ni7cxmejvGenOpP0wDRMM5AhEj3jpN4fP/14Cw4mV0olmHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGYDdBbusBesGs4tHTJRtpctMtSZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjM4YzEwNzctMzNmZS0z
NDQ2LWJmNzAtMjNmYWNmMWUwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADBW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABDe3LmHWFth46TuqHoo1E5s9mV9QHzp6EWN+R4qAdvX1OoyhhAq
DvDIXnTOvX/3nr/1Imt0MqXNtDPiE+NE01bmAmRozdqsGOwAiiD4as+c54d636wU
AdjhN8oG/aKCO5NAilyy5RyEtw0/47t2r4/X/YDaDgSneHPdB/hy0S2L6FE5T3UP
KaK5GTinhVLCBevhoblyAdtQOodhcQZ8ScKlQ/WNcksIWMUcou3wiwO483VFerEu
bop3VCBylpYgeG5ZquV1H4NySvJOb8wgL5Ac4mqFQkThcnPSw9nHG13W0kJ/Tssf
jP4VL+8LEJYmUEEPU47Xac3a4gbfRy/fxnA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:32:08 2025 by rpki-client