Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a69c038-b5ef-3c4d-b5c4-3624a6a9884a.roa
File:                     2a69c038-b5ef-3c4d-b5c4-3624a6a9884a.roa (raw, json)
Hash identifier:          SWe1ZmvNNSPc8keBmtpotogz2VXS+11d3sbvs1kqoRI=
Subject key identifier:   D1:BC:EF:45:D4:39:88:06:D5:33:92:1D:7E:2C:13:91:1E:4F:1F:36
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D38859C037A5648482A10
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a69c038-b5ef-3c4d-b5c4-3624a6a9884a.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:e8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:38:85:9c:03:7a:56:48:48:2a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=c6e15c82-a60d-4955-a1be-ba93dc8cc6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a8:5c:d2:10:0c:79:31:32:59:f9:e3:a7:24:
                    72:e6:70:57:ff:65:68:48:21:ec:c6:01:af:1a:bf:
                    92:76:7f:72:27:a8:17:94:b4:47:af:02:bd:37:16:
                    3b:c3:d0:3b:d7:be:1e:d2:41:af:4e:9a:57:8d:f9:
                    f3:7c:62:64:33:e6:91:0f:2f:d6:85:01:23:8e:dc:
                    03:57:9c:4a:ed:45:8b:ab:92:e4:6f:a2:20:f5:73:
                    0e:5e:1f:ea:96:89:e1:a5:15:c1:ab:31:cb:d0:01:
                    19:2b:57:3e:ad:02:f9:a9:08:eb:9d:c5:cd:87:87:
                    b2:54:f4:c1:da:ac:76:47:b4:ad:78:4b:e2:1c:6d:
                    9d:27:2d:fc:65:1b:4a:bf:67:50:39:15:8d:37:32:
                    e1:27:49:7c:e3:e7:89:aa:d7:02:bb:53:e6:8a:b4:
                    eb:75:24:9a:d6:e4:19:41:bd:88:98:3e:97:7a:a1:
                    8e:38:fd:15:32:5d:99:0e:88:4a:89:0c:2f:54:4c:
                    92:1e:0e:2c:3f:7e:a9:67:8d:62:9e:ae:2b:ed:a8:
                    26:ce:0b:49:31:08:28:f8:12:46:e0:4d:7a:b7:d9:
                    03:78:f5:36:0c:17:8f:c6:aa:15:a3:bf:65:40:c0:
                    3c:fd:d3:81:72:d9:b3:84:c2:76:d5:d6:8b:c5:0e:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BC:EF:45:D4:39:88:06:D5:33:92:1D:7E:2C:13:91:1E:4F:1F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2a69c038-b5ef-3c4d-b5c4-3624a6a9884a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:e8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:04:9a:d1:cd:74:5a:d1:58:58:a4:b3:63:15:d4:b1:dc:99:
         b5:64:b1:60:e1:07:f9:4b:01:e1:49:27:91:1f:d3:d3:35:81:
         e7:81:35:5d:1b:91:f8:36:5e:6b:a1:9a:c3:7e:1a:e9:f2:b5:
         87:99:be:82:a8:59:05:45:af:21:cb:a7:3a:a5:d4:a0:8e:92:
         90:da:eb:8d:d7:ed:d6:40:dd:e7:e4:50:71:b4:06:79:18:d7:
         2b:60:21:1d:f7:de:f0:18:00:f4:dc:81:ca:6f:2e:c4:4b:b3:
         28:94:e3:9a:bf:ce:a3:a8:ed:b6:7d:e6:47:5d:2f:0d:08:f7:
         1c:6d:aa:78:0e:8a:83:a2:6c:f7:85:d9:dd:ca:1d:7c:6b:c9:
         6e:e2:20:40:0e:62:d9:61:7c:07:29:73:a1:14:25:58:44:1a:
         f0:ad:38:51:fd:a6:1c:d2:c0:6b:2c:af:ca:c1:4f:67:b7:2c:
         e7:1e:91:1c:fb:ca:20:85:4d:af:2b:63:df:46:81:15:91:f3:
         41:08:16:42:c4:9a:9f:7c:f8:a1:da:76:85:e0:c6:3c:e1:e2:
         b8:90:12:1e:0e:6c:f9:1c:40:64:2f:f6:2f:af:61:98:04:74:
         51:6f:2c:77:3d:f2:68:9c:15:14:72:59:85:ee:51:b6:d7:f4:
         28:8c:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:18:27 2025 by rpki-client