Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2eaaed9a-839f-3fd2-8718-234efcd7fa29.roa
File:                     2eaaed9a-839f-3fd2-8718-234efcd7fa29.roa (raw, json)
Hash identifier:          oqyZDQqlyucJfc/jJkESDwc7tCmLeW2y7YPnIJeLoAw=
Subject key identifier:   7E:3B:C1:7B:F5:A7:A5:E2:A4:0F:24:83:EC:B6:2F:5B:F2:E3:28:26
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BBA10572445D73B5AD11A7C90
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2eaaed9a-839f-3fd2-8718-234efcd7fa29.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:311e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:57:24:45:d7:3b:5a:d1:1a:7c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=b621cae5-ae41-400c-bf31-efa976e1f27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:22:0a:af:71:ab:da:df:22:6a:20:2a:13:
                    d7:c8:46:7c:a0:cd:a0:79:4b:bc:22:15:76:02:37:
                    85:1c:59:de:2f:a3:df:3d:bb:5c:ee:50:23:b9:3c:
                    17:a1:54:26:0c:70:70:64:30:30:67:a5:1a:88:85:
                    6f:0e:6c:1d:ae:91:06:e9:d1:67:de:c3:a3:8e:ae:
                    be:c6:69:8c:36:31:c0:8d:94:f3:f1:3b:0a:d1:6d:
                    b6:e1:47:cb:e2:cd:ad:85:e2:d3:b5:ab:e0:5b:58:
                    a0:bf:22:78:20:3e:ab:13:54:1a:fc:ed:96:f1:11:
                    f4:c3:18:9f:bf:e6:17:04:be:ac:ef:69:49:79:93:
                    0b:80:63:f9:aa:3a:43:13:58:aa:c0:d8:e8:da:49:
                    5a:30:d8:d4:3b:af:0e:74:bb:71:d0:ba:0b:18:46:
                    c4:4f:2f:e9:a8:0a:1b:25:5d:c9:36:1f:7b:13:19:
                    83:0c:ad:aa:2f:2e:e1:df:d1:c0:08:a8:1d:3b:17:
                    2c:45:05:e5:83:af:f1:84:4a:70:fa:e5:16:4d:f1:
                    f7:ea:54:0a:e8:62:87:e5:6e:c2:b6:44:7d:12:38:
                    1b:6f:31:b2:65:04:a7:95:71:12:75:d1:2b:7f:3c:
                    65:27:b0:e7:63:81:20:30:d0:b9:37:92:d3:8f:68:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3B:C1:7B:F5:A7:A5:E2:A4:0F:24:83:EC:B6:2F:5B:F2:E3:28:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2eaaed9a-839f-3fd2-8718-234efcd7fa29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:311e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:5c:e7:0e:30:37:09:f4:c2:75:64:64:2e:b4:35:04:84:38:
         9f:d6:36:e8:ad:9a:44:76:fa:aa:f9:16:1a:f5:38:12:f2:52:
         55:28:e2:df:8a:40:7f:0d:56:af:5f:eb:18:70:1c:16:d1:6e:
         cb:f1:ba:06:a5:68:89:1a:c3:e2:17:ea:6f:8b:d4:50:3f:97:
         1b:8e:f4:73:d0:b2:7f:3b:ab:bf:e9:be:05:41:18:6a:4d:e7:
         11:61:63:a6:58:39:31:06:62:31:3b:f2:6a:04:5a:dc:97:57:
         74:8d:f0:2c:41:cb:d6:1c:b1:db:33:bb:67:68:c3:e4:f0:e7:
         ab:bb:f8:fb:bc:b3:91:5b:51:f4:3e:c5:89:71:72:a2:14:de:
         37:cd:3d:b3:3d:ac:ed:c1:57:b9:bd:b0:43:e9:5c:01:69:a0:
         3f:5e:6b:8e:2b:69:da:95:b3:ae:b3:5f:fa:46:1f:df:ed:da:
         8b:67:7c:a9:2e:54:e6:27:06:17:d0:f7:cd:3f:81:f1:f2:0a:
         cb:0a:da:e5:d0:b4:37:fd:81:17:84:76:07:01:1a:5a:0b:08:
         aa:1b:75:07:53:a4:b4:01:45:1e:92:59:09:0c:15:01:e6:96:
         35:29:20:32:91:ae:c4:8f:cd:85:ea:3b:7b:e3:19:de:66:60:
         21:86:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:25 2025 by rpki-client