Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa
File:                     546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa (raw, json)
Hash identifier:          UUMRzgiYsD+PQb+6s6/w+6Z8veHDbwSJ4SZr/INWPRQ=
Subject key identifier:   6F:37:5B:91:C8:4E:23:37:2F:33:02:B4:C1:16:00:A9:E1:34:61:42
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D51416024F02BB62155C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:403d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:51:41:60:24:f0:2b:b6:21:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=5f7b2081-99f8-4582-9274-350b10d310e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:cd:5c:34:af:3f:31:dd:41:39:dc:68:c0:
                    2b:33:4a:74:4e:87:88:ae:1a:85:6c:98:a8:d3:eb:
                    0d:18:ab:25:0f:de:68:bc:bc:d4:3f:7d:ea:32:f1:
                    56:f4:0a:40:a6:b7:5b:eb:73:5f:5c:2a:b7:9c:9c:
                    a2:58:37:c0:13:05:03:e3:1d:fc:5a:e4:e7:d9:ad:
                    b1:83:d4:74:cf:ab:9b:bd:3b:81:48:1a:89:8f:24:
                    34:28:44:cb:50:37:24:f7:07:3b:36:7d:21:38:b4:
                    66:19:27:2c:c8:23:2b:67:c4:89:0b:03:98:47:6e:
                    37:09:a1:80:0c:11:58:a4:95:ad:77:ff:c2:70:8e:
                    e8:6b:ae:2d:4a:a5:66:29:d9:be:de:11:28:57:77:
                    c0:de:da:b7:7b:aa:9f:90:1b:7a:02:2a:1e:fc:ed:
                    5b:ed:4a:bc:4d:4a:1d:cf:7c:ce:10:3b:1c:9a:0b:
                    d2:d6:f0:41:84:8e:d7:d4:43:f2:07:eb:3d:be:eb:
                    bf:e7:08:a0:88:e3:e2:70:fd:a3:77:b5:42:d7:c5:
                    05:bb:7f:1b:5a:89:b8:51:bb:af:ea:d7:48:37:3f:
                    88:77:70:52:23:bd:3d:c6:17:58:00:5a:78:12:6b:
                    a3:54:bf:8a:95:09:f3:fa:28:fe:36:13:2e:bd:d0:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:37:5B:91:C8:4E:23:37:2F:33:02:B4:C1:16:00:A9:E1:34:61:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/546f6d33-c0d2-3b07-a1a1-e57d2eede7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:403d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:f2:69:10:24:7e:58:2d:01:1f:b5:0c:39:65:8b:09:e7:
         af:ee:d7:70:59:58:03:3a:8d:6c:53:79:56:2f:0e:90:b5:ef:
         cc:62:14:10:85:30:8d:8f:69:d8:a9:e0:a2:1e:65:55:e2:4c:
         10:2b:79:34:46:b9:13:11:e1:7e:ac:75:be:96:90:e2:c2:0e:
         3a:57:77:0d:cd:02:80:5f:1a:5f:f9:a1:b2:08:86:33:0f:d4:
         73:e1:bb:cc:92:d8:00:08:ad:a9:26:9d:70:a9:2b:8c:83:c7:
         99:83:b5:ef:41:38:27:58:f5:b8:62:2b:62:8b:7d:33:52:ef:
         e6:e7:4b:8f:ca:62:d8:aa:6e:90:10:63:95:70:cd:33:76:dc:
         cf:5e:3f:9b:a2:7e:9d:42:3a:63:2a:85:5b:f6:f1:48:dd:23:
         01:06:f9:1c:ed:bb:e4:9c:5b:8f:26:39:96:71:56:8e:36:aa:
         bd:7e:9d:10:67:8a:38:0a:b1:1b:8e:6b:1b:87:9c:73:fb:3c:
         63:7a:98:0d:5c:b5:8b:69:eb:67:fb:6e:63:82:27:22:32:ab:
         5f:14:97:0a:88:df:7a:e7:d1:d4:43:b3:70:4e:ad:88:52:46:
         b0:26:a9:5c:2f:12:90:91:4e:fc:9f:ba:c4:6d:d3:76:d5:20:
         ae:41:d8:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jVFBYCTwK7YhVcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NWY3YjIwODEtOTlmOC00NTgyLTkyNzQtMzUwYjEwZDMxMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPTNXDSvPzHdQTncaMArM0p0ToeIrhqFbJio
0+sNGKslD95ovLzUP33qMvFW9ApAprdb63NfXCq3nJyiWDfAEwUD4x38WuTn2a2x
g9R0z6ubvTuBSBqJjyQ0KETLUDck9wc7Nn0hOLRmGScsyCMrZ8SJCwOYR243CaGA
DBFYpJWtd//CcI7oa64tSqVmKdm+3hEoV3fA3tq3e6qfkBt6Aioe/O1b7Uq8TUod
z3zOEDscmgvS1vBBhI7X1EPyB+s9vuu/5wigiOPicP2jd7VC18UFu38bWom4Ubuv
6tdINz+Id3BSI709xhdYAFp4EmujVL+KlQnz+ij+NhMuvdDJ8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG83W5HITiM3LzMCtMEWAKnhNGFCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTQ2ZjZkMzMtYzBkMi0z
YjA3LWExYTEtZTU3ZDJlZWRlN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEA9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACG68mkQJH5YLQEftQw5ZYsJ56/u13BZWAM6jWxTeVYvDpC178xi
FBCFMI2Padip4KIeZVXiTBAreTRGuRMR4X6sdb6WkOLCDjpXdw3NAoBfGl/5obII
hjMP1HPhu8yS2AAIrakmnXCpK4yDx5mDte9BOCdY9bhiK2KLfTNS7+bnS4/KYtiq
bpAQY5VwzTN23M9eP5uifp1COmMqhVv28UjdIwEG+Rztu+ScW48mOZZxVo42qr1+
nRBnijgKsRuOaxuHnHP7PGN6mA1ctYtp62f7bmOCJyIyq18UlwqI33rn0dRDs3BO
rYhSRrAmqVwvEpCRTvyfusRt03bVIK5B2FM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:45 2025 by rpki-client