Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8878a4ed-4316-3979-b707-9c51ffc93507.roa
File:                     8878a4ed-4316-3979-b707-9c51ffc93507.roa (raw, json)
Hash identifier:          2MfRYXIQF2C4kg0S5l+0378Uh30EyAmQ6d9RkGOkvrQ=
Subject key identifier:   E7:B8:E0:E9:C8:FE:69:4D:23:04:01:CC:EC:DE:12:3E:B9:97:D6:67
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D515F297E1DC5482290F0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8878a4ed-4316-3979-b707-9c51ffc93507.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:4044::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:51:5f:29:7e:1d:c5:48:22:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=3cf1a37c-523e-4053-88a2-c4e995e72ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:b7:88:63:21:48:6d:c5:6b:3b:e9:fe:4b:
                    89:9d:3e:ca:7f:65:03:ea:7e:3c:b1:75:47:63:df:
                    bd:c8:e6:48:66:4a:14:4f:eb:77:81:26:8c:2f:cc:
                    0e:3c:3d:8a:a3:d8:44:d6:4d:e9:7b:dc:fd:88:63:
                    8a:ec:5c:e4:9a:33:12:d0:6e:7c:a3:e3:f3:41:e6:
                    69:8b:45:11:94:9a:64:31:c6:08:b8:af:17:b9:6c:
                    78:06:6d:dc:a6:f2:05:78:2f:bf:df:73:66:e7:34:
                    24:f8:cf:b4:6d:4d:32:ab:68:d6:db:49:8c:1c:bb:
                    d7:95:e1:05:9f:a1:87:77:09:53:e4:55:4a:28:0b:
                    94:a5:41:39:58:33:5b:53:90:23:fb:9c:79:61:1f:
                    f0:9d:de:5b:45:8e:93:72:2f:1c:dc:94:49:cb:3d:
                    78:37:5e:48:c8:16:16:54:40:4a:ac:d4:bb:27:06:
                    9e:d3:cc:d1:ee:f7:f8:0b:b9:3c:79:2e:ff:2e:77:
                    b0:dc:f0:24:1f:8a:00:86:d1:eb:78:f8:e4:80:7b:
                    34:9f:be:46:a9:5d:34:93:6a:0e:9b:9a:b4:45:fc:
                    6a:89:73:e6:e3:67:d7:7a:90:73:91:04:1a:2e:27:
                    a2:fc:45:50:40:6b:66:a3:af:d8:f5:03:a8:a1:67:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:E0:E9:C8:FE:69:4D:23:04:01:CC:EC:DE:12:3E:B9:97:D6:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8878a4ed-4316-3979-b707-9c51ffc93507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4044::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:88:f7:86:93:dc:c5:2d:fa:a3:bf:72:8c:d0:2f:05:46:
         db:36:81:9d:4e:07:9f:8f:da:f1:36:44:54:5b:fd:36:67:06:
         0a:f7:46:62:a9:4b:b9:39:ae:cd:e8:e9:dc:03:4c:33:20:c0:
         ab:50:03:5c:51:0e:0b:28:64:65:f7:e2:4c:08:cb:94:6c:0c:
         8b:31:56:bd:1e:3e:08:0b:ab:cb:ad:98:b8:ca:19:d8:9e:70:
         c7:4e:6d:21:c6:52:5b:c9:e3:d9:23:fa:16:c6:86:ef:43:49:
         3b:e3:8f:1f:8b:3f:e0:55:36:40:c1:d1:fe:e6:8c:65:ff:32:
         b2:b9:94:2e:1a:61:a0:d7:59:71:75:5a:09:c5:fe:be:40:24:
         da:a8:e7:a2:57:39:8c:87:8d:8f:30:55:9a:0c:ed:b1:e9:4a:
         2e:8e:3b:39:3b:64:4c:55:22:2c:72:9e:1b:2b:e7:69:4e:55:
         c2:9a:72:73:6b:e1:56:d4:36:fd:59:18:d0:31:a6:4d:d5:cb:
         ba:2f:f0:70:d2:1e:8d:76:bf:b0:3a:63:22:8e:3b:58:29:9c:
         92:74:ed:b2:20:54:48:5a:68:21:04:f3:b3:dc:e1:59:30:00:
         f8:08:de:7b:37:2c:a9:76:bb:b9:17:5d:93:42:0f:95:e2:72:
         84:2c:3a:5d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jVFfKX4dxUgikPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
M2NmMWEzN2MtNTIzZS00MDUzLTg4YTItYzRlOTk1ZTcyZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgku3iGMhSG3Fazvp/kuJnT7Kf2UD6n48sXVH
Y9+9yOZIZkoUT+t3gSaML8wOPD2Ko9hE1k3pe9z9iGOK7FzkmjMS0G58o+PzQeZp
i0URlJpkMcYIuK8XuWx4Bm3cpvIFeC+/33Nm5zQk+M+0bU0yq2jW20mMHLvXleEF
n6GHdwlT5FVKKAuUpUE5WDNbU5Aj+5x5YR/wnd5bRY6Tci8c3JRJyz14N15IyBYW
VEBKrNS7Jwae08zR7vf4C7k8eS7/Lnew3PAkH4oAhtHrePjkgHs0n75GqV00k2oO
m5q0RfxqiXPm42fXepBzkQQaLiei/EVQQGtmo6/Y9QOooWe2QwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOe44OnI/mlNIwQBzOzeEj65l9ZnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODg3OGE0ZWQtNDMxNi0z
OTc5LWI3MDctOWM1MWZmYzkzNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEBE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHNKiPeGk9zFLfqjv3KM0C8FRts2gZ1OB5+P2vE2RFRb/TZnBgr3
RmKpS7k5rs3o6dwDTDMgwKtQA1xRDgsoZGX34kwIy5RsDIsxVr0ePggLq8utmLjK
GdiecMdObSHGUlvJ49kj+hbGhu9DSTvjjx+LP+BVNkDB0f7mjGX/MrK5lC4aYaDX
WXF1WgnF/r5AJNqo56JXOYyHjY8wVZoM7bHpSi6OOzk7ZExVIixynhsr52lOVcKa
cnNr4VbUNv1ZGNAxpk3Vy7ov8HDSHo12v7A6YyKOO1gpnJJ07bIgVEhaaCEE87Pc
4VkwAPgI3ns3LKl2u7kXXZNCD5XicoQsOl0=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:35 2025 by rpki-client