Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb7a30c-bf84-3afa-aa36-cfccba28f638.roa
File:                     8eb7a30c-bf84-3afa-aa36-cfccba28f638.roa (raw, json)
Hash identifier:          oSO/48zyWcp6uOzIjVUonlmqJG4+DY2JuxtE7NlWOgs=
Subject key identifier:   24:69:BE:5E:CE:DA:DA:BA:9B:82:FE:55:D9:D7:0F:64:4C:B8:83:0E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BBA105736BBFFAABA28136B00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb7a30c-bf84-3afa-aa36-cfccba28f638.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:4010::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:57:36:bb:ff:aa:ba:28:13:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=a39fe294-2909-4e4a-8b97-9fbb152cb467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:27:ea:f3:72:48:07:51:bf:5e:18:ef:96:
                    aa:29:a7:5e:b4:90:1e:69:e8:8a:cb:eb:fd:ed:a8:
                    39:84:71:d0:ca:1c:f7:84:bc:24:62:2b:58:63:09:
                    8d:7e:e4:da:db:c5:93:85:c5:b8:24:d9:a2:dc:2f:
                    41:e7:96:8a:ea:b7:38:51:d6:e3:f3:d5:e1:87:d6:
                    96:56:ef:e3:4c:9f:66:32:22:90:33:f0:29:5a:32:
                    2b:4f:57:6f:ab:fb:09:4d:17:fd:38:29:0d:70:8d:
                    20:82:52:79:d9:81:d9:9c:71:c2:e0:27:a1:58:4f:
                    dc:09:69:85:8a:5d:44:ad:95:fe:89:05:f6:eb:37:
                    5a:16:19:7c:51:76:eb:48:a5:27:71:cb:b1:41:4e:
                    1c:8c:6b:7e:72:41:88:1d:a2:02:08:e7:59:70:99:
                    8b:c5:2e:b0:15:06:d3:61:63:38:a6:96:47:ca:7d:
                    a8:8d:e1:26:63:c7:55:62:ab:99:03:a7:87:93:d3:
                    02:b4:cd:f6:ba:dc:28:e2:3b:ee:56:c3:34:e7:5a:
                    85:2f:5e:f8:d6:4f:1b:ee:00:0d:33:0b:2b:6c:88:
                    27:48:b9:0c:2f:26:d4:f0:12:f3:14:2b:5c:16:e6:
                    e3:0b:d0:0a:f1:bb:8d:09:1b:0d:e2:78:92:23:68:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:69:BE:5E:CE:DA:DA:BA:9B:82:FE:55:D9:D7:0F:64:4C:B8:83:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8eb7a30c-bf84-3afa-aa36-cfccba28f638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:4010::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:11:3a:dc:fe:78:ba:a4:b4:11:31:f6:22:a7:77:81:1e:07:
         92:af:0a:55:68:01:7c:bf:a9:0c:20:0f:c5:e7:8d:71:be:4e:
         38:d5:36:1d:46:a1:6a:43:52:d1:bf:d9:8c:35:7c:4c:58:5b:
         59:a6:2a:c6:06:c5:ec:22:65:97:37:2a:a3:52:f2:fa:e2:e9:
         e9:14:55:7a:6c:c9:2e:7c:e6:4a:75:be:f5:14:76:c7:08:57:
         59:7f:32:09:f6:30:c5:50:74:6f:14:41:e7:aa:d3:78:6b:d7:
         69:39:2d:f1:32:0e:f0:57:b9:60:bf:53:47:fd:31:4c:37:8e:
         c0:04:38:c7:fb:64:92:a9:3a:c1:5f:9c:53:a6:92:a9:8c:ab:
         12:d6:e4:03:af:de:3b:8a:ae:43:61:11:43:4f:2c:59:aa:8f:
         e0:b1:b9:5b:a7:85:a2:b7:0c:a5:87:de:d3:9b:14:58:8f:1d:
         41:7d:7f:00:cc:64:78:c9:e6:8c:90:0a:ed:bc:7b:a5:83:3b:
         aa:fd:89:db:65:07:dc:64:ff:d5:c4:2d:7d:14:3a:12:94:9f:
         7b:22:b6:d8:21:3f:03:a1:cb:bd:d9:38:e9:b7:ba:05:0f:48:
         74:59:78:46:f1:28:8a:fe:26:40:cf:30:f2:48:26:3e:22:86:
         dd:4a:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:55:32 2025 by rpki-client