Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa
File:                     a0fadc8f-fa55-393a-914b-982efe2962e3.roa (raw, json)
Hash identifier:          edyZB0PfueBN6B7eT/zUr7uxVTo9UxSBgVGn/D+qadU=
Subject key identifier:   A6:01:4B:FA:04:82:7F:C6:12:09:03:A7:C1:C1:64:01:12:16:7C:B5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BBA1056A0061E0BA1BFAB0180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:3113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:56:a0:06:1e:0b:a1:bf:ab:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=90c2116e-6a8d-4270-a8a2-dcde73582392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:71:ef:38:76:9c:e9:78:89:6c:ec:d4:59:
                    db:13:f7:03:54:d7:64:78:08:41:5f:b6:b4:25:30:
                    76:60:0f:f4:65:6f:31:bc:45:b1:c3:9a:8d:2d:1e:
                    2f:41:8a:e5:80:47:0c:48:90:b5:84:f5:d2:44:1a:
                    dd:61:35:b3:25:68:6c:6b:fb:e8:c6:34:3e:b1:4c:
                    da:28:99:d4:ac:5f:d7:dd:c6:62:34:c0:41:41:df:
                    ec:04:a3:05:81:d1:be:c1:3d:ec:cf:b5:31:60:c2:
                    db:3d:b1:46:30:39:c8:f8:78:62:49:50:fa:4d:c0:
                    15:b9:de:25:0a:e4:57:ce:bf:3b:05:7d:57:7e:bb:
                    1b:98:f4:74:c0:cc:fe:34:3d:11:e1:f4:86:69:37:
                    ed:98:6e:cf:e2:1f:a0:35:18:ee:42:38:42:3f:36:
                    f1:8f:87:53:38:c1:6d:b4:a8:8d:4e:94:b8:39:3a:
                    e5:81:7d:f9:95:53:a9:29:ac:83:e0:c5:72:31:8f:
                    be:d8:e6:4c:28:fd:42:66:15:54:15:47:b7:b0:44:
                    fe:b7:0f:88:3d:35:ef:0b:ec:7c:aa:bc:da:38:91:
                    fb:45:1e:aa:e7:ce:f0:ee:56:1d:14:72:3a:38:92:
                    01:c0:8f:d0:2a:b5:d9:cb:3d:03:c2:63:0e:97:ba:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:01:4B:FA:04:82:7F:C6:12:09:03:A7:C1:C1:64:01:12:16:7C:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a0fadc8f-fa55-393a-914b-982efe2962e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3113::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3b:aa:48:7a:ac:02:fe:28:82:04:34:9c:98:f7:fa:b2:ae:
         0a:00:31:2f:97:c5:cb:b8:99:79:83:ce:9e:a6:5e:80:9b:8e:
         16:bd:9d:28:ca:45:c5:a3:37:d0:47:28:2a:40:a2:8a:f6:38:
         fc:44:ed:46:f6:8d:41:df:a0:cc:11:90:42:e4:9e:38:7b:a2:
         0c:d6:5d:23:d0:16:d1:a9:57:ff:ef:bb:65:3b:0c:0c:8f:78:
         80:2f:1a:2f:d9:d4:1e:9d:5b:1a:a7:6a:e6:dc:cb:ea:f1:50:
         cc:53:67:92:6a:0e:aa:41:4f:66:ed:ff:19:1d:a6:55:c1:a3:
         83:c8:61:3a:5a:ed:ad:b5:f4:65:9e:32:ff:e4:13:04:51:39:
         6c:69:08:b9:db:33:8d:13:d7:d4:17:dc:e8:99:fb:9b:2d:8c:
         d3:b5:bc:41:f2:f4:01:43:27:fc:92:94:99:d5:42:1c:32:cd:
         96:87:94:79:e6:3a:33:dd:8f:27:51:26:e5:d4:92:35:5f:f2:
         a2:5e:37:d2:b4:4a:9e:9b:d7:1e:9a:a9:cc:62:2c:9a:e7:45:
         59:43:00:ef:38:eb:03:db:b1:7a:1c:74:6b:22:08:40:a0:7f:
         d5:c4:40:f1:0e:59:9e:ea:a7:aa:2e:10:af:00:e5:af:74:ed:
         7f:ee:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:16:50 2025 by rpki-client