Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad4802cb-6376-358f-b1fd-dbd3f03b0a55.roa
File:                     ad4802cb-6376-358f-b1fd-dbd3f03b0a55.roa (raw, json)
Hash identifier:          sKTFN+HVYaqqD7E505tLfNDOTqmuKzmeZBGpHKs3+44=
Subject key identifier:   36:48:01:66:BF:41:B5:24:01:9E:01:52:0C:BE:6A:4C:03:A4:97:5E
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D39EFC488954A590DF080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad4802cb-6376-358f-b1fd-dbd3f03b0a55.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:3019::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:39:ef:c4:88:95:4a:59:0d:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=dbfce2b6-ed0d-47c5-b4b7-952f1abde2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:33:ec:6d:bd:10:6e:a0:46:9c:33:48:b8:
                    5a:b5:f4:0e:ab:97:f0:cc:6b:f4:ab:cf:06:04:ba:
                    ea:02:13:9d:50:4b:d9:9e:99:77:08:65:15:b7:83:
                    25:36:60:72:77:45:88:8f:bf:7b:2d:f5:49:7d:90:
                    f6:64:db:da:ff:cb:71:53:f5:2b:81:1d:1b:20:46:
                    75:c7:32:3f:e0:6f:8c:98:1a:88:b8:c7:91:81:16:
                    1a:ea:1d:8b:f1:4a:d0:1d:7a:44:9e:e2:23:3a:0e:
                    35:1c:c2:cb:4a:20:bc:d1:bf:45:f4:13:7f:c2:19:
                    a1:be:c0:2a:1f:23:e7:96:ee:d2:53:97:1c:f4:f6:
                    7d:a3:48:fe:bf:a7:bf:75:be:d1:5c:06:8c:c6:60:
                    06:f8:4e:96:80:9d:91:5c:40:f4:e2:25:81:8b:80:
                    a0:22:7a:63:d9:67:5e:2b:01:58:2a:c9:a2:23:95:
                    b0:18:e0:0f:db:f0:26:a7:dd:1a:7b:59:96:a2:1b:
                    54:b6:77:77:66:a6:dc:1f:ad:e4:08:52:fa:de:59:
                    45:5a:92:ff:9d:22:43:fb:50:2c:31:a6:32:f6:2b:
                    77:df:72:c4:01:7e:e9:05:8d:ec:8f:d0:b2:72:0a:
                    ac:b9:82:5c:a7:cd:d0:61:52:5e:5e:32:c1:cf:a3:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:01:66:BF:41:B5:24:01:9E:01:52:0C:BE:6A:4C:03:A4:97:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ad4802cb-6376-358f-b1fd-dbd3f03b0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3019::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:14:dd:f7:34:f9:e4:34:5c:13:88:87:76:4b:80:a9:03:83:
         90:d0:b9:de:70:4b:a3:f8:ae:fb:64:09:0d:e8:75:7c:3d:1f:
         3f:03:65:a3:d0:9f:c8:df:b1:64:19:f5:e2:37:04:2d:07:59:
         2c:79:0a:f9:89:c8:63:6f:10:6b:f0:5a:66:94:74:dc:54:72:
         26:e6:c5:8e:c8:87:d3:7e:db:12:3f:db:93:7c:e3:f4:fb:9e:
         8a:0a:7c:1a:9f:cc:5f:5a:d1:2d:ee:2a:a4:2e:87:b5:d2:c5:
         08:5c:39:97:5f:8a:19:6c:cd:cb:aa:ba:3a:92:b1:08:7b:22:
         c7:ea:59:5d:5f:d6:00:86:a5:2a:6f:67:73:12:8f:55:32:4d:
         cd:61:d4:59:a1:ee:cf:74:3a:c4:5e:d0:3f:d2:1a:77:fe:a6:
         3d:ee:99:6b:a7:2e:bb:ae:5e:03:6b:c3:92:79:91:4e:98:f0:
         3c:5d:89:2d:b2:1f:d8:8b:48:ee:13:bc:1e:2c:b9:5c:0d:1b:
         c6:58:e8:84:fe:27:cc:a8:5d:84:6c:db:d3:bd:b0:9c:34:99:
         e1:55:f2:cc:ef:70:70:35:1e:19:89:fd:a6:8d:13:47:5d:ff:
         89:82:f7:15:1d:a2:05:48:80:a0:cb:1b:bb:b4:22:9c:45:c6:
         94:b9:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:35:56 2025 by rpki-client