Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa
File:                     cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa (raw, json)
Hash identifier:          wZdldYaZkJzENUt9s17jLyZvZepvfHao+oVtJitaDKw=
Subject key identifier:   DE:69:C8:CC:28:69:DF:9A:A2:41:87:B7:F6:E6:00:AB:C8:62:98:F5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D52EB71FD0C474FDB4120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     203898
IP address blocks:        2606:54c1:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:52:eb:71:fd:0c:47:4f:db:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=417632e8-0f04-44a9-b06b-33a6673920c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:7b:43:a4:e8:fc:b1:43:0f:68:72:fb:09:
                    42:4a:52:1a:94:c8:9c:69:7e:0e:f8:43:43:a5:0a:
                    2a:e8:07:cb:b9:4b:d4:40:3a:50:fc:6d:94:2e:dc:
                    c4:b9:a9:e2:2d:b3:a2:5a:15:66:ab:99:90:e2:0b:
                    5c:64:36:71:2b:0e:97:cf:c9:7d:30:c0:6f:6f:f7:
                    09:9a:f8:e0:4e:98:10:45:c4:6c:6f:e7:2b:3a:11:
                    e3:62:e9:4a:78:8b:b1:1d:77:9d:f9:af:01:ef:49:
                    c5:67:48:dd:9c:a0:44:a2:6a:9e:92:7a:cc:64:5b:
                    0d:0b:3a:09:71:7a:cf:58:ca:b7:d5:70:38:d1:03:
                    11:b5:cf:ac:ef:55:c4:9d:3d:67:17:d5:0e:7d:37:
                    f4:23:6f:52:5c:1d:99:85:8e:98:e9:df:7e:6b:0a:
                    f6:2c:7b:b1:5b:39:15:0c:14:f7:de:e6:2f:e1:9f:
                    15:37:e4:3c:fb:e6:bd:d9:9d:5e:eb:62:e3:e2:0d:
                    bb:02:96:c7:e1:05:4d:2b:b5:70:36:96:f0:45:48:
                    24:d7:c0:f7:79:f5:7a:7a:a6:ae:81:d0:8d:04:5e:
                    67:93:9a:1c:8f:d0:a6:f8:19:84:e4:f0:72:07:2a:
                    31:67:13:51:88:f8:23:aa:5b:e2:6c:a8:83:23:59:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:69:C8:CC:28:69:DF:9A:A2:41:87:B7:F6:E6:00:AB:C8:62:98:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb7bbde9-2cd4-3e5b-aec6-2f7727becf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:27:47:05:56:16:4b:f3:ff:9b:91:72:81:11:26:f8:64:
         af:27:63:12:52:39:7e:7d:5c:2e:a5:6d:ce:01:85:57:0a:9d:
         30:0d:18:b3:15:b5:54:e2:f2:5d:b6:cf:4d:38:57:1f:46:00:
         5a:2e:f4:63:2f:3c:f0:30:4b:cf:9e:63:cc:a2:d1:86:01:92:
         17:c9:3d:3c:37:73:23:f9:84:69:4c:61:69:25:d1:9e:ea:57:
         fb:d6:c5:bf:93:8b:4f:65:c2:f2:b2:46:5d:17:84:1f:35:27:
         dc:f5:47:ff:0b:94:b8:c0:22:5e:fb:5b:18:fd:34:45:56:b8:
         a6:b4:b4:a5:18:ba:33:51:d8:40:ab:87:93:52:9b:61:01:9a:
         24:6e:3b:fc:8c:48:c2:ad:87:cb:27:9f:ab:01:9e:fe:80:b8:
         e9:dd:2c:6a:d7:ad:e3:81:8d:88:c8:2c:b4:68:6f:91:e8:06:
         50:4a:e4:c8:83:91:49:19:19:59:01:29:04:c6:2f:9d:b7:dc:
         04:e2:4f:9d:0a:b7:ee:94:3a:5b:14:ef:31:6d:a3:42:37:da:
         14:87:0a:20:b6:21:23:d4:41:8f:67:53:26:72:af:8f:13:c6:
         16:2e:87:d2:0a:f0:dd:95:0b:d2:ef:70:8a:f5:44:a2:44:7e:
         c9:69:e3:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu4jVLrcf0MR0/bQSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NDE3NjMyZTgtMGYwNC00NGE5LWIwNmItMzNhNjY3MzkyMGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ57Q6To/LFDD2hy+wlCSlIalMicaX4O+END
pQoq6AfLuUvUQDpQ/G2ULtzEuaniLbOiWhVmq5mQ4gtcZDZxKw6Xz8l9MMBvb/cJ
mvjgTpgQRcRsb+crOhHjYulKeIuxHXed+a8B70nFZ0jdnKBEomqeknrMZFsNCzoJ
cXrPWMq31XA40QMRtc+s71XEnT1nF9UOfTf0I29SXB2ZhY6Y6d9+awr2LHuxWzkV
DBT33uYv4Z8VN+Q8++a92Z1e62Lj4g27ApbH4QVNK7VwNpbwRUgk18D3efV6eqau
gdCNBF5nk5ocj9Cm+BmE5PByByoxZxNRiPgjqlvibKiDI1ktqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN5pyMwoad+aokGHt/bmAKvIYpj1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2I3YmJkZTktMmNkNC0z
ZTViLWFlYzYtMmY3NzI3YmVjZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwQAM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACLpJ0cFVhZL8/+bkXKBESb4ZK8nYxJSOX59XC6lbc4BhVcKnTAN
GLMVtVTi8l22z004Vx9GAFou9GMvPPAwS8+eY8yi0YYBkhfJPTw3cyP5hGlMYWkl
0Z7qV/vWxb+Ti09lwvKyRl0XhB81J9z1R/8LlLjAIl77Wxj9NEVWuKa0tKUYujNR
2ECrh5NSm2EBmiRuO/yMSMKth8snn6sBnv6AuOndLGrXreOBjYjILLRob5HoBlBK
5MiDkUkZGVkBKQTGL5233ATiT50Kt+6UOlsU7zFto0I32hSHCiC2ISPUQY9nUyZy
r48TxhYuh9IK8N2VC9LvcIr1RKJEfslp4+E=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:57 2025 by rpki-client