Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f144190b-6856-3479-8a74-ebe0ab794521.roa
File:                     f144190b-6856-3479-8a74-ebe0ab794521.roa (raw, json)
Hash identifier:          j7bK2ZdIMv0k3BGDIziztSHo8/G9SQHzpT5A2BYg4wE=
Subject key identifier:   5B:26:10:96:91:FF:BA:AC:A4:38:5C:B5:9B:A6:E1:C5:76:18:C2:62
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D4E365ED2B5CB253B9280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f144190b-6856-3479-8a74-ebe0ab794521.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4e:36:5e:d2:b5:cb:25:3b:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=b5ebc90c-b5d5-4022-ac48-66d1197d0c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:db:0d:6e:19:a2:a3:17:2d:a8:eb:1c:bd:
                    36:b9:48:cd:81:4e:e5:d2:d1:69:09:f0:65:4a:8d:
                    25:7f:ad:9c:af:ae:36:a3:58:fd:98:21:c8:60:d9:
                    bb:3b:7e:18:c1:4f:8f:f4:d1:81:57:b8:a0:b1:69:
                    7e:88:d3:33:d6:52:fd:da:7b:91:8a:a0:4e:f1:79:
                    06:8a:d6:4c:96:d9:3f:f6:46:c8:a3:aa:bb:4c:0c:
                    c0:ec:fa:8e:25:2f:b8:e1:31:2b:3e:74:02:03:21:
                    e1:d9:4b:bf:1e:62:fd:56:d6:e4:44:c7:6e:d4:f7:
                    8a:72:73:4c:8f:b8:6a:a5:eb:44:9a:36:31:b6:e6:
                    d8:b3:0d:30:3b:a5:3b:29:16:c6:8b:11:f7:f4:ad:
                    56:76:65:cc:64:0a:a8:0d:4d:76:e6:2c:83:dd:50:
                    bf:14:43:7a:09:46:2c:bf:b3:4a:4d:77:4c:e3:5b:
                    4c:df:25:b9:41:38:84:63:9e:dc:c6:e1:ea:f5:7b:
                    77:1b:ec:d1:c7:b2:be:e9:50:87:38:c0:11:ac:d1:
                    8e:a5:da:22:61:13:5a:6c:2b:25:37:42:99:6e:27:
                    49:87:34:20:df:b0:eb:b0:c7:d8:34:75:ef:32:0f:
                    98:af:8e:12:55:9f:31:24:ac:47:33:94:19:80:27:
                    74:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:26:10:96:91:FF:BA:AC:A4:38:5C:B5:9B:A6:E1:C5:76:18:C2:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f144190b-6856-3479-8a74-ebe0ab794521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d9:06:23:59:5d:4b:1c:3f:db:2a:7a:8e:89:d0:c6:d8:d7:
         12:8b:a7:9b:95:2b:02:36:e9:57:a8:5e:78:34:d1:b8:7d:a7:
         09:0a:5c:58:7b:ba:dd:00:52:9e:e9:5c:50:83:60:e1:63:ec:
         fa:36:7d:2b:a6:97:8c:d3:c9:9d:14:0a:0a:1f:0b:3f:b6:4f:
         3f:ce:99:ab:93:13:c8:e7:65:e0:dc:3b:30:bd:94:8f:a8:df:
         1f:8e:69:71:12:6f:8f:e9:b6:84:ab:8b:24:a7:8e:0a:f2:1a:
         72:8c:60:b4:09:e5:1c:7d:a9:a7:c8:55:d7:1c:03:ea:4d:0e:
         29:e2:a5:e0:fa:a4:e1:d3:c7:8f:1e:6f:d9:56:2c:2d:67:01:
         da:fb:fe:e6:09:22:c8:ef:b8:1f:db:ec:ae:ab:22:f2:75:a9:
         1e:98:d1:c4:66:48:79:15:6b:47:71:de:de:37:82:35:35:5c:
         14:84:70:da:b4:b1:25:d7:32:37:67:fd:d7:be:ce:63:f5:f9:
         e4:07:02:43:00:0e:71:28:9a:c9:bd:07:0e:6a:21:ac:17:3c:
         0f:32:03:19:02:4e:2a:13:30:49:95:f0:59:d9:fb:50:31:af:
         9c:db:5d:1d:e3:5b:41:b3:be:41:39:64:52:89:f7:2a:4c:e9:
         d5:8f:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:18 2025 by rpki-client