Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6ec468a-7688-3d54-b6f3-08edbcd6aec1.roa
File:                     f6ec468a-7688-3d54-b6f3-08edbcd6aec1.roa (raw, json)
Hash identifier:          WbNPc/xnWYr5oBqcHgP0VALHrN2CKs/AWZjMWt37T+8=
Subject key identifier:   65:65:07:BC:90:5E:74:CA:59:10:44:D2:1F:57:45:07:E1:61:10:EC
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB88D3A138C0607EDAE45C180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6ec468a-7688-3d54-b6f3-08edbcd6aec1.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     13335
IP address blocks:        2606:4700:3027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:3a:13:8c:06:07:ed:ae:45:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=3bd220e2-7660-488c-a347-22e762385898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:06:29:c2:c3:7c:17:22:2d:49:e2:73:7c:58:
                    ba:7e:f9:78:9e:61:bf:72:1a:ab:68:73:f8:bc:5e:
                    00:b2:3a:af:2a:6f:8f:ca:91:36:82:11:cd:38:3f:
                    de:12:dd:12:18:5c:31:01:23:11:6a:d2:05:9c:fb:
                    f6:64:9d:37:a7:79:12:90:fb:a8:16:29:c1:41:14:
                    ea:43:b9:14:60:26:e9:43:97:bc:47:c9:be:31:4b:
                    82:f6:1b:00:27:f2:fc:b2:d9:2f:eb:2f:8d:5e:33:
                    d2:30:bf:f0:d7:b1:37:1c:fa:74:f1:5e:27:04:09:
                    a9:e8:af:2f:81:ae:38:1b:f7:0c:c9:35:ab:83:70:
                    1c:47:e7:66:01:71:78:66:0c:99:22:03:eb:ca:cf:
                    77:c7:2c:94:6b:d0:17:9d:1d:42:f8:f8:e1:2d:93:
                    e4:18:54:cd:bd:e3:42:7e:fb:fe:99:1c:6a:1e:78:
                    61:8a:6a:6c:66:84:df:2f:00:61:82:70:f6:c9:40:
                    d2:56:b3:6a:1a:88:34:aa:af:d2:41:3f:65:66:23:
                    9f:31:75:92:27:c4:af:88:ed:36:be:50:08:f0:c1:
                    09:53:4d:42:a5:d9:39:7e:6b:8d:02:80:13:42:8d:
                    80:36:bb:4f:52:ae:65:b3:28:ce:63:54:02:68:fc:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:65:07:BC:90:5E:74:CA:59:10:44:D2:1F:57:45:07:E1:61:10:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f6ec468a-7688-3d54-b6f3-08edbcd6aec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:b1:95:c3:e6:45:de:2f:37:a3:24:70:5d:1e:65:b9:26:
         79:ea:9d:7c:97:b9:5e:c0:ac:5d:72:bd:0a:a2:9d:7d:b0:c0:
         f3:a3:ee:ee:16:4b:19:8c:b2:4b:3b:2d:9a:78:7f:f0:28:e7:
         04:16:37:23:41:0c:57:dc:73:ee:3a:fe:e0:e5:6b:3b:37:5f:
         2b:2a:6a:2c:10:02:31:ca:b9:8b:c8:07:e2:51:af:f1:ab:ff:
         ff:b2:ed:45:3b:8f:fa:98:11:bd:ff:85:b4:9a:f3:ab:1a:f1:
         f6:d8:23:ec:dd:93:52:3f:26:04:26:ed:68:d9:35:56:69:92:
         2a:2e:af:5f:0c:cc:8d:22:5e:a6:d3:ef:ca:74:02:a6:a6:45:
         fd:e6:75:68:6b:85:89:17:4b:53:db:1f:0f:f8:7d:cb:ac:ea:
         64:cc:1a:b0:3c:e1:62:e7:30:a2:68:53:2d:9e:1c:13:82:ac:
         5b:d9:25:c5:b7:70:f3:ba:f0:ac:5d:f1:af:9f:d1:0b:19:c3:
         90:26:19:79:5a:91:6e:d5:99:a3:ec:32:d9:b1:b3:b4:dc:ad:
         a2:fb:1e:7d:48:1c:3c:a7:1c:da:05:28:ea:2c:ec:f3:b6:d1:
         20:64:2a:1b:9a:eb:26:47:79:2d:f4:35:b1:4b:f6:e0:4a:e8:
         a2:cf:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:02:38 2025 by rpki-client