Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa
File:                     18ec7ab6-0281-3fb7-b732-9c14896f7479.roa (raw, json)
Hash identifier:          efuI2qmLMxdGBPK7mEU4FBJceUTaXeEdYSzS19B9VCo=
Subject key identifier:   35:8E:4C:46:70:49:9C:6E:53:F6:3C:CE:82:56:92:6A:F8:49:C3:A8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F87A9DFE9D41B7DC1CA64E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa
Signing time:             Sun 25 May 2025 13:01:02 +0000
ROA not before:           Sun 25 May 2025 13:01:02 +0000
ROA not after:            Sat 23 Aug 2025 13:01:02 +0000
asID:                     13335
IP address blocks:        2606:4700:3115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f8:7a:9d:fe:9d:41:b7:dc:1c:a6:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 25 13:01:02 2025 GMT
            Not After : Aug 23 13:01:02 2025 GMT
        Subject: CN=0c46ddeb-d2d3-466a-881b-1209ac6620df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:81:bd:d7:7c:44:ec:87:e5:dd:e8:c0:42:
                    9f:57:f1:3b:40:15:1a:da:0a:46:dc:d5:62:15:b1:
                    a8:56:ad:7d:64:52:56:5e:e0:bd:c5:82:75:f8:cc:
                    9f:b3:1b:51:d8:01:b6:b8:f3:3f:f6:32:47:a6:ce:
                    61:0f:30:1b:4d:5e:18:68:4d:98:2a:66:52:ed:4c:
                    25:e1:c6:31:fd:02:20:e3:f6:91:98:e3:15:ff:7e:
                    1f:e5:44:28:45:bf:e6:53:3b:11:6b:92:c7:e6:00:
                    c7:3b:fc:1f:c8:af:1c:9c:59:71:52:a6:c5:77:e6:
                    f0:26:fe:49:f4:3a:a5:27:91:74:32:1e:6e:bb:b9:
                    a1:fb:85:5b:f0:ee:6c:8f:34:13:88:fb:ac:e7:eb:
                    2e:29:85:ce:6c:e9:8e:39:f1:fa:5f:17:e6:d0:21:
                    55:c8:c0:e2:05:49:8e:e9:94:fc:6c:35:fd:24:e9:
                    0a:df:23:cc:98:54:ed:e7:e2:48:74:ee:d4:95:51:
                    e7:18:0a:eb:b0:b4:1c:b1:87:05:ba:5b:8f:1d:c5:
                    23:3f:42:07:0f:66:44:0c:b1:fe:06:8c:f4:01:44:
                    c7:92:02:33:0d:71:fb:f9:dd:98:7f:32:4d:89:17:
                    ce:29:de:2d:c2:f0:7b:3c:60:7c:10:fa:e2:ca:e7:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:4C:46:70:49:9C:6E:53:F6:3C:CE:82:56:92:6A:F8:49:C3:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/18ec7ab6-0281-3fb7-b732-9c14896f7479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:3115::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:58:b6:d8:f2:63:30:b9:38:ca:fa:7f:c9:e8:cc:25:55:
         6c:0c:f2:3c:9c:6e:2b:09:64:e6:a3:b7:7c:fa:26:77:2e:25:
         63:a2:41:0b:ab:b5:16:3c:61:4f:bc:15:1d:a5:9e:1c:32:5a:
         64:47:aa:ea:da:2f:eb:a4:c0:f7:3e:cc:57:95:37:bf:1c:c1:
         34:a7:35:8b:d7:1f:82:a5:0e:c9:c5:eb:6b:ba:28:f2:89:8d:
         e5:02:de:d7:34:7e:81:a2:95:f8:45:50:cd:93:0e:02:fd:8b:
         d1:e8:9e:3c:0b:45:dd:49:4d:e8:af:0b:a6:f7:59:18:b4:e7:
         7e:af:e3:9e:7c:b4:6b:8e:e1:e5:13:78:08:41:4e:6e:7a:e0:
         11:49:f2:e6:67:75:fe:39:8c:20:8e:ec:75:e4:f6:df:74:ed:
         0a:4f:1b:73:23:1f:76:b3:43:06:7e:d1:b7:1e:a0:fa:bf:b0:
         4d:8e:e0:cb:53:91:44:66:33:ec:62:28:1d:aa:ba:18:d5:63:
         68:51:7f:31:00:72:3e:4d:3c:ca:2d:99:92:93:66:66:c7:dc:
         4a:76:da:ac:1f:a3:a4:3e:f1:e7:72:d4:3a:0c:89:a8:e0:57:
         b8:00:ba:92:bf:c7:ae:8e:a9:a1:ac:ab:1a:73:7a:78:0b:f0:
         30:32:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:57:21 2025 by rpki-client