Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200a1f44-d723-322d-9231-c9613c7c7e9f.roa
File:                     200a1f44-d723-322d-9231-c9613c7c7e9f.roa (raw, json)
Hash identifier:          rXo4926qVKxJF5pKu+jADZYbeZ/BwZsmVKRZCyZ0SGk=
Subject key identifier:   13:44:5D:C3:20:15:67:E8:D5:FA:7A:39:41:EA:1A:30:7C:42:FB:DB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BA93292B12FC0B736E01509EC
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200a1f44-d723-322d-9231-c9613c7c7e9f.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:2ff9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:92:b1:2f:c0:b7:36:e0:15:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=27e7ca12-23e9-4d08-883d-7da88d3eb4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:ed:32:e4:8b:7b:67:62:b2:72:9e:79:d9:
                    9c:14:81:86:bc:d9:39:2e:13:38:45:1f:0d:79:48:
                    30:71:c5:53:f9:13:de:e9:59:4f:de:05:66:d2:19:
                    a4:ab:e0:57:a7:85:e0:6c:64:ce:eb:0d:38:e8:e4:
                    37:3b:6a:1e:0f:f3:d5:c0:13:d2:e8:ed:14:47:b1:
                    2d:fa:7a:1f:94:60:01:c6:96:bd:82:2e:33:d8:f2:
                    6c:e4:62:34:98:a9:49:5f:0b:58:25:69:48:e9:71:
                    ba:79:6f:96:12:d5:2d:1d:69:52:bd:35:4e:df:13:
                    97:7e:3e:f3:ba:6d:db:f7:d5:06:d9:73:99:75:f6:
                    7a:ae:86:8b:60:00:1d:dd:1e:90:7d:2d:53:a2:28:
                    82:8e:ca:4e:c9:f2:a3:81:43:45:3f:13:be:8e:71:
                    8d:f3:5a:a3:84:cb:5e:2e:4c:6a:2b:c6:c8:46:db:
                    d2:a7:54:8c:e7:1e:1d:e9:da:12:bb:47:71:4f:8f:
                    91:d1:9f:2a:82:c4:8d:70:d2:21:5d:bd:a6:2e:27:
                    11:9b:fe:de:56:27:3f:50:04:41:ed:0a:93:5d:1a:
                    7d:ac:7c:c2:94:41:19:15:86:49:15:bd:2d:7d:10:
                    50:ed:9f:11:97:cc:20:c0:f5:7c:03:0b:a3:d4:b6:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:5D:C3:20:15:67:E8:D5:FA:7A:39:41:EA:1A:30:7C:42:FB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/200a1f44-d723-322d-9231-c9613c7c7e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:2ff9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:10:ee:85:25:9c:3e:42:2c:57:6b:1e:72:7f:9f:f4:24:1b:
         d5:b6:0c:ed:bf:c5:f3:67:b5:b0:35:53:64:3e:55:a5:f4:2e:
         8d:33:be:1e:28:7f:29:15:b5:69:7e:e4:a0:8d:a5:1a:26:71:
         f6:88:37:63:b4:76:8c:97:4e:29:15:74:64:d6:9b:15:69:c7:
         2d:a4:7e:53:08:c0:d1:89:bc:32:45:95:6f:92:b0:ed:57:0c:
         2a:83:8e:20:a3:18:e7:35:55:79:67:44:4b:4f:b1:82:e7:49:
         5d:2b:af:60:25:f6:b2:0d:20:90:00:52:0d:32:62:f9:81:a1:
         f6:c9:a1:4e:d6:67:a5:5f:5c:49:28:45:d9:d9:8f:03:5b:17:
         bb:2f:a3:ab:70:d7:ee:d3:af:05:8f:7f:2d:fe:9d:04:19:64:
         fd:1f:a2:22:42:de:30:9d:5d:25:07:2e:24:ea:d7:e7:b9:4a:
         3c:c5:96:17:b2:27:97:ee:0d:a7:6c:2f:9f:17:d3:70:39:b9:
         4e:de:94:3d:d6:16:12:1b:06:17:22:c7:01:ed:7e:c9:66:6b:
         fe:7f:ba:1c:eb:03:f3:06:83:2c:65:98:6d:9a:1b:88:2e:82:
         b4:4c:28:83:6f:e3:6e:4f:b8:78:0f:2f:8f:89:c4:52:e1:a6:
         c6:31:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 10:03:20 2025 by rpki-client