Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa
File:                     85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa (raw, json)
Hash identifier:          n/pk/mlaF+CS3v+NAd1GznlASWgqx5zGGImVRokTZYY=
Subject key identifier:   1E:5E:FF:A5:D8:A9:6E:E9:95:0D:08:CB:AE:9B:DF:61:E1:8A:29:97
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849F01A9C2301A6D1EC5CCDFCC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     13335
IP address blocks:        2606:4700:70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:9c:23:01:a6:d1:ec:5c:cd:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=8bc88860-c0ba-41a3-af0d-8327105906e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:0b:ec:6e:a3:12:7f:8a:41:b6:23:e0:29:
                    f3:1b:b8:5c:18:7d:c6:dc:2f:13:34:31:5a:df:05:
                    e6:e8:85:43:d3:41:6e:93:cd:bd:1d:81:ad:a3:63:
                    0d:1d:1b:c1:98:89:a7:10:55:44:bb:58:4c:70:5b:
                    cb:37:46:a7:4b:56:5e:2e:56:c4:3a:ab:72:c0:79:
                    7a:4e:54:fe:82:8c:c8:f7:96:b2:34:77:4f:e9:e0:
                    8c:b2:6c:3d:e3:f0:6f:b2:07:68:69:1f:83:b0:ba:
                    dd:d0:fa:1a:e9:fd:97:2a:5e:af:e7:db:3a:17:20:
                    1e:68:70:b2:41:0a:f7:35:83:dc:d3:20:74:a0:0b:
                    8a:59:bc:02:b0:49:5a:35:f9:cf:e8:88:01:66:73:
                    0e:28:a5:81:74:98:e7:9d:71:2f:a8:76:9d:71:8f:
                    7a:a7:23:86:46:f9:f4:52:f4:4b:2b:39:8d:09:d3:
                    d3:a9:7f:a1:4e:69:ec:d7:db:43:01:0d:99:12:c4:
                    15:1b:2d:49:8f:80:0a:11:8b:f3:17:e1:b4:69:f8:
                    0b:f2:c7:84:7c:6f:b9:02:ac:72:0f:e3:e0:b9:8d:
                    44:dd:71:77:31:ee:84:24:3c:68:c2:7c:aa:88:66:
                    cd:ec:07:c0:46:18:c6:4c:80:bc:c9:0f:98:a9:04:
                    e1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5E:FF:A5:D8:A9:6E:E9:95:0D:08:CB:AE:9B:DF:61:E1:8A:29:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ef:75:1a:50:41:ee:fa:05:7e:5f:72:7c:e6:fe:50:26:6d:
         51:1d:8b:7a:1e:09:70:ea:8d:d7:bb:b9:59:72:ec:c2:6e:65:
         b1:54:5a:cb:4e:15:e9:f4:98:c4:dd:95:03:e9:cd:45:c3:73:
         4f:94:7b:e3:d1:e6:99:6a:15:cd:f3:34:70:75:06:7e:b4:5f:
         f6:bc:41:91:e3:5a:08:0a:aa:f8:19:9e:cd:bd:6f:c0:08:68:
         33:a2:72:60:5f:81:38:f7:da:98:d7:89:b0:5b:80:50:7f:26:
         b9:50:21:77:98:fd:ff:2d:01:81:74:71:4e:48:4d:da:3b:14:
         46:87:dd:25:1a:e3:e3:5f:d6:d5:fb:9b:ea:26:3a:51:37:a3:
         bd:60:b7:e5:6c:04:3d:ba:26:15:52:82:95:e3:06:f1:c4:4a:
         f4:da:07:58:72:36:c2:22:73:65:91:eb:6b:2d:75:99:9a:dc:
         11:c6:bc:9d:aa:80:7a:e9:f0:ec:19:31:93:20:04:3c:71:eb:
         62:51:c9:2d:95:09:26:36:ae:ef:59:12:ca:a4:61:51:86:bc:
         9e:60:db:b5:a0:eb:a5:4e:73:04:d7:3a:0d:4a:8c:f5:5d:93:
         6e:ff:3a:03:4f:dd:b3:7c:f3:11:c7:c0:78:19:99:60:06:88:
         02:f7:55:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:55 2025 by rpki-client