Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e38fc1b6-0e03-3fdd-9dc0-6cbdba78d938.roa
File:                     e38fc1b6-0e03-3fdd-9dc0-6cbdba78d938.roa (raw, json)
Hash identifier:          HfR3fRFFrpxc/uffdm9WyClqVMEa7DYBvqCRvzLNvJ8=
Subject key identifier:   48:89:0D:87:DF:CE:34:71:3A:86:7C:B2:BD:A8:4A:8C:16:EA:BD:32
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584BB19273119C10B9E9E7FE6DE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e38fc1b6-0e03-3fdd-9dc0-6cbdba78d938.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     13335
IP address blocks:        2606:4700:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:73:11:9c:10:b9:e9:e7:fe:6d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=c89a8094-e61b-4f2c-b921-a4b08068b0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:a2:a8:61:e2:68:73:8b:ea:61:e4:1b:92:
                    da:e6:62:83:16:64:66:1d:b5:db:e3:4c:b2:89:ad:
                    0a:4a:17:e1:9e:6c:36:64:a4:24:3d:af:f5:73:b1:
                    ed:77:16:bf:f6:02:fa:93:41:60:1b:15:89:55:00:
                    28:8d:0f:c4:ae:74:41:ec:b0:66:ac:54:7f:a4:bf:
                    b7:d6:d8:64:79:a8:86:f1:90:e3:b6:11:2d:09:03:
                    df:04:bb:06:ab:14:ce:e5:d4:f3:73:8f:b3:6b:4c:
                    5b:82:c3:32:1b:87:a0:e8:9f:35:bd:ed:df:47:a1:
                    98:0e:38:f4:a3:05:72:2f:b0:a0:96:e3:4b:c6:4c:
                    1f:b8:01:19:20:83:f2:24:69:7e:3b:6c:e2:3d:0d:
                    47:8f:35:ac:76:2b:83:07:cc:39:a4:7a:ab:06:17:
                    9e:0f:4d:b9:7f:8f:60:3b:9a:61:c2:80:60:da:d5:
                    73:fc:5c:19:d1:67:6a:b7:e8:f8:5c:b4:f3:17:db:
                    bd:be:05:55:88:04:80:44:1c:88:e8:ef:e5:74:41:
                    33:8a:97:b1:f5:15:67:b4:02:9e:6e:96:ed:c9:d5:
                    dc:18:c7:ed:e2:be:c3:1b:1b:3e:3c:ea:94:3a:57:
                    d8:4e:62:67:8b:9f:a5:9f:e8:ba:af:b6:78:7e:bb:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:89:0D:87:DF:CE:34:71:3A:86:7C:B2:BD:A8:4A:8C:16:EA:BD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e38fc1b6-0e03-3fdd-9dc0-6cbdba78d938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4700:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:2c:e2:2d:3f:91:fa:e5:58:14:c3:c6:1c:a9:4c:ab:a1:
         54:1c:81:b5:c5:83:6e:0d:21:ac:e3:5a:87:d5:97:a5:99:bf:
         09:91:96:00:fa:31:bf:6d:b4:11:de:92:8f:d9:e1:a3:d9:1b:
         ba:ce:e6:f8:b6:3e:9b:47:99:1e:cb:09:98:55:c1:50:32:09:
         6b:da:bb:86:94:5c:e2:95:60:68:fd:67:68:71:0b:4c:22:02:
         41:9b:bd:69:33:25:25:7f:be:00:b1:0f:73:38:25:a5:b6:ec:
         7f:40:6e:13:1b:b5:b5:4a:cb:1d:df:49:c4:59:c2:4d:d7:db:
         d8:4a:b6:53:70:7c:59:d6:97:cd:06:a8:d9:ab:9e:39:fc:9e:
         d6:c6:1d:7b:15:71:eb:34:37:8d:9d:f0:6b:14:ce:01:e9:14:
         de:fb:3e:c7:06:e8:9f:37:6f:01:34:48:f0:05:7b:8c:ba:fb:
         ff:cc:75:67:68:c9:7d:09:a5:0e:ff:bf:3b:13:6f:0f:19:2e:
         6b:c1:92:83:11:a8:09:e5:af:e8:d2:94:b8:84:3a:3c:a4:54:
         64:01:40:93:f6:7a:f4:80:e6:9f:63:bf:d6:e6:a5:e6:d2:95:
         af:15:65:85:df:d6:b5:cd:8d:a5:10:b7:ab:ca:e9:9c:06:fe:
         e2:ed:02:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuxknMRnBC56ef+beAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk
Yzg5YTgwOTQtZTYxYi00ZjJjLWI5MjEtYTRiMDgwNjhiMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMOiqGHiaHOL6mHkG5La5mKDFmRmHbXb40yy
ia0KShfhnmw2ZKQkPa/1c7Htdxa/9gL6k0FgGxWJVQAojQ/ErnRB7LBmrFR/pL+3
1thkeaiG8ZDjthEtCQPfBLsGqxTO5dTzc4+za0xbgsMyG4eg6J81ve3fR6GYDjj0
owVyL7CgluNLxkwfuAEZIIPyJGl+O2ziPQ1HjzWsdiuDB8w5pHqrBheeD025f49g
O5phwoBg2tVz/FwZ0Wdqt+j4XLTzF9u9vgVViASARByI6O/ldEEzipex9RVntAKe
bpbtydXcGMft4r7DGxs+POqUOlfYTmJni5+ln+i6r7Z4frtEgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEiJDYffzjRxOoZ8sr2oSowW6r0yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTM4ZmMxYjYtMGUwMy0z
ZmRkLTlkYzAtNmNiZGJhNzhkOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJwLLOItP5H65VgUw8YcqUyroVQcgbXFg24NIazjWofVl6WZvwmR
lgD6Mb9ttBHeko/Z4aPZG7rO5vi2PptHmR7LCZhVwVAyCWvau4aUXOKVYGj9Z2hx
C0wiAkGbvWkzJSV/vgCxD3M4JaW27H9AbhMbtbVKyx3fScRZwk3X29hKtlNwfFnW
l80GqNmrnjn8ntbGHXsVces0N42d8GsUzgHpFN77PscG6J83bwE0SPAFe4y6+//M
dWdoyX0JpQ7/vzsTbw8ZLmvBkoMRqAnlr+jSlLiEOjykVGQBQJP2evSA5p9jv9bm
pebSla8VZYXf1rXNjaUQt6vK6ZwG/uLtAtg=
-----END CERTIFICATE-----
Generated at Sat Nov 1 09:59:13 2025 by rpki-client