Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa
File:                     239bd553-03a2-3225-90fa-315cf5127374.roa (raw, json)
Hash identifier:          5BRLFde26dcn/5IZo7MqVrfQ6aFoICIgu6eGYDfOwQ8=
Subject key identifier:   6C:CB:E5:27:B2:20:46:1A:28:0E:58:B9:52:6A:95:47:10:54:F6:3F
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584BABFD048B82C195223D8227AA
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     63213
IP address blocks:        2607:6b80:66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:04:8b:82:c1:95:22:3d:82:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=fb74bc50-57ac-4e2a-8d5c-8c11517392f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:a7:6b:72:61:64:6c:6a:c9:81:89:c4:5f:
                    f6:c8:ac:06:07:78:a1:44:e5:dd:cc:51:8f:71:15:
                    78:4d:0a:f9:f0:77:99:07:aa:b1:41:64:0e:c4:62:
                    58:db:43:fe:5b:95:ff:dd:61:30:3b:0f:ed:ea:eb:
                    5e:c9:34:80:66:c1:e1:db:49:7a:35:de:2c:e1:ff:
                    1f:4c:7f:51:2e:e3:6f:f6:6e:89:de:8b:11:55:20:
                    9c:1f:94:33:61:9f:99:ac:78:d2:8c:eb:52:38:f4:
                    e5:22:cd:13:09:a9:b4:15:88:53:00:59:5f:73:0a:
                    9b:57:a0:e4:79:ac:27:60:3a:01:ef:b5:d2:16:a6:
                    17:b2:38:6e:7a:31:4d:4b:d5:b7:d9:b1:ad:54:51:
                    3a:02:b8:9b:cc:0f:c1:ee:81:85:42:b7:ab:07:92:
                    84:46:24:90:b6:92:0d:79:f6:8a:d8:60:e3:8f:08:
                    92:08:bb:af:40:1e:8b:61:2a:ec:bb:9d:b7:01:4a:
                    d2:25:8e:6b:e4:05:ed:d3:2b:d8:60:86:01:ed:7a:
                    b6:a6:57:6a:77:75:59:43:93:de:d3:b3:71:b6:e0:
                    d1:b4:7f:0e:66:fe:cc:c0:e3:49:67:59:8d:4f:a9:
                    20:1e:f4:38:bc:74:9b:4e:f2:af:d2:74:f0:34:fa:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CB:E5:27:B2:20:46:1A:28:0E:58:B9:52:6A:95:47:10:54:F6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/239bd553-03a2-3225-90fa-315cf5127374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:3a:9a:7f:83:2f:11:5b:15:0a:85:4b:39:17:22:a9:48:
         e1:96:cf:66:d3:9d:a7:84:fb:02:9f:a5:8a:5c:fd:a0:07:72:
         64:53:10:65:c6:4b:b5:77:0f:f4:f0:cd:1b:fc:39:b7:4e:36:
         3a:33:d9:d2:ab:0c:c5:78:15:62:2c:83:c8:49:3f:c9:54:f8:
         57:5d:75:85:28:02:a3:ed:1e:cf:a1:55:5e:70:16:95:53:f5:
         24:1c:99:3d:0a:4c:7a:89:17:56:27:36:7e:11:49:94:77:12:
         7f:47:81:9b:ca:cb:21:72:10:65:5c:53:13:66:45:a8:b6:da:
         75:ed:c2:11:7e:dc:b3:9a:a9:bd:38:96:60:ba:01:76:33:2a:
         64:96:7f:fc:4c:a1:98:af:7d:b4:b8:b6:3a:6f:3c:c9:d1:4d:
         97:96:cf:16:e3:75:45:04:09:4e:9f:b5:bd:38:27:29:35:8b:
         75:49:93:c5:39:34:55:f6:e8:e8:69:bc:42:40:b5:0c:00:cc:
         41:4a:2c:dc:76:55:14:82:c9:db:80:90:6a:79:b0:74:69:a0:
         22:74:d7:5c:85:99:92:c9:d0:e5:02:b6:84:2c:e0:74:ad:7d:
         3f:bc:49:66:8b:4d:e9:ce:26:17:44:69:78:e2:60:b9:f2:45:
         b3:5b:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:16:39 2025 by rpki-client