Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa
File:                     24977fc6-ebe4-3a2a-9569-770db3752420.roa (raw, json)
Hash identifier:          cHoObd+vqHBxJK3P5AbcOh79BERaGdiZ57n/dEHsloY=
Subject key identifier:   69:CF:96:71:E3:B2:03:F7:CD:AA:E6:B2:64:C1:43:CF:EB:E6:63:3B
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584BAC028686DB2F3685C074B680
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa
Signing time:             Tue 28 Oct 2025 13:11:49 +0000
ROA not before:           Tue 28 Oct 2025 13:11:49 +0000
ROA not after:            Mon 26 Jan 2026 14:11:49 +0000
asID:                     212238
IP address blocks:        2607:6b80:2a::/48 maxlen: 48
                          2607:6b80:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ac:02:86:86:db:2f:36:85:c0:74:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 28 13:11:49 2025 GMT
            Not After : Jan 26 14:11:49 2026 GMT
        Subject: CN=ac1e8377-92c5-49a2-8c25-59c95fc8ff7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:58:e2:b5:d3:f1:9e:f4:2e:20:5b:c6:57:
                    21:b6:81:b1:d7:e6:37:5b:af:0f:43:fe:e6:04:93:
                    14:b0:c7:0b:b0:59:a5:8c:04:cc:ac:c6:6a:07:61:
                    4a:75:3d:c8:24:ad:07:47:ba:ab:72:21:42:47:7b:
                    db:3c:83:3f:ba:fd:83:69:7b:9b:6b:ab:c5:66:4c:
                    20:01:14:3b:81:06:ea:eb:67:43:2a:6e:79:93:c4:
                    35:de:ac:5f:77:3c:55:9b:43:89:7c:38:71:d8:9e:
                    03:07:9f:63:9a:ef:da:7d:6a:15:9f:81:44:78:63:
                    ea:00:c1:00:57:0f:60:df:76:ca:e3:88:a6:46:8c:
                    57:a9:8f:6e:9b:e5:54:da:db:b1:84:0e:79:ce:9e:
                    63:aa:99:94:c0:95:96:d7:94:a6:30:87:72:e0:9c:
                    bf:6a:09:c7:cc:7d:d8:21:c2:2c:97:5e:43:92:e9:
                    61:42:61:8c:ec:ed:00:74:8b:10:eb:a9:e5:7f:c6:
                    26:b3:5d:ba:fa:de:37:8b:48:a2:48:41:4d:0d:25:
                    60:50:b4:60:36:5c:48:e5:3e:87:99:69:b1:62:4a:
                    0b:39:6a:1e:9f:e2:95:8c:a7:41:5c:5e:25:e4:25:
                    be:6e:60:b0:06:5c:d8:df:36:72:ba:8b:fa:45:89:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:96:71:E3:B2:03:F7:CD:AA:E6:B2:64:C1:43:CF:EB:E6:63:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:2a::/48
                  2607:6b80:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:92:6b:9f:be:ed:9c:b4:9f:4b:25:e5:5b:1e:c3:71:d1:
         6c:c1:3f:00:70:17:9f:ba:df:d8:9c:9d:ed:8e:61:34:dc:9b:
         fc:d8:ba:03:1a:c5:35:f9:33:9a:24:de:be:4a:ec:d4:a2:91:
         47:6c:97:9e:92:8e:37:70:5d:d9:26:1d:2e:ea:95:a0:f9:73:
         3f:ff:70:43:55:26:66:19:ea:92:c7:ce:e8:84:71:90:d2:3c:
         94:2a:97:85:1e:a4:ee:13:c5:b8:78:a1:10:73:c1:f6:95:0d:
         bb:30:0e:16:b9:a0:97:d5:86:2d:a6:3c:33:cc:f0:2a:0e:6c:
         cd:9c:90:7b:4e:12:41:bf:e3:85:45:2a:d8:ba:02:fa:d4:b1:
         1d:a3:a0:9a:32:db:43:b6:fd:8c:59:1f:71:84:05:4d:22:8a:
         69:0d:4a:fc:d6:cd:b1:f4:2b:18:90:80:d7:56:9f:b7:4e:94:
         ba:52:2d:80:1b:07:25:ea:6a:f6:ce:d9:ae:c6:9c:e2:15:75:
         73:4d:77:8c:a7:d4:ee:d6:09:7a:82:fe:b9:60:a1:ac:a4:55:
         fa:b4:7a:a0:30:a0:67:1e:2d:12:f9:97:8b:f6:92:ad:09:34:
         b8:19:c1:2d:c4:f5:99:74:7a:bd:e3:7e:6c:f1:1c:26:0d:7c:
         a7:e8:1a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:32 2025 by rpki-client