Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa
File:                     4b2e88af-7f81-348d-bb58-5ae1a543b386.roa (raw, json)
Hash identifier:          JBf2bN3EJk4o0PBW3SFGRwfiXW2TGTPtUS9FpB8UmZk=
Subject key identifier:   DA:CB:EA:B0:C2:A5:B7:58:56:31:60:83:A7:13:9B:25:7B:50:8F:A0
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584E9A7FD58161E86FB8F9E6C300
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        2607:6b80:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d5:81:61:e8:6f:b8:f9:e6:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=82ac2be0-439d-485e-93ff-317525788b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:43:92:89:58:4a:ee:3d:18:84:5a:20:ff:
                    da:99:69:f1:88:87:1e:31:45:6e:f5:52:b3:cd:c0:
                    17:b8:fb:91:bf:60:6f:15:a3:24:44:96:44:e2:dc:
                    2d:8d:b2:fe:5a:1e:4c:57:7d:1f:b1:3c:94:c4:4e:
                    34:0c:fd:23:a4:21:8e:55:68:ef:a4:93:7a:e6:8e:
                    ba:ba:59:86:eb:99:4e:e6:4f:bd:b9:0e:69:dd:cf:
                    81:91:a4:19:92:8c:2a:4e:e5:57:ca:8a:ca:09:a1:
                    6a:65:8a:2e:8b:fa:6b:ce:81:be:07:60:1d:a1:aa:
                    fb:1c:09:60:d3:61:5b:0a:9b:81:02:dc:82:f8:4e:
                    01:f0:2c:23:00:fd:d5:96:99:03:76:14:2f:23:03:
                    b3:92:ae:21:67:55:97:5b:01:e1:27:80:29:31:66:
                    1c:de:a0:48:04:7f:ba:41:b1:f3:ee:89:49:b1:f6:
                    1b:21:b4:e6:d1:43:fc:7b:87:60:5c:09:66:3e:77:
                    7f:d2:56:ef:64:d8:3c:cc:f5:dd:c1:9a:c3:5f:54:
                    57:95:78:f3:d0:d5:8f:72:04:71:d6:31:1d:80:a8:
                    fc:29:30:e5:d1:90:79:45:6e:f5:8c:6a:da:b2:15:
                    f7:ce:a2:48:2f:cc:e2:4d:4b:7f:a6:9d:30:94:ec:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:EA:B0:C2:A5:B7:58:56:31:60:83:A7:13:9B:25:7B:50:8F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:20:0f:02:25:34:40:3d:69:04:0f:58:e2:8d:48:2d:42:8e:
         48:46:d7:81:4b:f7:40:ef:64:81:72:ac:1c:76:02:ee:c7:4b:
         d2:70:ea:7a:09:9e:56:17:e2:cf:03:14:91:55:3b:be:0e:58:
         bd:6e:c4:d3:ed:94:27:a6:cc:de:98:5f:ad:31:05:6a:2b:86:
         f4:ea:cb:ed:fe:09:ad:66:28:fa:ad:67:69:ff:06:9e:d3:60:
         c1:0c:51:01:3b:32:8c:07:51:5b:f7:4e:9e:05:85:68:e1:a6:
         d5:cb:d8:1d:01:ae:e4:b4:9e:aa:fe:73:ba:f7:2a:a8:0e:16:
         b9:5b:0a:42:60:1f:35:f1:5a:dc:31:8b:ca:46:8e:58:69:8d:
         d8:1d:76:a1:22:35:69:e0:0a:44:cb:53:7d:f3:4e:a0:72:76:
         c1:10:49:99:d2:62:c6:e3:e9:da:66:4b:6a:7e:b6:cc:44:2b:
         d5:4e:d1:e0:85:95:9a:92:32:a4:05:bd:ea:ae:b4:b7:62:94:
         de:82:d5:af:5c:04:c1:48:ee:d8:91:e4:0e:c4:df:5e:6c:60:
         76:8f:c9:51:61:94:b7:85:fa:ef:8b:e8:20:78:b9:1c:f8:31:
         35:6f:d2:f2:3b:62:4e:21:dd:6f:09:0a:67:29:b4:08:10:c0:
         21:68:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:16 2026 by rpki-client