Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
File:                     e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa (raw, json)
Hash identifier:          CbptDxaIZTDhNTIrGgX7IUpOVXKbtZEzG/eE/crteg4=
Subject key identifier:   72:CC:33:35:01:B8:71:C5:1A:D3:CE:DF:3C:19:20:95:12:E7:4C:7E
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584F1897A38A1BAD5CF66937B690
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        2607:6b80:4b::/48 maxlen: 48
                          2607:6b80:4e::/48 maxlen: 48
                          2607:6b80:51::/48 maxlen: 48
                          2607:6b80:52::/48 maxlen: 48
                          2607:6b80:54::/48 maxlen: 48
                          2607:6b80:55::/48 maxlen: 48
                          2607:6b80:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a3:8a:1b:ad:5c:f6:69:37:b6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=85ffbf41-d3a3-45bc-b430-b0ac5705aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:fa:13:d5:cf:cf:c6:95:eb:af:05:85:3d:
                    61:a6:2b:c7:47:88:f0:ec:67:fa:9e:9b:a9:e4:85:
                    22:13:1d:94:05:fc:6d:ca:ab:f9:43:06:70:26:3a:
                    8c:4d:50:00:1b:14:d9:ac:4b:61:65:cf:e7:73:4d:
                    50:a5:86:a2:e6:b1:99:8e:81:6a:cd:6f:37:4e:94:
                    39:1f:1f:96:9b:c0:9e:73:ce:ff:e2:30:fd:bf:2b:
                    99:f7:61:21:66:98:4a:db:ed:02:8b:90:de:d4:1e:
                    b8:35:b1:e7:2b:bc:5d:37:75:ec:6f:c5:e4:23:52:
                    f6:56:06:72:bf:51:27:dd:3e:17:59:50:32:6d:d9:
                    81:e5:c1:4b:16:fc:85:17:ff:ab:26:59:45:5e:a0:
                    63:a5:60:35:b6:a9:cf:bb:18:ed:0d:d1:62:0a:69:
                    49:59:c0:34:7f:ee:6b:06:77:70:f1:89:37:6d:50:
                    01:df:50:78:b2:35:2c:a3:d7:0f:03:56:d9:f6:d6:
                    9e:97:5f:11:9d:8a:d4:ba:eb:5a:e2:55:d6:14:d8:
                    05:5f:fd:6d:ce:28:75:d5:7c:c4:68:4c:5f:09:9f:
                    2f:41:02:72:97:f5:c6:98:86:9d:fe:a3:10:db:ad:
                    a3:51:a9:7b:0a:d3:15:67:75:d2:7b:27:fc:ff:fb:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CC:33:35:01:B8:71:C5:1A:D3:CE:DF:3C:19:20:95:12:E7:4C:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:4b::/48
                  2607:6b80:4e::/48
                  2607:6b80:51::-2607:6b80:52:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:54::-2607:6b80:56:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c0:ab:80:3b:d3:24:70:59:95:8c:85:ce:d8:03:f5:9a:17:
         bb:84:8a:62:85:fb:05:c0:42:b9:36:8c:f6:98:1f:82:9b:c6:
         50:81:ee:06:ff:a9:88:e9:7e:ad:bb:98:d5:92:18:98:93:ef:
         49:44:69:c5:7d:15:95:fa:33:e9:ed:0d:70:5b:ba:e1:ab:94:
         b8:18:58:19:fb:89:45:84:06:b4:77:66:8e:c3:c1:b6:14:97:
         cf:f3:95:e9:36:56:47:48:c5:5e:9e:f8:a0:b5:37:e9:92:c7:
         19:79:4c:2c:82:b2:4a:d0:e5:84:69:70:cd:fb:9c:10:9a:d7:
         5d:5b:4f:ab:b1:7c:f8:5c:c6:82:87:fe:04:3a:43:bc:da:90:
         e1:59:85:22:30:58:01:a6:65:a9:8c:fb:cf:dd:a7:f2:e4:c7:
         bf:77:04:c8:e2:e2:02:89:21:ba:e7:67:9e:91:fa:42:1e:15:
         de:fc:f7:4a:88:c4:31:d5:59:47:b8:73:af:41:fb:db:06:e2:
         7f:ae:64:ca:fc:bd:c6:f9:ec:1d:d8:f2:cd:34:61:4f:c3:4b:
         93:79:d9:dc:d8:11:ac:dc:65:23:f4:3c:78:16:36:ce:51:6e:
         5f:a9:83:a8:d8:0e:53:e3:a4:96:ee:1f:43:c3:e6:c8:14:64:
         a7:8c:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:41 2026 by rpki-client