Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa
File:                     31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa (raw, json)
Hash identifier:          f4QnqehilhrqyN4wcyeeDTbjLv8mZ1dSHFfzU5sPhwc=
Subject key identifier:   D6:D2:83:19:05:26:86:60:8E:A6:CD:CC:C4:8C:6A:77:13:09:5E:97
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584B328C33E7636940746AFE44D0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     5769
IP address blocks:        2607:fa4b::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:33:e7:63:69:40:74:6a:fe:44:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=b06c9300-0e67-438c-9969-e66bfd3ba7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:fd:28:3f:06:5b:d7:87:97:da:89:50:a2:
                    21:47:b9:6b:ab:cb:8a:8f:3c:ce:79:49:03:df:5d:
                    1c:32:c4:17:e5:c1:64:2e:0f:df:f0:d8:6b:26:fb:
                    cd:d1:0b:52:10:63:02:cd:2e:61:2a:ce:7f:54:5e:
                    81:56:08:2d:65:4e:e8:00:7d:0c:19:f1:25:34:c5:
                    3e:0e:58:3c:2e:bf:b3:c9:69:91:36:a5:05:be:b2:
                    79:ea:2c:87:06:25:2f:7e:db:96:c8:51:69:41:38:
                    33:dc:9c:15:98:4c:19:6b:d0:ae:e8:ed:cc:b0:30:
                    13:2f:0b:62:79:0c:db:cc:54:e1:6e:74:ba:95:57:
                    c6:ec:9b:92:77:77:de:03:1e:4f:07:5f:90:70:28:
                    3d:ea:27:d3:5b:48:f8:c6:9b:7a:43:8a:09:d8:1f:
                    a7:bb:42:3e:89:8f:2b:d5:09:e2:df:b0:8a:68:b5:
                    41:df:81:81:5a:9a:23:5e:bb:02:5d:18:68:47:78:
                    a5:0a:e8:f7:ba:15:a4:7f:e1:72:f9:78:5a:af:b3:
                    69:74:ca:2a:63:56:8a:1a:21:53:58:16:cc:77:3d:
                    26:1d:ce:12:b8:77:ad:84:9f:41:63:af:6e:2b:99:
                    87:2b:63:2d:e3:46:e9:91:c4:7b:bc:70:08:39:c1:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D2:83:19:05:26:86:60:8E:A6:CD:CC:C4:8C:6A:77:13:09:5E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/31ed6c28-d2e9-3e09-8f2a-f0e5c91eec46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa4b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d2:d7:30:77:74:cc:c2:cf:55:fd:db:80:b1:dc:7f:48:b4:
         6c:fd:53:e1:cb:1c:00:80:ac:44:f9:39:fd:1d:6d:a2:1c:e1:
         38:f7:8f:fe:91:7d:dd:77:83:18:61:1d:87:f5:cb:d7:67:d4:
         e6:27:35:4c:22:6e:c0:17:37:f6:09:c6:09:58:16:4b:c0:c0:
         ae:f5:3c:64:93:bd:ed:75:3c:b2:e4:5e:ce:72:4b:cf:86:45:
         6c:12:1d:66:70:c3:24:ae:a3:79:46:a0:f1:3e:9f:13:fd:57:
         42:4d:b2:bd:ed:d8:45:84:e1:2a:78:08:30:bf:c7:b6:89:68:
         4e:a0:a9:45:f7:a4:df:6d:db:8d:1e:6b:91:14:f6:a9:95:a9:
         1e:47:e4:7c:91:72:f3:15:e7:dc:d3:32:e1:89:b3:71:5f:81:
         01:e5:48:51:44:99:2f:7e:85:8d:2c:0b:87:bd:61:50:0b:92:
         90:ca:a6:2e:5a:29:bf:12:4f:27:14:5e:3e:87:74:51:3c:d1:
         38:5d:ac:cc:bf:00:e9:02:92:b7:fd:ba:44:3d:3c:4c:c9:68:
         3a:f4:a4:4b:87:1e:70:df:34:28:03:1b:1a:53:af:20:4d:59:
         f1:dd:ab:ed:a1:c8:9a:48:ce:65:80:55:59:5f:09:81:ae:3b:
         47:bc:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:43:14 2025 by rpki-client