Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
File:                     32c994a1-ef40-386d-a407-28e1c00909b9.roa (raw, json)
Hash identifier:          rwjy+1cqtG72ErwyzkAg36b6Qlb2Fvbl2G3fH3qtXos=
Subject key identifier:   20:65:68:90:1F:5B:E2:94:34:E8:95:1E:B1:52:CA:CC:82:DA:23:50
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E6F3A447293D9F0D564E03EA0
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     25645
IP address blocks:        2605:8300:2::/48 maxlen: 48
                          2605:8300:8::/48 maxlen: 48
                          2605:8300:e::/48 maxlen: 48
                          2605:8300:f::/48 maxlen: 48
                          2605:8300:13::/48 maxlen: 48
                          2605:8300:14::/48 maxlen: 48
                          2605:8300:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:44:72:93:d9:f0:d5:64:e0:3e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=87f23627-97e9-467c-83e7-6ab18b96783b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:71:e2:ae:06:ac:e7:e1:71:33:be:99:28:
                    f1:bf:af:bf:cb:f5:80:17:d3:b3:f8:98:c4:55:76:
                    bc:db:62:01:cd:81:72:b2:4d:b3:22:2e:9e:da:40:
                    18:71:5c:de:61:a3:0d:96:65:37:58:9f:df:59:5f:
                    53:f4:a3:91:32:e5:09:a4:a8:23:bd:d6:59:10:ae:
                    fc:bb:0c:fd:d9:f6:bc:35:d7:62:3c:8b:bc:75:52:
                    0d:68:9f:05:e7:eb:3e:73:23:57:60:65:98:69:db:
                    3a:a3:a9:dc:0e:32:39:3f:b7:a6:02:a6:2f:68:50:
                    b0:15:88:b0:c9:ce:db:7d:30:80:f9:27:eb:0c:26:
                    cf:ce:b9:02:4d:16:eb:93:e4:97:ad:f5:c8:cc:d2:
                    cc:28:0c:9e:28:cc:88:f6:fe:38:7c:65:ab:73:6a:
                    c0:15:00:e5:f5:8a:2a:91:ca:69:9d:e5:78:bc:60:
                    8d:41:f4:da:02:37:38:74:37:e8:f3:16:fb:8b:a0:
                    f3:08:a9:a1:5c:1e:13:95:83:9d:54:de:8f:cf:67:
                    3d:c2:b0:79:7d:91:d4:62:b0:41:af:52:60:82:28:
                    f4:0f:32:ab:07:63:cc:d0:7b:7f:0d:8f:58:e9:51:
                    93:d4:ba:d1:13:a6:36:8a:63:f1:56:41:1e:29:80:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:68:90:1F:5B:E2:94:34:E8:95:1E:B1:52:CA:CC:82:DA:23:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/32c994a1-ef40-386d-a407-28e1c00909b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8300:2::/48
                  2605:8300:8::/48
                  2605:8300:e::/47
                  2605:8300:13::-2605:8300:14:ffff:ffff:ffff:ffff:ffff
                  2605:8300:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:61:2c:86:d5:fa:f2:0c:85:00:28:e3:b7:df:69:e1:27:bf:
         9a:62:af:cc:57:1c:58:e8:c8:1a:fc:20:39:8e:59:2a:1a:a0:
         02:52:95:a7:b8:5a:e1:0d:4a:d8:fe:16:27:e1:e7:7b:68:be:
         a9:93:61:64:54:a0:27:d4:92:6e:77:75:ab:d5:3a:e3:4c:ec:
         23:e0:b4:e7:30:9f:2a:1f:48:1e:c7:b2:2b:08:f1:f0:9a:a8:
         94:20:25:a1:29:46:54:48:23:d9:0a:01:d5:01:6c:93:1a:da:
         d2:df:d4:72:4f:25:14:9c:f3:4a:31:73:f6:4b:eb:48:e0:e4:
         0f:d7:fc:3f:19:50:36:b5:5d:71:f0:f5:e3:ea:02:61:33:09:
         15:bb:f1:d2:d3:24:94:26:22:ba:f1:ba:9a:b7:5c:d8:bb:6b:
         ce:89:ec:12:8f:1b:36:b5:b9:57:38:8f:fc:68:64:86:43:ba:
         cb:49:fe:ae:01:0d:c0:89:6f:d0:c0:e2:03:96:80:6e:cb:50:
         1a:25:6b:b7:31:55:ec:0e:e0:b9:7f:6b:d7:a1:60:a6:a7:ed:
         4c:6e:60:17:17:40:d1:73:48:ad:29:49:3c:a7:d8:5e:b4:ba:
         ab:18:e3:7a:e8:86:0e:75:72:a1:82:11:95:14:52:6a:48:85:
         61:2a:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 05:25:39 2026 by rpki-client