Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa
File:                     24950ded-55a1-39d0-a8db-cbae4f113310.roa (raw, json)
Hash identifier:          AOAw3nnXtIegPa21uqkDnKKEjHii718LifAOhjLQZwY=
Subject key identifier:   65:81:A8:5D:CE:5F:C0:F4:72:64:F2:5E:94:22:B6:E4:BC:0C:56:9A
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584F4F081580CF4CF634C38BD740
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        2607:6b80:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:15:80:cf:4c:f6:34:c3:8b:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=5f20309f-b601-4dff-b964-bf10e01bfc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:05:1a:16:8b:93:7a:ed:88:90:46:86:9d:
                    20:db:85:6b:14:e2:65:f9:6e:d3:74:2c:a3:ea:03:
                    8f:de:96:04:56:fc:e2:b7:e7:bb:0a:8e:53:94:c0:
                    69:59:a4:3d:8f:44:28:39:7f:20:a0:59:8f:a0:f1:
                    54:24:b1:a0:c7:c1:7e:5b:ae:80:35:05:0e:96:51:
                    06:0d:b8:8d:f1:74:67:0a:a2:9d:99:fa:b9:e0:5d:
                    22:40:9f:ab:45:ba:90:75:93:98:dd:79:09:fb:ed:
                    b6:1f:dd:0d:aa:da:cb:9b:4f:60:1f:ba:e3:e5:c4:
                    d7:69:a0:d7:fa:de:30:aa:bb:b0:13:07:98:c8:3b:
                    c6:0e:06:89:16:0b:1c:63:73:61:88:c6:7a:00:d6:
                    11:09:e0:54:28:8d:aa:89:42:1b:f4:95:ee:58:2e:
                    8f:ce:2d:82:65:d1:a7:03:3b:d6:16:e8:47:39:1e:
                    a9:3a:52:d0:22:85:1d:ca:aa:d8:49:d6:7e:5f:83:
                    83:ff:b1:bc:b8:d6:bb:6c:32:3c:28:ce:10:19:36:
                    12:df:6e:04:ca:d6:bc:5d:af:e2:c5:dc:16:a8:ff:
                    3d:7e:fe:eb:b5:39:c6:7f:6f:5b:a7:e6:fd:53:98:
                    48:b5:22:15:7f:89:e6:e0:b6:fc:99:be:18:f4:11:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:A8:5D:CE:5F:C0:F4:72:64:F2:5E:94:22:B6:E4:BC:0C:56:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:eb:f9:35:cb:77:e9:e2:44:cd:57:25:87:e8:db:85:0d:
         d0:68:8e:59:0b:c3:38:09:5e:39:14:67:cd:e5:a8:49:0f:cf:
         d5:f4:19:80:e1:0b:de:b5:fd:83:c1:28:53:31:9f:55:55:a5:
         24:43:a3:c7:a4:80:11:fd:07:1f:12:a9:4d:17:07:ef:0f:bb:
         3f:50:f4:b6:c7:84:9f:ed:45:8a:2a:20:87:c5:8d:1d:3a:52:
         d1:0b:3f:4d:8c:43:03:5a:39:21:fa:e3:d5:0e:cf:ed:15:bc:
         51:b3:a0:11:8a:ec:c6:2d:89:8a:c5:be:18:33:b3:d0:0f:8c:
         b1:a2:1e:00:49:bf:b2:1d:41:9d:07:b3:67:94:a4:0e:fa:20:
         fe:97:6a:76:9c:12:7b:01:c8:f5:a5:91:d3:c5:de:0d:bd:25:
         68:05:33:ab:34:75:61:f4:dc:46:70:12:d8:24:79:cd:d4:3b:
         8c:41:93:82:5e:f4:30:68:92:de:96:f3:e8:f1:86:75:49:f1:
         cb:f9:3c:74:0f:2c:71:f7:ff:13:21:e8:8b:dc:13:70:2a:cc:
         a7:48:82:65:2a:2f:5e:cf:71:f5:e6:d2:1d:9f:7e:5e:6d:93:
         21:83:73:b2:23:56:cb:ce:22:5b:f7:52:a3:4c:6c:da:79:8c:
         e5:08:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 02:30:00 2026 by rpki-client