Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa
File:                     24950ded-55a1-39d0-a8db-cbae4f113310.roa (raw, json)
Hash identifier:          bteVvIUpc5wG+grAdf2T6Qtfnxi3TWmCv8RYKKv/XLw=
Subject key identifier:   24:BD:37:C2:2A:D5:6E:91:DA:E8:D9:86:BB:D7:CF:C1:00:03:D5:0D
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584EAD1C515FE089CA3300F2A240
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     9009
IP address blocks:        2607:6b80:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:51:5f:e0:89:ca:33:00:f2:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=91afeb1e-4ab2-4d13-8a9a-98daff614433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:e7:62:dd:17:a6:8f:b3:18:97:7f:b8:1f:
                    b7:51:3d:82:97:d6:7e:17:d8:77:5b:0c:1e:21:e5:
                    bc:ad:ac:93:66:35:97:88:50:07:be:02:bf:2a:c8:
                    dc:97:a7:c4:6b:ea:15:09:86:ba:e8:25:b7:91:1e:
                    d4:5d:a4:ea:d9:96:be:ff:e9:8c:ff:93:1b:b8:ae:
                    40:2a:49:5e:64:8a:01:60:fb:90:a6:6a:72:bd:ad:
                    9f:43:d3:68:f8:ed:e0:78:81:5f:7c:44:e8:6e:51:
                    3d:38:08:a5:13:a0:68:ff:38:fa:20:bd:29:4b:5e:
                    3b:8b:e8:19:64:a8:88:64:1d:35:ed:2d:39:fe:db:
                    69:3b:51:bb:58:07:0b:bc:ec:6c:b6:7d:80:d5:b0:
                    2a:f1:ca:8b:8e:f9:0b:12:55:b0:23:22:2e:ae:fc:
                    02:e3:e7:0c:18:7a:b9:33:9c:c0:f6:67:ed:26:cd:
                    13:b9:52:92:58:26:5f:cb:c8:15:66:ed:9f:03:f9:
                    9b:55:c3:95:ed:bf:49:18:88:75:e0:79:7c:40:59:
                    2b:a1:82:ec:cc:87:1e:8a:7c:61:f3:81:8e:ad:83:
                    64:0f:8d:00:db:f4:cb:33:c1:da:ac:44:b0:05:c6:
                    db:46:51:da:48:0a:f4:4a:1a:44:3f:ed:2c:c7:8d:
                    e4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BD:37:C2:2A:D5:6E:91:DA:E8:D9:86:BB:D7:CF:C1:00:03:D5:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24950ded-55a1-39d0-a8db-cbae4f113310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:60:d7:43:3f:a0:5e:b9:86:02:63:3a:c0:06:fe:05:45:
         ec:51:7c:a6:4d:74:34:33:97:27:15:b8:fa:1a:dd:05:a6:1c:
         85:9a:69:db:1e:58:e2:1a:f0:c1:4b:33:1b:aa:cf:e2:af:e1:
         69:c9:a1:fa:4d:0f:82:c2:1c:0b:c8:fa:a2:6e:b7:20:db:4a:
         e8:60:c1:b0:9c:62:59:f1:e4:13:10:74:64:81:f2:0e:64:1a:
         1e:00:78:4e:fe:8a:e2:fe:36:09:56:ba:29:09:3e:d0:26:d2:
         43:13:c6:39:e4:a8:61:a6:c7:5c:66:1d:ce:60:d7:fa:56:90:
         45:74:6c:10:6c:8b:52:1a:09:be:71:9d:46:c6:23:cc:ea:95:
         95:73:6d:9a:2c:6f:d8:69:76:73:4d:4e:d0:52:b3:ed:73:f0:
         50:3d:b8:ae:46:d6:12:23:fc:27:3c:27:9f:18:0d:43:7a:fe:
         1a:d8:f3:f1:aa:6f:4d:5d:d4:09:27:d1:7c:3b:39:f7:7e:40:
         39:81:be:44:0a:89:39:5d:df:9d:78:3a:cb:fe:15:75:4f:63:
         36:b9:e2:17:09:1d:53:ce:70:20:ab:3e:23:1b:c2:ca:56:b2:
         23:a3:cd:20:c0:41:68:ef:bb:51:4d:3a:bc:cd:4a:30:8d:95:
         a7:f6:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:33 2026 by rpki-client