Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa
File:                     24977fc6-ebe4-3a2a-9569-770db3752420.roa (raw, json)
Hash identifier:          36BnQzs3PWlMC82hFE3RMRRRFWUc65kCQObh77lnP0Q=
Subject key identifier:   97:C7:B2:0B:B1:9F:E7:A4:F5:DA:87:63:74:85:8E:4D:02:22:A1:A1
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584F92088DB5D9BB00857EBFE480
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa
Signing time:             Wed 21 Oct 2026 01:00:12 +0000
ROA not before:           Wed 21 Oct 2026 01:00:12 +0000
ROA not after:            Tue 19 Jan 2027 02:00:12 +0000
asID:                     212238
IP address blocks:        2607:6b80:2a::/48 maxlen: 48
                          2607:6b80:30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:92:08:8d:b5:d9:bb:00:85:7e:bf:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 21 01:00:12 2026 GMT
            Not After : Jan 19 02:00:12 2027 GMT
        Subject: CN=99177979-94e3-43b7-8061-4331f5f08b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:9f:b0:62:84:21:33:0f:8d:cd:98:76:9d:
                    84:87:7d:da:b6:38:1b:36:8f:18:e1:7d:fe:af:5e:
                    79:55:3b:0c:09:aa:ae:cd:f2:79:71:26:94:4e:53:
                    fd:c6:2f:09:11:f2:c9:7c:97:0e:bd:c1:04:1f:90:
                    d9:07:6e:a6:1e:6f:20:ec:4b:34:af:36:cd:4d:ef:
                    e6:9a:f5:8d:76:a9:1b:65:a9:1b:c0:71:c5:14:52:
                    b4:78:25:f3:bf:9a:74:18:c0:8b:99:55:39:42:ab:
                    8c:20:07:02:61:fe:3d:30:75:7a:24:54:77:11:3e:
                    3e:ff:21:92:fc:27:c6:2b:39:1b:c4:f2:0a:19:ef:
                    bf:b3:76:3c:eb:b0:eb:3d:21:f5:56:92:86:cc:4f:
                    d9:40:7f:7c:34:4e:73:dc:78:41:29:0a:52:02:ce:
                    02:c6:61:98:64:a1:60:13:53:a4:8c:42:85:37:e5:
                    82:d5:92:ad:f9:63:3e:ff:42:0f:2d:82:4e:f3:de:
                    a3:e6:63:64:7c:63:d0:ec:3a:b0:06:69:56:33:09:
                    48:fb:07:4e:91:84:ab:a1:c9:4d:7a:95:ed:85:ef:
                    04:56:82:0e:77:2e:17:42:5e:b9:3e:00:37:3f:f5:
                    9a:1e:90:c2:95:af:b0:83:c1:75:e6:3d:21:e2:30:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C7:B2:0B:B1:9F:E7:A4:F5:DA:87:63:74:85:8E:4D:02:22:A1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/24977fc6-ebe4-3a2a-9569-770db3752420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:2a::/48
                  2607:6b80:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:fe:a4:16:9c:6c:1d:a7:9f:d7:8c:2c:ba:5a:eb:0c:54:
         05:9a:a9:30:29:90:0c:77:51:5b:6a:1f:c4:50:81:34:6c:e8:
         2d:1e:fd:7a:d8:b9:c2:b6:b6:67:a1:8d:41:05:a5:e5:5f:38:
         c1:69:bd:1a:26:f0:3f:45:f4:d5:5e:cc:0a:6e:5c:5c:7c:d7:
         c0:72:66:46:26:84:fd:bb:cb:b0:c7:c6:b9:95:ae:4b:13:e5:
         2f:7e:9a:fd:d7:05:29:93:d5:3e:de:7b:75:0e:b0:21:85:d6:
         97:79:4c:b5:d9:11:25:78:00:80:6d:28:a0:9a:c2:11:64:63:
         d0:4b:41:f1:53:68:b4:93:4f:bd:a8:d0:38:1d:80:6b:bf:04:
         45:84:e7:a7:5e:7a:de:5c:20:b1:dd:a3:ca:f1:59:9a:fa:05:
         ce:d2:71:69:a2:97:fc:af:9a:10:3d:c2:cc:0a:a4:cb:9b:72:
         d0:84:a3:20:a9:63:bd:3e:82:ce:92:f2:0c:c3:0a:16:84:f3:
         55:bc:6c:fc:fc:89:e8:51:46:3f:aa:dc:1b:20:ba:e7:10:33:
         29:c6:0b:54:c1:5e:6f:61:9b:10:8e:10:d6:e1:8f:b9:53:77:
         72:5e:0f:00:2d:f2:28:60:0f:64:30:4c:3d:19:f5:a6:93:8a:
         ab:30:bc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:55 2026 by rpki-client