Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa
File:                     54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa (raw, json)
Hash identifier:          z0QV5ujnFpgaZAMR1GSP5jgDI334bJcOBqAQRCXAW4Q=
Subject key identifier:   76:8A:47:73:10:9F:EA:21:AB:5E:A3:DD:1F:C1:C3:59:AF:BA:F8:EF
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584F4F081534EC44360BD48A3E00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     13213
IP address blocks:        2607:6b80:59::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:15:34:ec:44:36:0b:d4:8a:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=4a548271-b23e-4e7d-9f66-d994c89f003d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:33:c8:df:0d:7c:e4:10:32:3a:94:ad:43:29:
                    0c:19:96:ba:74:de:e9:2f:50:b7:3d:d7:e8:ff:79:
                    fe:e6:7e:55:63:42:e1:46:2d:c1:fe:29:27:2a:91:
                    77:9b:57:42:b5:5d:28:84:f9:b3:4c:c0:f6:80:e6:
                    1b:fb:5e:ad:d6:0c:8f:4e:4a:a3:33:d0:2c:d5:1d:
                    0e:b8:a4:99:ed:8d:8a:6f:00:ab:5f:b3:ef:08:e9:
                    76:d7:e0:25:1b:4a:e9:d1:1d:90:dc:71:0b:3b:7c:
                    3e:7b:37:98:3a:b1:90:00:af:69:c1:69:ef:94:7e:
                    e7:c5:e3:b6:9d:98:75:c4:33:bf:f7:0d:ca:6f:d9:
                    dc:6c:5c:4d:d5:15:df:47:75:e4:54:35:5f:b9:64:
                    d3:08:99:7c:9a:9b:57:be:ec:bb:f6:84:ac:f8:1a:
                    5a:74:be:9a:1e:2b:e6:34:28:95:91:3f:3e:ba:67:
                    e7:5c:6b:fb:20:b0:5b:7f:59:47:7b:bb:13:05:2c:
                    c6:c0:b5:52:a0:37:53:49:e1:f3:9d:3b:f3:b1:73:
                    cd:64:d7:2d:77:d4:75:3a:20:62:a1:14:6c:25:12:
                    46:1c:67:4b:72:39:62:3c:56:f3:85:3c:11:01:a8:
                    cf:ed:5b:ba:7e:e0:a0:d3:71:cb:48:9f:4a:07:55:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:47:73:10:9F:EA:21:AB:5E:A3:DD:1F:C1:C3:59:AF:BA:F8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/54cbd242-1ded-336d-a25c-aa1cfcf24f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:59::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:da:6b:9f:74:f1:f6:7f:a4:2d:24:9f:48:96:b2:36:d2:
         a0:80:06:c2:bc:9f:38:96:25:89:df:53:ea:f1:58:4a:19:9d:
         51:29:a5:44:19:70:7b:17:7e:a5:0c:96:6e:7e:2a:dd:6d:6d:
         81:27:59:7b:fa:48:d1:07:55:2a:56:76:cc:d5:b1:ef:16:7d:
         f9:93:a3:3b:2f:4f:c6:cd:01:ee:cc:f7:55:99:f5:ab:b8:0b:
         9a:64:ee:d7:82:a5:73:85:e1:5b:01:e6:b1:0f:b8:d3:89:71:
         b4:06:10:e2:25:5d:38:20:9d:1b:08:a7:b0:45:67:f9:e5:97:
         a5:85:d1:14:f1:37:75:3f:28:b7:0c:c5:e9:ec:cb:2d:a3:56:
         46:a5:69:14:7d:bb:c1:e2:8f:97:f1:9b:e9:f7:30:e5:15:a3:
         24:7b:da:0a:6a:cd:b0:8d:ce:57:33:45:15:c3:f0:21:78:c1:
         a2:da:31:7a:54:68:77:9a:a8:0f:7d:db:13:fd:37:92:b2:77:
         63:bd:ad:91:75:43:53:94:03:bf:16:e9:70:1f:cd:3d:75:73:
         9b:4a:84:a9:cc:1e:83:58:eb:7f:dd:37:0a:21:a5:b4:06:7a:
         d1:3d:8b:df:a5:e2:34:a3:5d:22:56:3a:7c:bf:4b:cb:79:12:
         41:12:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:46:53 2026 by rpki-client