Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/93b2d242-f10c-34ff-a6fa-770ec3699bfc.roa
File:                     93b2d242-f10c-34ff-a6fa-770ec3699bfc.roa (raw, json)
Hash identifier:          WT5zL/bIZpTKF0WcMwMUZwLp6URZf1sE4H6zwrBNk7o=
Subject key identifier:   CD:C1:56:88:B6:A8:1D:30:1F:96:8B:E4:5E:AE:61:18:B4:D0:9A:69
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584E6144A5F4254EBA9CBB554100
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/93b2d242-f10c-34ff-a6fa-770ec3699bfc.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        2607:6b80:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a5:f4:25:4e:ba:9c:bb:55:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=4462e48f-a46e-476e-b5d1-90db6f2ee165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d5:0b:45:e5:d5:9a:50:f7:2c:7e:ac:31:38:
                    af:af:3b:4a:d2:d5:d8:08:45:47:95:c5:ba:73:2c:
                    36:46:0b:f4:6c:a5:16:88:1b:a9:5d:32:c2:59:2e:
                    3e:72:b8:cb:b0:26:b1:dd:0a:39:99:e4:2f:20:43:
                    cc:ff:e8:e4:5d:59:fc:e6:c8:1d:b8:36:94:0a:f7:
                    9a:b4:d3:a0:c2:3f:2a:b5:85:5d:6e:1c:e9:91:6d:
                    6c:1e:4d:8e:bd:f0:09:f1:eb:9f:2e:04:6f:36:bd:
                    d3:10:e9:d7:6f:ad:1d:aa:aa:79:3e:93:7a:87:c3:
                    7b:32:a5:5a:e3:57:86:59:01:c2:41:9a:83:3b:4e:
                    ff:bb:12:cc:1b:45:9e:16:23:22:5b:fd:16:1d:f0:
                    46:76:be:69:8b:0b:ee:9e:cb:fe:0c:82:d4:14:4b:
                    81:38:44:6c:33:6c:30:76:73:c8:a9:13:09:4d:37:
                    a1:d3:8d:a2:f7:51:ac:92:ac:52:38:53:09:32:52:
                    03:e9:3c:5c:55:c3:0d:04:03:0a:02:10:b6:3e:c5:
                    50:f8:fe:59:98:0d:ce:bc:b1:6d:70:e6:35:d4:85:
                    51:51:61:8d:ec:c9:2a:69:81:7f:1f:a3:0e:44:c1:
                    50:9c:06:ed:7e:8f:06:4a:4a:3a:2a:ef:5d:cc:e7:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:56:88:B6:A8:1D:30:1F:96:8B:E4:5E:AE:61:18:B4:D0:9A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/93b2d242-f10c-34ff-a6fa-770ec3699bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:7c:77:13:26:0c:bb:5f:14:b9:74:6f:d9:d4:fc:45:7a:
         65:64:4c:6d:09:0d:46:c7:fc:f9:b8:dc:f6:b1:6f:6c:62:b2:
         e4:e8:9d:c3:93:72:66:e8:e8:9c:04:66:b8:08:b8:df:a0:07:
         75:66:6f:2d:a9:47:9b:65:40:cb:09:a0:22:2b:62:18:d5:85:
         51:4e:0f:16:58:36:4f:59:f0:ac:26:5c:54:53:ce:96:e8:78:
         40:f3:d5:a3:8a:ff:25:d9:ad:f5:0b:6b:a1:c6:0d:be:9d:cd:
         c2:77:36:f9:f3:e1:8a:a0:2c:ab:4b:f3:2c:d7:f6:a5:5c:92:
         92:6a:61:82:19:b5:b5:87:96:b6:c4:8d:8b:80:66:ab:8a:d5:
         23:0a:df:9c:9c:a3:ff:13:ee:a2:bb:91:95:5b:b2:1f:c4:89:
         f2:3a:3b:bd:6c:17:40:a0:95:1f:42:24:01:81:a9:53:51:45:
         b8:da:62:34:77:e0:fd:20:77:91:df:f0:5f:04:cd:65:20:02:
         10:77:31:82:54:2f:19:ab:46:3a:9b:bc:5d:c8:3e:54:c5:c8:
         5e:0b:ca:9b:1d:24:dd:2b:2c:ae:ac:ab:27:e0:98:4a:6c:35:
         0f:70:75:ae:f6:22:e2:b4:c2:0f:2b:0f:5e:d3:ca:18:18:29:
         0f:db:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:16:43 2026 by rpki-client