Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
File:                     ca06bd9b-beb6-3f78-950b-575c93605483.roa (raw, json)
Hash identifier:          VrTljhtnMkrlU0R6XrV6fBN3GCP9LuMqNnB7h9vJnVw=
Subject key identifier:   06:A1:FC:B2:07:9C:57:9B:21:B1:04:15:F7:C2:05:E2:16:EA:C2:20
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584EEEB753FBB9DB36EDCCC11800
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     46562
IP address blocks:        2607:6b80:67::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:53:fb:b9:db:36:ed:cc:c1:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=c4c34b3a-47d2-4462-b831-c46611514f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:11:4e:c7:b1:d4:f3:79:01:a8:47:c2:b0:
                    a8:cc:49:dd:2b:e4:7c:59:f9:ec:07:46:d5:f4:90:
                    db:71:6c:0c:89:a7:b3:48:1a:48:a5:e7:44:27:79:
                    f8:d4:9b:87:ee:62:44:6a:95:8b:83:92:7d:d8:70:
                    b8:50:17:42:4d:9a:50:4d:15:fe:68:04:b1:1b:dd:
                    ff:fb:ba:12:b3:88:f6:e1:b4:d3:6c:cd:b4:d7:8e:
                    2b:b8:00:fa:61:14:93:e7:1e:25:77:66:38:98:38:
                    a1:fa:1f:91:04:69:67:09:1b:af:c1:b9:52:20:74:
                    74:34:9d:e9:76:a5:61:77:b0:e7:d6:a8:e1:c1:df:
                    ca:10:77:c5:9f:cb:f5:7c:4e:f0:0c:85:87:6c:50:
                    d7:cb:8d:44:3c:b0:09:c0:f3:91:3a:2a:36:99:cd:
                    5b:31:31:7b:a2:d2:c2:af:0b:78:5c:51:b1:c2:31:
                    1b:c8:59:5e:4b:cb:5f:3c:f8:a4:10:95:30:52:a6:
                    04:26:aa:8d:91:b8:e5:61:6d:a0:07:85:54:bf:ca:
                    24:82:6c:8f:92:2d:a9:21:ff:36:0d:f5:a8:48:b2:
                    62:d5:0b:c7:16:09:db:04:76:9b:4e:53:bc:06:60:
                    18:55:6b:5f:e1:17:e6:6d:9a:18:ee:2f:b7:35:3e:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:FC:B2:07:9C:57:9B:21:B1:04:15:F7:C2:05:E2:16:EA:C2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ca06bd9b-beb6-3f78-950b-575c93605483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:67::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:03:c2:3f:45:90:db:9c:a1:c1:16:0b:8c:7e:38:f3:0d:
         45:de:4b:f5:cb:fb:1e:11:94:5f:69:35:9f:4d:60:1e:f3:50:
         c7:da:c5:55:9f:4e:79:1c:ff:fd:bc:fa:2c:af:d8:1f:99:32:
         92:99:af:9c:7d:cb:b1:18:c0:c7:e0:ad:e3:17:19:d0:c1:9e:
         44:2b:3d:57:57:28:68:d3:4b:b8:c3:08:24:e8:67:3d:8a:27:
         65:fd:fb:34:5f:cc:8c:98:29:65:bb:22:5b:15:69:a3:dd:c3:
         21:bc:67:72:83:33:b8:ff:ca:78:bc:a1:4b:16:49:a5:63:dc:
         59:c0:fa:6a:7d:48:84:1a:24:62:8d:08:2c:68:a8:41:61:fd:
         86:b7:70:32:74:60:d1:53:e8:c5:0e:3a:89:e0:2f:10:c8:89:
         7d:bc:12:fc:1e:45:57:b4:9d:14:34:58:fd:9c:67:7f:24:7d:
         18:f2:55:fb:1e:61:26:ee:85:7e:dc:e2:3c:d4:82:4f:b5:d0:
         9c:01:49:51:65:ee:7b:c8:49:3b:e8:2f:5c:c1:43:ef:f4:32:
         74:68:ca:8f:65:f7:22:13:b7:ba:c9:18:f7:27:ec:0f:39:3a:
         07:33:c4:b4:d1:27:73:d2:f1:b2:34:c0:b9:bc:56:46:15:28:
         4a:17:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:08:50 2026 by rpki-client