Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
File:                     e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa (raw, json)
Hash identifier:          gb+RJGpAEXD3WLpk8wV9wuAB/KjMgUoC6Sn2N/FMRYY=
Subject key identifier:   9D:A8:04:31:B3:D8:4B:05:07:20:ED:10:06:00:0F:10:6B:6D:31:D0
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584AF52142D1817872A7325A3990
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        2607:6b80:4b::/48 maxlen: 48
                          2607:6b80:4e::/48 maxlen: 48
                          2607:6b80:4f::/48 maxlen: 48
                          2607:6b80:50::/48 maxlen: 48
                          2607:6b80:51::/48 maxlen: 48
                          2607:6b80:52::/48 maxlen: 48
                          2607:6b80:54::/48 maxlen: 48
                          2607:6b80:55::/48 maxlen: 48
                          2607:6b80:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:42:d1:81:78:72:a7:32:5a:39:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=b4523873-f760-4499-896f-2d296aa201b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:60:9f:14:f8:1b:7f:2b:36:86:39:88:20:
                    03:d4:48:ef:3c:70:46:bd:18:e0:d7:bb:8c:b9:d2:
                    b3:d4:08:50:7c:e8:f1:f9:53:26:ce:85:8f:ad:d3:
                    b4:f0:cb:b2:c9:76:76:cc:1a:e9:9c:bd:3d:25:22:
                    8c:db:54:bd:05:bc:31:e1:9e:a7:bb:db:18:ca:fb:
                    80:e6:e9:c3:f6:7a:d2:4b:f3:be:3e:6b:d2:2c:dc:
                    b5:47:58:80:54:d2:4e:3f:b5:45:97:9f:bb:59:99:
                    cf:45:cd:c5:e2:16:03:f1:eb:b2:53:71:99:85:cd:
                    44:e8:d6:95:b6:0c:c2:b5:ca:2b:23:70:4c:66:e9:
                    2c:aa:ad:82:9d:b1:64:48:06:07:86:81:be:f1:3f:
                    5c:5e:c0:8b:5c:c4:55:ee:e2:8f:d4:3b:10:be:e2:
                    34:ef:4f:8f:29:a8:da:69:c0:2b:40:d2:0c:fc:93:
                    7d:9f:6c:32:0d:6f:80:0c:0b:f2:de:5c:37:bd:ee:
                    1a:89:62:75:22:4e:e0:82:d8:82:d7:8d:57:29:fc:
                    78:10:4e:b7:83:3a:b7:06:58:58:fc:61:89:61:56:
                    7c:d1:75:93:fd:fb:c1:17:1d:7c:79:6d:6d:89:37:
                    c8:27:e4:ba:06:59:de:62:21:b5:5d:52:9c:8e:ce:
                    08:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A8:04:31:B3:D8:4B:05:07:20:ED:10:06:00:0F:10:6B:6D:31:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:4b::/48
                  2607:6b80:4e::-2607:6b80:52:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:54::-2607:6b80:56:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0a:74:01:6c:46:5d:d9:1e:8a:9b:03:cb:75:76:3e:75:63:
         e3:75:40:49:ae:82:a4:c2:dd:95:7e:63:5a:b6:d8:87:30:02:
         09:52:26:44:57:1d:3d:b5:6a:38:b9:e3:63:19:bf:f9:9f:68:
         74:65:9f:f4:e5:72:49:cf:6e:8b:8d:1b:21:68:91:7e:f9:a6:
         3f:78:cf:2b:ff:f4:f1:d6:99:70:c8:06:76:3f:99:76:f5:dc:
         b9:18:d1:8f:ac:67:e7:c5:e4:6d:aa:a9:87:33:68:cc:a2:f8:
         8b:65:26:c0:5d:b9:f3:c8:c9:5b:31:52:58:a2:31:8f:2a:74:
         46:2e:97:92:f4:42:52:32:3b:4c:71:98:75:43:12:30:e7:2c:
         fb:20:48:42:af:7c:0f:07:d8:45:1e:5a:d1:fb:bb:d5:12:e0:
         db:cd:35:7c:b2:23:bd:33:4a:bf:ff:5d:b2:2a:85:ef:34:1b:
         08:c7:cf:06:bb:73:6b:9d:3c:56:3f:2c:b9:0b:02:74:35:d5:
         cd:bb:88:f2:11:89:bd:09:fa:c7:b3:12:db:62:e8:5b:1b:eb:
         72:e4:3f:0d:72:e6:c4:98:2f:72:bd:93:0f:ed:bd:c0:69:d3:
         d8:0d:74:7f:97:fd:69:d7:1b:bc:cb:df:40:b9:a8:92:a2:d4:
         6f:46:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:41 2025 by rpki-client