Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa
File:                     f472fb35-0540-3ebc-ab17-926ca90c1609.roa (raw, json)
Hash identifier:          oODcQWsjUmpR9lGQ45rTLCkS7cp7PdHJlGBjpWRgH8Q=
Subject key identifier:   E2:45:46:A4:C1:56:11:87:1B:AB:E7:2C:76:B8:AC:AD:5C:F2:44:57
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B7CC31923F378D3D33E00E3C0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa
Signing time:             Sat 11 Oct 2025 15:01:02 +0000
ROA not before:           Sat 11 Oct 2025 15:01:02 +0000
ROA not after:            Fri 09 Jan 2026 16:01:02 +0000
asID:                     212238
IP address blocks:        2607:6b80:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:c3:19:23:f3:78:d3:d3:3e:00:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 11 15:01:02 2025 GMT
            Not After : Jan  9 16:01:02 2026 GMT
        Subject: CN=dd64e7c7-b337-4bdd-bcf4-950b52e6147a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:df:61:7b:03:fe:6d:12:f8:c2:3c:14:be:
                    e3:43:3f:08:9b:2c:49:5e:7b:20:d9:3e:da:8e:1d:
                    6e:b3:df:e1:30:0f:77:96:85:64:03:72:99:dc:48:
                    13:59:87:aa:e6:b9:93:ee:95:af:18:d7:8e:ee:4d:
                    33:ba:7d:22:12:0d:a5:a9:00:ff:25:06:6b:a4:7b:
                    fc:f0:51:63:5c:2e:e0:37:e0:c4:ae:df:f6:19:f4:
                    12:dc:92:10:b3:92:01:82:52:e3:65:a3:70:60:93:
                    83:43:46:94:33:81:c8:17:bd:39:21:ff:fe:bb:6a:
                    fc:ae:8d:4b:b5:42:02:5f:38:7a:d3:5b:e4:87:ac:
                    05:71:93:0b:41:61:41:97:21:a8:86:43:a0:a4:4d:
                    ee:40:62:80:2c:a1:10:1d:aa:80:97:ec:3e:1f:dc:
                    66:c6:fa:b7:ee:15:b7:f5:1c:6c:2e:ee:40:f2:8a:
                    14:e3:01:2f:0c:c2:53:91:30:58:f0:04:80:ca:0a:
                    4c:df:4b:97:6f:ed:9c:2a:12:12:69:21:10:50:1b:
                    77:c3:fa:5b:6c:b9:62:31:19:02:56:19:df:1b:95:
                    31:2d:06:d4:ae:26:7d:65:42:ab:76:d4:20:4e:3c:
                    15:a2:49:10:10:d7:36:d1:e1:e0:3c:29:91:39:d2:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:45:46:A4:C1:56:11:87:1B:AB:E7:2C:76:B8:AC:AD:5C:F2:44:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/f472fb35-0540-3ebc-ab17-926ca90c1609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:31:81:62:db:1f:69:ee:36:b5:8b:85:77:f2:25:b0:a6:
         2a:dd:2a:c5:ec:4f:b8:c4:02:f8:64:f6:35:65:63:a2:e8:bf:
         c0:e7:b4:22:78:09:8b:cf:83:eb:0f:2d:de:67:c4:0f:ba:12:
         b7:e7:f2:3f:78:5c:c6:fd:f1:7c:e2:4f:9a:53:84:81:64:6c:
         3a:56:ec:99:e2:81:05:74:da:62:a1:de:3d:ee:0f:24:fc:a6:
         df:53:e4:68:3c:8b:ad:f7:de:cd:ba:8c:ed:70:69:2c:37:67:
         6e:90:0b:d8:06:7d:ec:05:55:3b:ac:b9:b1:ca:06:ce:57:f9:
         20:9e:79:c0:25:2f:4a:24:81:d1:79:12:1e:d0:d0:ca:11:5e:
         ed:76:21:99:a8:30:7f:89:73:84:f8:93:c3:27:ec:4b:95:a7:
         57:e9:83:ae:b3:52:af:43:49:9f:02:5a:9c:58:59:47:09:31:
         14:93:43:c3:71:4f:b0:93:45:64:27:e8:26:f0:fa:7a:69:2a:
         86:ad:82:a1:ce:52:6b:57:b1:75:a4:db:c9:f6:e0:db:34:45:
         f7:37:a3:32:20:57:b5:a7:16:2f:c4:98:af:d8:71:df:be:07:
         11:86:78:16:48:f8:18:8a:c6:07:80:ba:5d:ad:2c:16:0d:82:
         ef:7e:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:49 2025 by rpki-client