Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
File:                     5b33bf37-d11a-32be-9139-01c4b805f5ed.roa (raw, json)
Hash identifier:          8YYb8bBcfcewZFlwwdDa2MJ/XjbQIudbdFHo8wnuAdk=
Subject key identifier:   99:69:DA:FF:DE:D5:92:45:79:27:82:FF:24:1F:CD:34:DD:59:76:42
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4986F3FACBECB346CB538B40
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54198
IP address blocks:        2605:d6c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f3:fa:cb:ec:b3:46:cb:53:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aca7a3f5-46e1-41c7-855c-fe0fd5327391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:45:c6:9b:92:5f:8b:c1:a2:40:8a:8a:32:
                    7b:35:ae:07:db:3f:de:b0:67:47:3e:8f:a6:c6:e1:
                    e7:9f:d7:9a:76:85:e7:6c:83:f7:3f:46:7f:6e:fc:
                    bb:e3:2a:e3:87:22:9f:84:aa:10:c2:a4:8b:39:a6:
                    72:aa:2f:31:04:ca:13:8f:5c:2d:41:8a:72:35:3c:
                    df:91:af:34:d9:18:e8:8e:37:e4:85:b9:97:b3:e3:
                    ef:a2:c0:98:5e:51:15:2a:a1:74:2f:f6:f1:37:a2:
                    9b:00:3d:c6:78:f2:b0:2e:d9:a9:41:59:48:07:73:
                    77:e4:a5:d0:f6:64:e9:40:8e:ac:21:13:c7:eb:e6:
                    33:70:13:c0:40:f4:fc:f0:c6:8d:bc:a7:43:68:15:
                    18:ad:7a:0f:2f:01:28:d6:8e:9b:49:90:c7:85:e3:
                    71:67:fa:8c:b6:bd:03:68:07:0c:56:fb:38:24:4c:
                    ac:95:71:e3:9a:ee:59:78:e3:2d:02:ff:85:01:d1:
                    64:a0:86:b2:cd:5a:b5:81:38:aa:60:95:9f:56:85:
                    04:5d:72:18:85:76:c9:98:20:d4:55:8a:ac:b2:4a:
                    d8:2b:a1:02:a2:04:ff:81:67:c6:d6:32:b3:47:a5:
                    15:11:7c:69:8f:45:17:fc:21:e4:35:67:2b:86:b1:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:DA:FF:DE:D5:92:45:79:27:82:FF:24:1F:CD:34:DD:59:76:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5b33bf37-d11a-32be-9139-01c4b805f5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:03:a9:1d:41:7d:44:b3:28:38:dc:06:70:c1:a1:82:f7:f7:
         78:be:93:4d:bb:0b:ea:27:00:ef:b6:db:2e:c0:f6:25:b4:92:
         98:75:06:26:6b:3a:46:c6:fe:c2:77:3e:72:2a:62:4a:6e:1c:
         ad:c8:d4:7b:e8:0f:1d:fb:63:55:60:be:b1:77:b6:60:e6:91:
         ad:72:d1:c0:3b:4a:cd:a7:8c:da:b6:0d:99:f3:2b:2e:c4:ee:
         5f:2d:af:7c:38:fd:b7:50:a8:31:06:9a:b2:23:79:84:9b:53:
         57:e1:97:66:1d:d3:bf:99:5e:d4:35:95:a2:ae:0a:b2:d9:c6:
         08:9d:0a:84:14:64:c9:2b:36:2a:86:99:2e:c4:2f:7a:3f:6c:
         a5:99:10:8f:d8:f0:46:24:45:49:10:0e:aa:70:88:de:5c:33:
         3b:e6:83:ba:5d:03:44:86:2d:63:61:28:df:0c:50:8b:dd:83:
         94:0a:45:4d:06:af:63:fe:c8:f6:44:0e:d6:e2:c1:f2:f6:bf:
         c1:e0:1f:1c:fa:ea:9d:a0:2e:29:93:31:28:04:09:ab:71:3d:
         44:cf:1e:50:05:90:31:5c:20:4c:2b:ce:8e:3e:f5:98:68:27:
         3b:81:3a:7a:34:db:98:6b:ec:0b:57:e3:16:e3:21:6d:ec:a9:
         93:89:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:35:14 2026 by rpki-client