Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa
File:                     afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa (raw, json)
Hash identifier:          uj1bul3svTOTTqkd2edyW9zv+vMDps+j45QHV7lq+TE=
Subject key identifier:   65:2F:9E:EC:AC:44:30:C7:6E:4B:4D:FD:1B:79:48:4D:F1:8C:C6:E2
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328584F4987D2BAF3D9C97960B29780
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     5769
IP address blocks:        2605:d6c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:d2:ba:f3:d9:c9:79:60:b2:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b29238ba-5b74-411f-8f60-9930c0eada83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:64:97:f6:60:70:6d:15:38:02:46:31:d2:
                    ab:d6:33:ee:0e:52:40:cd:ae:2f:ea:94:79:6e:e5:
                    3b:ba:8d:7a:61:57:75:66:d2:3c:50:2d:5e:46:94:
                    bb:73:7d:1b:ac:f9:9e:26:60:58:d6:42:d5:c1:27:
                    8d:bc:47:06:8a:8d:17:c8:c4:28:93:dd:c4:1a:c7:
                    d3:50:ea:fd:15:1b:3b:71:0c:e2:34:d0:ac:1d:4e:
                    4e:c4:54:70:dc:97:75:01:4c:9a:40:86:3c:9a:76:
                    78:83:be:12:b3:18:d5:b6:cb:4f:7b:fa:cd:1b:39:
                    a4:52:08:68:8e:86:df:c4:48:2a:5a:08:51:22:1e:
                    31:d6:3c:09:67:f0:d3:df:c6:25:be:ec:84:1a:77:
                    97:13:50:c9:21:18:ca:2e:67:89:fe:4d:e0:bc:25:
                    14:ec:e3:3c:c6:a0:f9:1f:0a:44:f2:e7:5c:af:0a:
                    82:dd:27:54:72:37:f4:44:1f:08:04:d5:d5:0c:4b:
                    15:0f:9b:a9:73:20:e9:99:90:49:8c:f3:8b:a7:4f:
                    00:bd:e3:a2:51:80:45:72:e1:0b:30:68:0d:a7:e2:
                    08:b0:95:b1:85:af:3e:59:e2:7f:d5:4c:46:eb:85:
                    5e:29:88:13:f2:01:b2:f7:27:be:73:f0:3e:49:88:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2F:9E:EC:AC:44:30:C7:6E:4B:4D:FD:1B:79:48:4D:F1:8C:C6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d6c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:24:6f:50:18:c0:59:86:f0:89:68:1d:09:7d:3c:c7:71:
         47:f2:d0:ef:50:c0:98:d5:37:b8:1c:77:fd:c6:7f:b5:be:37:
         98:54:d8:a2:d5:50:9c:0c:c8:7a:fd:2c:0c:2a:20:07:52:3a:
         64:45:c2:ee:07:72:48:e5:96:6f:47:88:e3:0b:11:2a:64:ee:
         b0:dd:42:fd:8d:e3:79:d9:8d:b8:4e:3f:88:31:22:94:4b:76:
         8a:85:2d:0a:ad:2e:80:4e:42:71:c2:a5:50:8e:c0:a4:37:65:
         b6:b5:ec:81:df:8a:92:fb:0b:be:97:60:bb:6b:bc:7b:a0:24:
         a1:4d:de:b3:d4:51:b1:3d:a3:1d:11:95:9f:32:c7:ba:b6:54:
         33:72:bf:c8:07:e7:92:50:9f:28:dc:1f:39:c5:d7:1f:30:b6:
         81:35:c3:c0:a2:24:5e:c7:8a:8c:a8:00:3e:b8:aa:77:bb:e6:
         a1:6c:64:f7:02:f4:e2:47:b9:10:fe:50:5e:e6:0e:d9:57:56:
         d7:e8:2e:4a:3d:ea:bd:c3:83:2c:b4:a1:55:c9:f2:11:2d:f4:
         98:0b:94:95:f3:f7:16:b9:ab:9e:c2:05:85:68:45:5a:4a:35:
         06:a8:a4:4c:3e:3d:51:d7:f2:d1:e0:28:3b:a3:9c:9e:d5:23:
         bf:6b:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:46:57 2026 by rpki-client