Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa
File:                     6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa (raw, json)
Hash identifier:          SN3trPBVoChq3ANCNNpLrA7u1w7qWqNNanXbF0OsR0Q=
Subject key identifier:   82:9A:F0:04:D7:C9:DB:A7:BB:7E:6C:06:D2:6C:CE:11:B4:3D:62:CE
Certificate issuer:       /CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
Certificate serial:       010D0C9F4328584AFEE6A5CEDAB89E1393582EC0
Authority key identifier: 1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     27630
IP address blocks:        2607:f350::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a5:ce:da:b8:9e:13:93:58:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5bdcb-94ea-482f-989f-a6367adb24b4
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=429be619-005d-49e5-87ca-9152be768323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:c6:f1:97:bb:ae:0d:68:5f:86:26:95:16:
                    e5:cf:4d:3d:4d:1b:fe:73:5f:0d:43:53:17:48:54:
                    21:00:c6:4c:bf:83:23:24:72:32:47:bf:7a:06:99:
                    d5:02:d4:f8:9e:b1:51:12:b0:43:f1:d3:7e:72:50:
                    12:d3:be:d3:3a:64:db:d4:67:6c:79:95:fb:57:30:
                    0e:5c:61:45:54:74:7d:5c:e1:75:19:cb:b5:02:fb:
                    dc:ba:1c:e6:3f:81:12:93:49:90:bd:65:71:0c:70:
                    e8:10:b1:2e:0f:fb:5c:86:1a:fb:ae:bc:3b:04:43:
                    25:6d:05:0b:cb:91:3e:8b:2b:56:11:18:b8:b1:60:
                    fb:40:e0:1e:bb:f3:95:a8:e9:c7:a3:03:c3:65:05:
                    83:d5:42:3f:93:e3:a2:6e:c3:57:74:5c:4b:a1:f3:
                    70:c6:2b:09:4c:5c:55:b5:0d:48:ad:5f:f8:4d:2e:
                    20:b8:f1:2d:33:65:d1:dd:a4:4c:f4:75:fb:43:e0:
                    a2:4b:52:bc:8c:d0:3f:b6:5f:77:31:b3:7c:de:40:
                    86:5c:e2:6d:7f:70:a0:51:1b:46:59:19:cd:a1:1f:
                    83:7a:80:40:92:32:8e:3d:2d:34:b9:66:af:af:53:
                    3a:ed:7d:96:61:34:ed:e0:2c:33:39:e0:d6:ae:6d:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:F0:04:D7:C9:DB:A7:BB:7E:6C:06:D2:6C:CE:11:B4:3D:62:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/6eaed1ea-3446-361d-abfd-07f55bdb2f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4/65c5bdcb-94ea-482f-989f-a6367adb24b4.crl

            X509v3 Authority Key Identifier:
                keyid:1F:97:F6:35:B5:4F:0B:8B:88:38:C4:9D:5D:11:A5:73:F9:59:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65c5bdcb-94ea-482f-989f-a6367adb24b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f350::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:8a:4d:86:17:63:7c:74:4b:6f:14:96:42:fc:4d:8f:fa:
         aa:dd:32:2e:07:99:4a:51:1e:aa:0f:06:4d:45:d5:3d:33:c4:
         d1:1e:6d:6a:b6:af:ec:b1:92:77:0c:0d:84:03:bf:42:b0:3f:
         77:74:33:4a:91:63:c1:39:2b:46:77:79:18:7e:db:f2:37:5c:
         40:0d:1e:86:16:19:fa:dd:94:7c:c6:3f:8e:ed:df:52:eb:ac:
         ca:fd:a5:6e:da:2c:e0:9f:fc:54:5f:67:5a:e3:8d:89:4e:b9:
         ab:4c:67:4c:57:90:aa:a6:22:5a:62:c6:d6:aa:77:d4:83:cd:
         d7:7d:21:7b:1d:db:52:49:ac:c1:61:00:ea:99:18:8e:80:d0:
         cb:f9:48:6d:0e:12:94:2f:15:a1:27:d1:72:19:b6:eb:fa:e0:
         bc:71:0f:6e:e6:32:09:07:c7:2d:84:81:0f:d0:1b:d5:f8:5f:
         ae:7e:da:92:ef:e5:77:1d:70:cd:a5:8b:30:aa:de:91:c6:b3:
         78:9d:69:9b:b5:5c:8d:a5:26:ed:b7:4b:17:d0:cd:f1:32:04:
         d9:4a:7f:0e:77:a5:e0:d6:a0:93:5c:f5:a2:34:39:1c:25:28:
         9a:a3:c4:47:63:c0:82:4b:89:40:68:cf:43:4d:f7:94:27:2e:
         84:0f:f1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:54 2025 by rpki-client