Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa
File:                     1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa (raw, json)
Hash identifier:          w8eJ24iZT6V56809B2agW83zwP643DrjF/4P4WvP7qs=
Subject key identifier:   CA:88:50:BD:BB:82:B3:35:B7:B9:F5:2D:55:31:FC:15:19:FA:B8:8C
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584DCAFAFB402E64C54BBDE95400
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     9009
IP address blocks:        2607:6b80:5a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fb:40:2e:64:c5:4b:bd:e9:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=a1f5569b-8a35-4916-955a-0f00478d9208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:41:17:82:55:c7:04:80:60:1b:eb:b3:8e:33:
                    b8:3e:c7:9e:61:a5:1b:30:7a:11:91:90:65:16:36:
                    00:27:69:a4:dc:3c:33:34:a4:fb:df:76:b3:2a:9b:
                    51:e1:76:22:2d:2b:5a:99:2c:67:fa:e3:bf:90:c8:
                    c9:be:6b:95:34:82:41:82:8d:51:d0:38:fa:4e:13:
                    38:cd:c6:1b:75:6b:bd:c4:0e:81:b7:42:08:7d:6c:
                    6d:f9:b4:0b:79:66:77:15:14:27:5c:b6:33:f9:47:
                    18:fa:3f:7b:8e:63:4e:93:54:19:b7:72:d8:e2:dc:
                    c5:99:5b:dc:2f:1f:31:f9:e2:52:9b:ca:26:69:fc:
                    e9:25:32:a6:fe:2f:fa:53:bc:cf:31:c8:2e:4d:e4:
                    d2:30:9a:8a:ca:b6:04:d9:94:57:9d:be:a2:5f:13:
                    a7:49:53:81:97:fc:2c:ad:f5:76:e2:7d:63:a0:08:
                    e1:8e:31:cc:72:89:34:6e:66:b8:2d:0a:44:45:f8:
                    c7:df:14:52:06:17:df:57:d1:3e:e5:10:5b:49:4a:
                    f7:af:c2:04:c4:ab:c7:80:aa:8a:4f:aa:c9:29:53:
                    2d:ba:24:d6:e2:b8:bf:86:44:94:34:02:0a:0c:28:
                    e3:a8:11:94:0a:12:e5:4f:04:d1:4b:8b:d8:b2:cf:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:88:50:BD:BB:82:B3:35:B7:B9:F5:2D:55:31:FC:15:19:FA:B8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1a1b9af9-1bfe-34db-a910-734009fbf7f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:5a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:71:ad:fe:16:df:d2:38:2a:62:0c:2f:93:6e:4d:cd:79:e7:
         27:95:86:a1:f1:1b:43:b5:4c:75:1e:8d:27:15:eb:c0:b5:fd:
         41:82:8a:f1:aa:9c:00:16:a8:91:e1:aa:5f:29:23:79:19:b4:
         69:f7:74:71:a0:09:4b:bd:09:e8:3c:d3:1f:28:80:e4:69:46:
         8d:53:b5:4a:46:51:9a:4c:c2:8a:8d:1c:ee:c0:67:46:70:b0:
         72:3f:5f:5b:67:3b:cb:a6:69:b9:85:f5:82:ee:4d:a0:e4:28:
         4e:16:2f:b8:d7:6b:dd:e7:cc:03:40:68:7c:b5:70:92:90:33:
         be:6f:2d:bf:22:bb:9a:6e:f4:95:d5:e7:67:70:b4:99:1b:4b:
         47:d1:ad:96:33:6d:56:fc:a7:5d:1b:37:ff:02:d8:15:cb:ec:
         57:dc:07:3b:32:be:21:5e:e8:b3:45:c8:6e:2a:04:99:f3:84:
         12:38:ae:0c:7d:b7:4a:ca:73:79:b1:32:67:82:3e:ef:b4:51:
         2a:ec:54:f7:1e:ab:78:68:fd:e2:03:c9:8e:21:04:d9:71:03:
         cf:60:31:c8:3a:38:a3:10:08:dd:3a:f4:36:78:74:05:e3:d5:
         73:90:24:2e:23:01:2a:00:1f:8d:ca:c8:7d:32:88:e6:82:7c:
         6e:66:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:53 2026 by rpki-client