Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
File:                     e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa (raw, json)
Hash identifier:          ikoAqGGbZLCAs8rdezXP+AT/XcOKuERpvHkvrqhrPWo=
Subject key identifier:   A5:DB:25:38:6D:2D:A7:DE:98:F2:D7:87:29:A9:FD:CF:88:DA:06:5D
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584B75C2F27441D78D562ADD6B00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        2607:6b80:4b::/48 maxlen: 48
                          2607:6b80:4e::/48 maxlen: 48
                          2607:6b80:51::/48 maxlen: 48
                          2607:6b80:52::/48 maxlen: 48
                          2607:6b80:54::/48 maxlen: 48
                          2607:6b80:55::/48 maxlen: 48
                          2607:6b80:56::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:c2:f2:74:41:d7:8d:56:2a:dd:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=211e1b0f-4ba8-403f-ab53-63903b3d656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:42:13:f3:61:4e:96:66:0c:ae:b8:59:2f:
                    bd:c5:1a:ce:d6:0b:36:d0:e5:64:cc:a8:c9:77:c5:
                    31:14:f0:70:35:24:68:2c:01:64:b2:e8:5e:95:07:
                    0e:45:08:0b:29:0c:7e:30:38:cc:7a:a3:41:42:d6:
                    08:7b:50:42:50:17:e3:32:ae:27:8a:e2:29:0a:b6:
                    a6:a7:fd:d1:2d:e3:30:42:5d:03:b5:ce:9e:0f:1f:
                    e1:7a:e4:f4:54:6a:66:43:dc:93:fb:25:ee:40:da:
                    49:4d:35:ce:29:aa:0d:7d:0b:b6:1a:3f:d3:6e:d3:
                    17:2a:61:85:00:d6:b4:56:30:15:ef:a9:da:f6:94:
                    35:6d:ac:37:1d:76:54:3d:a1:5b:d6:6c:c5:5c:66:
                    72:9a:b5:a9:04:93:e7:0a:3b:37:0f:7d:37:13:48:
                    28:3f:15:a1:bc:b7:59:db:72:c1:bf:92:97:2c:bd:
                    1e:ed:82:e9:1f:94:30:2f:12:5c:97:f4:a1:d0:f8:
                    75:b0:96:4a:3d:46:85:a5:56:2a:e1:26:1a:44:57:
                    19:6d:bb:b4:56:8a:14:cf:93:0d:90:ea:8c:25:3d:
                    32:52:b7:45:36:04:4b:48:20:ca:c9:18:b1:2a:16:
                    d1:eb:50:5c:5d:bb:a2:6a:51:04:5e:d4:03:a5:67:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:25:38:6D:2D:A7:DE:98:F2:D7:87:29:A9:FD:CF:88:DA:06:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/e824e6fe-54b1-3ae8-898e-a86c4e01e2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:4b::/48
                  2607:6b80:4e::/48
                  2607:6b80:51::-2607:6b80:52:ffff:ffff:ffff:ffff:ffff
                  2607:6b80:54::-2607:6b80:56:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:49:1e:65:5a:fc:70:46:bf:c5:1b:d5:ed:16:2d:a2:1e:
         0b:c8:5b:c2:4f:66:7f:90:cc:54:c7:fb:0a:f8:c0:49:42:e2:
         9a:4a:d2:9b:e0:07:7d:44:aa:d1:49:0e:31:ca:56:a7:bf:76:
         23:78:9e:41:b0:6e:57:4d:8c:bf:5b:37:b2:a4:9f:f9:6c:b4:
         66:fb:17:e1:f2:d6:bd:99:aa:91:4b:5b:0a:2b:9a:5a:c9:f0:
         e4:12:56:e8:dd:50:7c:0b:7b:7d:8e:a5:61:af:db:98:d4:df:
         a4:62:26:ed:95:6f:a6:48:db:a0:cc:62:27:b8:e2:cf:d2:8c:
         72:97:46:3c:50:59:1b:23:df:c8:de:e5:d6:71:0a:3c:35:5d:
         1a:98:e6:97:25:b9:99:71:8d:d3:1b:b4:ea:d5:6f:e7:ce:28:
         59:7a:b5:37:7b:2f:75:e8:b3:1f:13:c4:e7:a9:23:69:d5:02:
         b2:e2:b2:a0:04:55:81:6a:28:a6:b0:97:9d:4a:96:34:8f:51:
         49:f7:a8:66:9c:04:c1:d9:ed:5d:d1:82:68:39:f9:28:b5:4f:
         6c:9d:87:60:bd:47:16:59:63:28:13:d8:fb:37:2d:1f:41:30:
         a4:98:32:20:b2:dd:fc:93:00:8a:8f:39:f8:df:da:0d:eb:00:
         02:7b:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:46 2025 by rpki-client