Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
File:                     85f2ea3c-4e52-3222-94c6-afd6e810592b.roa (raw, json)
Hash identifier:          22wkH0u/2r2lG3aRErdFLWt6qwVFbqPrsaBYQAyDSCw=
Subject key identifier:   80:46:D5:19:04:31:CD:37:49:64:A4:A5:0F:F7:C6:57:7D:AA:99:71
Certificate issuer:       /CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
Certificate serial:       010D0C9F4328584B110C09EBAD119402BEE2D200
Authority key identifier: 8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2602:fa28::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:09:eb:ad:11:94:02:be:e2:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3630f82-169c-4b03-ad42-aa6f5b71d91d
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=ed22386f-e6a9-449a-b35d-61eab939d68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:02:eb:b5:93:c3:31:be:9a:3b:36:16:7c:8b:
                    c9:1e:a3:5c:ee:fe:a2:9d:ba:0b:06:e1:90:da:8d:
                    91:8b:53:dc:c6:ea:09:2b:da:ea:4f:5e:6f:56:00:
                    37:31:dd:49:7e:64:78:91:8a:55:07:52:d2:5e:02:
                    53:1a:76:ad:85:ed:8d:f3:1e:9d:05:aa:08:cd:c0:
                    05:be:db:cd:51:1b:e4:6c:ed:e0:e5:a1:12:7e:f8:
                    a8:ce:f5:4c:fd:51:ae:94:9a:d5:5f:c4:41:17:68:
                    e5:02:d7:80:0c:55:77:32:dd:8b:66:d2:66:fe:d7:
                    88:ac:e9:b6:65:8f:61:86:8f:21:e1:0b:c4:52:53:
                    08:2a:a3:53:40:dd:6c:d6:e2:a2:c5:b5:01:e6:20:
                    83:a8:89:18:0c:d4:a3:00:35:83:f2:a2:0c:c6:3d:
                    d7:80:e3:ee:85:3d:49:3c:dc:ff:7a:95:8b:4f:8c:
                    28:6e:85:fc:00:ba:3a:ab:a3:7f:3b:a9:67:45:5c:
                    90:58:d7:fb:5d:5c:90:2c:e4:41:2b:e7:7b:38:42:
                    58:5c:ae:48:43:34:19:e2:71:a3:fe:30:f4:a9:89:
                    d4:76:92:da:29:36:18:b4:84:e4:2b:47:fc:52:92:
                    98:28:8e:d2:35:27:63:5d:d0:00:e8:14:46:c1:77:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:D5:19:04:31:CD:37:49:64:A4:A5:0F:F7:C6:57:7D:AA:99:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/85f2ea3c-4e52-3222-94c6-afd6e810592b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d/a3630f82-169c-4b03-ad42-aa6f5b71d91d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:BB:12:0E:88:E0:E4:10:DC:79:9A:11:CC:5E:E0:EA:C1:40:0E:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3630f82-169c-4b03-ad42-aa6f5b71d91d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa28::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:d1:ba:92:db:97:77:40:f1:0c:8d:54:03:56:7e:e3:02:
         96:a2:0f:0f:c5:5b:5c:f6:96:a8:57:c9:ae:12:b5:e4:88:55:
         a8:5b:2e:b6:c6:a7:42:65:be:a2:e1:aa:d8:15:05:86:66:df:
         9e:3a:67:04:ca:de:dd:12:61:db:93:5c:dc:d6:32:1c:c1:2b:
         5f:44:42:e4:60:62:6e:7e:f5:99:20:0d:7d:48:73:30:d4:08:
         3c:ab:15:ff:24:72:86:e0:8d:3e:09:e7:e7:35:0e:c7:32:0f:
         47:98:2d:69:96:2b:e5:f2:91:2b:39:1c:08:96:5c:0b:3e:ec:
         84:5d:62:64:d7:6a:18:95:ac:73:a9:92:46:d5:7d:a9:c5:b7:
         fa:b3:52:7d:13:b8:12:8d:fa:f5:78:f8:c2:2a:f5:0d:d1:20:
         c0:92:f0:00:7d:eb:64:93:65:23:dd:3a:7c:4b:08:be:08:fa:
         e5:b3:cc:3b:cd:94:df:3d:eb:0c:ed:7f:1b:4e:95:1b:46:25:
         21:26:9b:6f:57:c0:3d:9c:2a:ea:b5:59:78:88:71:03:3a:44:
         e1:c7:5e:c2:59:7f:b9:62:57:51:d9:b0:af:a5:c8:6b:81:11:
         4e:e8:ce:c1:42:b3:1e:43:91:65:71:dc:23:78:e3:38:59:8f:
         88:27:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:56 2025 by rpki-client