Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
File:                     f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa (raw, json)
Hash identifier:          WEHkTqf72EFiM7Yvmt4YBbcMuh4iOPDAmIw7hCKRToc=
Subject key identifier:   11:8F:34:B8:70:1F:72:17:9E:7D:C7:81:5A:4F:D7:0A:7F:DB:A9:CC
Certificate issuer:       /CN=35241669-57c3-4f1d-8e12-d32455951379
Certificate serial:       010D0C9F4328584B6A61EE2D5E99A7ACD2D16D00
Authority key identifier: 8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     62880
IP address blocks:        2602:f8bb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ee:2d:5e:99:a7:ac:d2:d1:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35241669-57c3-4f1d-8e12-d32455951379
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=a303a442-6fe1-4e87-bc4c-29485a261a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:e5:c4:4d:3c:a0:00:be:24:1f:81:bf:2f:
                    b5:21:83:fb:20:63:b8:61:d1:13:3f:ce:fe:3b:e8:
                    0d:c8:d7:29:f2:4d:32:ff:06:7d:b6:ce:0d:0d:ef:
                    68:90:76:2b:0d:f1:f9:da:54:09:fe:e1:81:ca:b1:
                    f2:34:7e:77:eb:9e:91:e1:67:0b:4c:59:1b:78:ab:
                    a1:07:a1:2c:c2:1e:44:78:e0:b8:a3:08:47:59:c2:
                    bf:e2:4a:69:c3:1d:72:e5:84:e6:0d:5c:5a:30:b4:
                    8e:9b:5a:ac:bf:a5:47:e8:65:e2:63:33:fc:da:19:
                    45:72:50:86:cb:a2:7a:8f:c7:4a:aa:be:db:a2:c8:
                    28:20:5f:84:a7:dd:24:f9:23:73:e6:ee:64:0b:d4:
                    67:d2:ac:b0:41:e5:4d:0a:c5:16:20:a8:1c:32:15:
                    a4:20:0b:f2:9b:ea:bd:9d:84:63:6b:f9:bf:14:39:
                    27:75:d2:da:f4:ae:87:d7:18:21:a4:9c:ee:f1:17:
                    67:79:42:20:e3:bd:c8:31:78:51:e5:43:80:c5:5f:
                    39:81:c0:9d:ad:db:c0:a9:f6:fe:a3:be:e9:28:80:
                    cb:fa:44:bb:89:cf:93:a3:62:9f:d5:2f:24:ad:85:
                    6c:b9:8e:cf:16:ee:0e:e3:73:4b:3e:ea:31:9f:11:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:34:B8:70:1F:72:17:9E:7D:C7:81:5A:4F:D7:0A:7F:DB:A9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/f28b22d1-f21a-3c82-ac9f-0ae35247b044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379/35241669-57c3-4f1d-8e12-d32455951379.crl

            X509v3 Authority Key Identifier:
                keyid:8B:44:6B:AC:A8:C8:70:20:1E:9F:69:37:9E:9B:EE:31:2B:77:B9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/35241669-57c3-4f1d-8e12-d32455951379.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:36:d3:15:3b:95:7f:a8:d8:70:1c:a2:c4:54:26:42:db:
         33:e5:cd:c9:b5:98:ff:00:5e:02:ba:19:cf:c8:8c:dc:4d:f1:
         23:38:62:9e:73:e3:5c:67:10:9c:9c:1f:31:4d:5b:eb:67:7a:
         67:c5:99:34:f8:94:ed:e9:12:81:84:08:52:29:e8:44:26:f6:
         04:33:a1:cb:78:b2:88:fb:54:a4:b5:3b:d4:00:a0:78:df:e6:
         02:3f:0b:7a:96:30:c4:56:a0:4b:5d:94:d9:ac:0a:25:46:0d:
         6f:8e:fe:ed:7c:a7:73:92:fe:2b:c2:9d:ef:15:a1:e0:69:7b:
         c6:d9:b0:11:e2:52:92:61:26:41:ff:d5:a8:a8:90:52:ca:32:
         d8:69:aa:db:ea:34:84:8b:3c:93:74:d0:78:7c:01:d5:0b:4f:
         2b:65:1e:d0:cd:55:3a:30:2d:e4:a4:53:cd:1e:7f:6d:13:d1:
         b5:60:cb:34:b8:3f:46:d0:f7:bf:d8:67:29:07:15:d5:41:23:
         63:7d:bd:89:72:65:27:bb:81:34:3c:13:2f:64:b8:fe:bc:e2:
         19:14:93:14:75:4a:84:d0:f8:32:8b:e9:ec:02:3b:8f:ac:76:
         2b:02:0d:8e:d0:72:3b:e8:9e:3d:f0:b6:94:e3:dc:5d:f9:42:
         22:01:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:06:58 2025 by rpki-client