Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/22200234-8a76-3ea0-ab1f-38189fcca213.roa
File:                     22200234-8a76-3ea0-ab1f-38189fcca213.roa (raw, json)
Hash identifier:          tpVQ3re20Pb7hSTgJsGhmRJ3NWy5bah8sQuf6huzsEs=
Subject key identifier:   55:33:EF:D5:9B:C3:8E:EF:30:F0:E8:FC:4E:EE:E3:00:54:DA:91:16
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584F4CD930C0BAB14F3E7A877640
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/22200234-8a76-3ea0-ab1f-38189fcca213.roa
Signing time:             Sat 26 Sep 2026 06:14:30 +0000
ROA not before:           Sat 26 Sep 2026 06:14:30 +0000
ROA not after:            Fri 25 Dec 2026 07:14:30 +0000
asID:                     30690
IP address blocks:        2602:f99b:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:d9:30:c0:ba:b1:4f:3e:7a:87:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Sep 26 06:14:30 2026 GMT
            Not After : Dec 25 07:14:30 2026 GMT
        Subject: CN=c43405cb-7e77-4597-b10f-56c8242468a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:5b:7a:9b:07:78:07:f7:35:62:f1:73:76:
                    89:e3:ab:83:95:d2:d5:6c:b2:3f:22:23:0c:68:b7:
                    0e:97:10:c8:fa:90:c3:90:97:00:ba:1b:39:9a:43:
                    0e:8c:0f:f0:27:c4:f5:67:33:f8:82:3a:14:fd:bb:
                    e0:77:58:14:dd:1b:dd:80:ee:de:44:e4:ad:ed:0a:
                    f7:b5:19:20:62:0c:d9:03:52:00:8d:d0:f6:01:2a:
                    1c:36:ac:16:25:87:de:c5:6e:0b:97:48:b2:27:e5:
                    02:e9:0d:f9:eb:99:63:68:a5:fa:8d:ba:50:5f:1e:
                    33:4b:32:a9:94:e5:3e:ed:d6:c9:89:1f:a3:80:d5:
                    ce:cf:ad:db:84:04:4b:5f:97:62:65:4b:0c:dc:ec:
                    a5:59:f0:9c:e1:ba:e1:35:4f:4c:b6:a7:d1:20:04:
                    69:03:0d:34:01:e2:67:5e:05:33:1c:d9:19:95:28:
                    ea:21:fd:48:c8:80:f5:f3:b0:0d:7e:e5:34:d3:8d:
                    ec:09:ea:8d:66:e3:d7:18:eb:41:0d:bb:1f:53:c0:
                    d1:63:21:fa:fb:d1:6b:38:d3:b1:6b:03:2d:45:e2:
                    25:42:ec:9a:1a:f3:71:60:c3:88:3e:94:23:99:73:
                    b6:06:7e:cd:99:7d:72:98:4c:04:73:86:5f:f2:c9:
                    b8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:33:EF:D5:9B:C3:8E:EF:30:F0:E8:FC:4E:EE:E3:00:54:DA:91:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/22200234-8a76-3ea0-ab1f-38189fcca213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d7:f4:ad:74:62:65:9c:19:89:dc:dd:f5:ba:f2:22:89:5c:
         a1:f7:b2:9c:c1:5e:ad:96:d5:8b:54:b6:d0:29:e3:89:f8:7a:
         30:eb:51:dc:2b:d5:2f:27:87:0b:b6:04:21:75:87:44:f4:0d:
         a8:0e:b0:4f:d7:3e:aa:6c:c4:d7:7f:a7:e2:fe:93:38:13:a8:
         e1:47:78:aa:dc:79:1e:5f:ff:ab:75:23:fc:a9:07:db:8e:bd:
         f3:ce:28:60:4d:8e:8f:96:ea:7f:c8:e5:64:00:ff:f4:71:34:
         d0:b5:3b:c0:cd:ff:81:30:7a:96:4e:85:50:81:00:37:8e:56:
         d0:b4:ca:5d:79:eb:7c:87:b5:e6:57:d5:68:7a:8c:c8:ea:3f:
         23:2b:86:db:ff:59:63:fb:f5:87:c3:7f:f5:02:b5:df:08:ad:
         a4:ae:3b:1b:27:e0:69:ca:c7:82:b9:c0:e1:33:96:da:60:25:
         d0:86:ac:c4:f1:31:de:9c:42:d2:10:b8:20:af:7e:82:b5:27:
         dd:2c:e5:c8:fc:49:69:c4:6a:70:ca:38:ee:56:c3:1f:8c:20:
         7b:92:fa:60:aa:5d:5a:dc:47:a9:0a:cb:dc:f1:1b:60:27:de:
         0b:24:a9:5b:06:7f:e4:76:8e:bc:e9:27:20:ed:5c:f3:f0:23:
         3e:94:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:46:06 2026 by rpki-client