Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/30d0225f-6ad6-3efe-a823-f24adb2e689b.roa
File:                     30d0225f-6ad6-3efe-a823-f24adb2e689b.roa (raw, json)
Hash identifier:          xD6qF72e8S26A9oSxmGm96XBujZXFjgTVVvkjyZX4fM=
Subject key identifier:   AD:82:B5:8F:4A:CA:DA:DC:D8:E1:D6:3B:80:6C:B7:0A:AD:ED:A9:C3
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F4328584B825C595762F6C52E67A14278
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/30d0225f-6ad6-3efe-a823-f24adb2e689b.roa
Signing time:             Mon 13 Oct 2025 15:08:51 +0000
ROA not before:           Mon 13 Oct 2025 15:08:51 +0000
ROA not after:            Sun 11 Jan 2026 16:08:51 +0000
asID:                     20473
IP address blocks:        2602:fb26:e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:5c:59:57:62:f6:c5:2e:67:a1:42:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: Oct 13 15:08:51 2025 GMT
            Not After : Jan 11 16:08:51 2026 GMT
        Subject: CN=3d453d5c-248e-46fd-b31e-a2406ae1f312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:b1:78:0f:f2:34:c3:21:7b:43:0d:10:b9:
                    11:3e:15:0e:38:05:7a:f7:7d:84:cb:90:10:04:9d:
                    14:6d:50:da:5e:55:46:a3:68:db:7b:b4:91:4f:c6:
                    83:9f:52:ba:30:6f:22:49:a7:57:3a:bb:76:7a:1d:
                    54:73:e3:b0:ac:ea:f5:9b:ce:5c:d8:b6:38:5e:cb:
                    d0:e1:84:e9:b0:02:92:6e:c5:f4:f0:0f:4c:74:f7:
                    5a:b0:21:ea:b1:04:55:2c:7b:bb:35:c7:45:3b:f1:
                    25:b2:53:ed:1f:92:d5:57:12:0a:fe:29:f7:8f:a0:
                    11:38:b5:f1:d2:32:41:0f:1a:54:7c:8d:2d:5f:a5:
                    4d:cf:3c:2e:72:01:cf:e5:d8:08:33:8c:76:c0:f6:
                    39:13:81:a5:d6:f4:8a:28:31:1c:43:7e:e1:a7:fa:
                    c3:76:48:85:5e:d6:30:21:82:3c:fb:c1:3e:b7:31:
                    08:e3:a0:e0:48:87:c5:7f:7a:56:4d:a2:71:65:50:
                    19:88:8d:56:82:55:cd:2c:a1:e3:8d:37:4f:ab:3c:
                    89:69:25:0e:b8:31:95:85:1b:a2:86:84:eb:e0:92:
                    ae:1f:fe:0d:8e:eb:68:cb:b5:f2:92:96:06:ee:5f:
                    df:8b:3b:62:17:e4:40:42:fa:6e:74:f5:13:2f:87:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:82:B5:8F:4A:CA:DA:DC:D8:E1:D6:3B:80:6C:B7:0A:AD:ED:A9:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/30d0225f-6ad6-3efe-a823-f24adb2e689b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb26:e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:60:68:48:b9:96:78:df:28:55:e5:9e:b4:c5:ca:bc:1e:2e:
         d4:fa:d8:94:8f:a3:ed:d6:97:77:b4:27:3d:c5:a9:7e:ff:cb:
         a0:d6:88:01:fa:b3:7b:c6:b7:81:75:b6:64:3a:7d:3b:a5:e2:
         b7:26:f0:f9:79:e5:20:8f:7f:8d:1f:b3:ff:ac:a2:47:79:ce:
         4a:49:1f:00:cf:9d:92:97:38:76:bb:5c:27:26:b9:71:8c:9e:
         13:91:3e:53:9f:8d:9e:e9:b4:f6:95:ad:5e:4f:c8:e7:6a:32:
         ab:5b:7e:0d:93:73:a0:82:7a:11:ba:ce:03:af:0b:22:13:ba:
         5d:42:f4:91:80:43:77:3e:d3:5f:fe:c2:d6:e0:5a:4e:07:bc:
         23:ac:6f:1f:5c:8f:91:59:cd:2a:a2:68:c9:a0:b1:50:01:c4:
         16:66:9a:1b:38:23:d6:01:5a:d1:56:2c:3d:a8:fc:00:11:8c:
         c8:12:55:b7:d4:74:7f:c1:b3:65:a6:d1:9f:b3:7a:39:6e:f5:
         b9:f2:a4:d7:e6:4b:50:7e:78:4c:10:ea:4a:a2:de:26:30:16:
         ea:4c:15:95:29:d8:21:64:83:78:2c:dd:00:f6:9d:ad:83:95:
         c4:84:1c:b8:dc:27:75:fc:62:bb:9b:33:11:fc:74:32:83:b3:
         e7:28:6c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:12 2025 by rpki-client