Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02613e4e-dea1-34b0-bf8e-52d13e12dffb.roa
File:                     02613e4e-dea1-34b0-bf8e-52d13e12dffb.roa (raw, json)
Hash identifier:          KrCjDKEymtpVl74MLaUkE/+gHrpPb9r1Iagt3hLa/Yo=
Subject key identifier:   2C:46:67:4F:18:99:EF:50:2A:4D:51:57:EA:77:20:6E:D2:0B:4D:2C
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584B842FEE3B342D3EDDE1C5B480
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02613e4e-dea1-34b0-bf8e-52d13e12dffb.roa
Signing time:             Tue 14 Oct 2025 06:50:59 +0000
ROA not before:           Tue 14 Oct 2025 06:50:59 +0000
ROA not after:            Mon 12 Jan 2026 07:50:59 +0000
asID:                     140666
IP address blocks:        2602:fa80:3f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:2f:ee:3b:34:2d:3e:dd:e1:c5:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Oct 14 06:50:59 2025 GMT
            Not After : Jan 12 07:50:59 2026 GMT
        Subject: CN=966f619a-a260-4489-a06a-a559dd3cd5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:04:fe:23:b7:60:9d:d1:4e:7c:5a:67:66:
                    5c:64:f0:47:15:28:10:5f:6b:0d:a3:d4:9f:e5:e9:
                    10:53:f4:fe:32:ab:0e:38:05:1d:a1:47:50:49:e3:
                    12:9f:de:96:02:3c:1e:1b:2e:74:b4:77:7f:a7:ad:
                    2c:22:bc:12:8d:8b:bb:29:4f:21:ae:f4:85:aa:84:
                    0a:63:34:85:5f:03:80:72:8c:90:46:ec:6c:a2:a5:
                    eb:5a:71:7e:5c:67:bd:f2:ed:50:09:eb:46:4a:c3:
                    5d:6f:d3:6f:19:1a:0b:d8:09:52:14:d6:b1:24:63:
                    b4:2d:6c:34:39:fe:73:2b:89:23:7c:4b:fc:3e:2f:
                    b0:a6:e2:61:13:a9:80:5e:04:68:ac:2e:b1:f8:d8:
                    3b:b3:ba:ca:78:82:6c:80:f1:4d:37:ce:e9:16:f8:
                    30:e7:9a:8a:9e:3e:a0:a7:05:91:c4:c0:77:b3:47:
                    5e:62:63:e8:87:3d:27:20:c1:e8:4c:f9:0f:5d:2e:
                    60:fd:68:d1:bb:8c:fc:7c:96:4b:8c:77:ec:dc:36:
                    b1:85:cc:fd:97:16:fb:68:26:f1:b8:0a:72:04:62:
                    b0:d1:cb:78:08:11:06:31:17:2a:e8:cb:6b:28:7b:
                    9a:f6:c1:67:aa:c9:f2:c0:ef:f1:d8:4b:98:bf:e0:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:67:4F:18:99:EF:50:2A:4D:51:57:EA:77:20:6E:D2:0B:4D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/02613e4e-dea1-34b0-bf8e-52d13e12dffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:3f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:ce:6f:39:82:5f:6e:15:f7:14:35:3e:95:47:62:aa:a8:
         62:a5:1a:b1:0e:3a:57:6c:4b:02:02:b1:bb:e6:23:06:a4:30:
         83:43:48:d5:d2:f0:12:72:b6:1a:71:f7:8b:b8:d8:19:49:2a:
         f2:fc:d6:30:b8:b0:88:42:64:95:5f:95:d0:da:ae:77:b8:66:
         bb:85:79:1d:86:07:74:3f:cb:28:05:30:bc:cf:44:39:f5:ea:
         15:b2:d4:63:a3:dd:31:fd:56:ce:5e:e1:90:ce:7a:ed:d2:83:
         79:71:f3:45:b5:37:fc:8f:51:c8:a9:ec:d5:a4:86:65:e8:a4:
         e9:b1:56:17:b1:16:af:ec:91:4a:fb:5c:ba:dc:80:79:4e:1e:
         1f:98:50:76:92:b1:15:22:f5:b6:ef:64:7a:0c:57:a8:09:42:
         bc:3e:25:ce:18:41:ee:aa:f2:ef:ce:91:bd:04:2d:80:f6:3c:
         cc:e0:49:b6:2d:eb:d6:56:b9:50:d6:f9:fe:bf:17:ec:b0:ba:
         90:4c:aa:cb:4b:1c:a3:77:3b:25:83:57:d5:cc:c6:6a:76:8f:
         23:a3:7f:32:19:a9:53:18:b6:26:97:e9:a7:31:a0:1b:2e:80:
         0c:d1:69:10:48:f2:4b:be:df:7d:d1:9f:a0:20:48:69:8d:31:
         a3:9f:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:08 2025 by rpki-client