Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/2c78cdc5-88fb-3aa4-b9c8-eaf49f01f21d.roa
File:                     2c78cdc5-88fb-3aa4-b9c8-eaf49f01f21d.roa (raw, json)
Hash identifier:          O+YP7nA4t6K1N+J8gvM/zNUgkn8CYECN5IJlsIFkOcg=
Subject key identifier:   70:F1:EE:D7:C5:29:FF:B1:CA:D5:EA:EC:23:AC:32:17:AE:4A:E9:19
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584B842DB21464A8D19C7C683180
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/2c78cdc5-88fb-3aa4-b9c8-eaf49f01f21d.roa
Signing time:             Tue 14 Oct 2025 06:46:28 +0000
ROA not before:           Tue 14 Oct 2025 06:46:28 +0000
ROA not after:            Mon 12 Jan 2026 07:46:28 +0000
asID:                     140666
IP address blocks:        2602:fa80:3b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:2d:b2:14:64:a8:d1:9c:7c:68:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Oct 14 06:46:28 2025 GMT
            Not After : Jan 12 07:46:28 2026 GMT
        Subject: CN=195ba24d-86f4-4d1c-be2a-534232097f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:30:18:00:23:1d:64:62:e3:ee:cd:d2:5a:
                    53:69:8d:53:dd:d8:4d:3b:60:8d:e8:7e:23:f6:e1:
                    74:92:0d:33:1c:da:b8:0d:f1:36:42:95:1f:f0:d6:
                    68:06:c5:c0:92:a0:92:7e:2e:fd:a9:48:94:30:8b:
                    5c:26:17:a3:4e:5a:8e:7b:17:6f:bd:41:98:1e:bf:
                    84:ca:6b:c8:ab:0c:b3:e1:6a:49:98:b7:09:d1:96:
                    82:42:56:e8:f9:27:a6:11:fa:52:53:15:cc:44:3f:
                    8f:b5:8e:d7:57:79:09:c8:b8:3d:09:d5:9f:a4:26:
                    d4:de:f6:41:b7:5d:cf:1b:83:18:b5:6b:36:e9:63:
                    a0:ec:10:78:60:81:9f:2d:df:a6:4a:a9:c3:20:f3:
                    07:06:ea:d2:44:4c:be:d4:9a:22:cf:64:8e:bd:e8:
                    7b:13:5f:35:94:ee:62:0f:f7:76:16:5d:59:cd:37:
                    49:5e:81:7c:9c:e7:f0:d9:6b:cb:a9:a9:fe:0d:08:
                    19:df:fc:96:0e:34:a2:66:c9:4e:4c:7b:e2:e9:fb:
                    52:b2:49:4a:71:36:31:46:71:26:37:37:15:0f:ac:
                    0a:02:8a:86:1f:3e:8b:50:73:05:4d:87:71:73:18:
                    1e:6e:23:27:a7:07:45:13:95:0e:e4:10:f6:90:06:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:EE:D7:C5:29:FF:B1:CA:D5:EA:EC:23:AC:32:17:AE:4A:E9:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/2c78cdc5-88fb-3aa4-b9c8-eaf49f01f21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:15:dd:a2:ea:9f:09:b3:2b:7e:cb:63:ad:fb:d5:66:36:
         01:40:cd:a3:8c:46:d6:03:72:4e:cc:d2:42:fa:c7:af:f9:50:
         6b:a4:f1:07:79:49:13:86:35:1b:11:92:c5:2f:80:b9:71:c3:
         1e:ad:f5:d9:4f:cd:50:ad:e5:e9:76:9d:a0:ef:c1:ba:6a:9f:
         5a:3f:0d:35:2b:d7:aa:56:60:0f:3f:d6:8f:39:62:d2:dc:3e:
         f3:04:48:de:64:56:6e:ec:5c:e1:d0:93:11:68:f8:44:45:f2:
         33:04:b7:d0:b5:6f:6a:31:25:d4:c1:2f:6e:03:32:0c:65:d5:
         ce:af:43:f7:bc:e6:f7:46:44:6c:4e:34:80:4e:2b:e1:c3:5e:
         2a:b5:09:7b:55:fc:05:bc:70:4f:eb:f3:ad:6b:de:4d:60:5d:
         3f:ef:6f:b6:80:a4:48:24:2f:ce:b0:a4:b9:73:fb:cb:18:3f:
         93:7b:f7:1c:5c:09:29:5e:0e:6a:5b:f2:19:ee:e9:47:ed:0f:
         4a:6e:a9:b4:b0:8c:e3:8f:35:e9:a3:da:34:4d:d7:49:e4:d0:
         ab:06:d4:bf:cb:a1:b4:13:35:d6:99:3b:c0:23:93:df:dc:bb:
         6b:16:48:1c:70:6b:ac:0e:54:5e:3d:46:0f:96:fc:b7:bf:45:
         90:3b:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:09 2025 by rpki-client