Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
File:                     8739209d-0492-3814-9eef-35e5f7d13167.roa (raw, json)
Hash identifier:          SdRW53NV2hOaeMJIwwbSOA6hwBQW3I/ay2ZtenC2kCM=
Subject key identifier:   5F:CB:31:3C:A7:D1:E0:2C:42:CB:7F:B2:A9:CA:F4:2B:C4:37:DB:53
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584BA0D262D25A666E08EA9D3400
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30690
IP address blocks:        2602:f99b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:62:d2:5a:66:6e:08:ea:9d:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=45b5532b-8d9e-4e6f-8753-50623fb2c49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:55:87:6a:f9:1c:bb:41:7c:30:8b:f3:db:
                    6c:42:6a:fd:2e:4a:03:53:6d:bf:8b:05:99:21:92:
                    6a:09:ee:2e:0b:ae:b2:e3:73:56:fa:89:c3:01:c3:
                    6e:11:79:eb:13:02:d9:bb:dc:48:61:65:be:e8:d3:
                    eb:eb:8e:8c:2a:ad:69:81:f7:9a:9c:3d:c4:60:d9:
                    9b:68:7f:75:30:07:ff:8a:29:b8:9e:71:1a:18:26:
                    58:21:87:41:49:60:50:29:ed:39:02:db:33:32:e6:
                    11:c7:ff:d1:13:48:08:95:80:7b:cc:bc:d4:d2:ad:
                    06:c0:51:29:34:2e:b8:07:29:fa:39:2a:40:2a:8a:
                    20:4f:74:58:08:69:25:07:40:9c:9d:86:b1:80:d3:
                    d2:7f:0c:c4:38:47:62:e8:ac:80:d9:77:19:e7:32:
                    7d:5b:27:3a:55:63:ac:30:7c:1a:00:82:36:9e:56:
                    67:10:d8:d4:8e:a7:32:8c:51:8a:a8:cf:41:71:88:
                    eb:c3:b1:02:72:8e:eb:89:ac:f9:38:13:d5:29:e3:
                    45:e7:99:30:61:e1:75:da:f0:82:45:b0:ec:29:e4:
                    ce:52:71:6e:47:1c:a7:99:3f:a7:f7:32:84:8b:f2:
                    ce:f1:e4:66:51:7a:51:a0:52:18:1a:80:f1:9a:10:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CB:31:3C:A7:D1:E0:2C:42:CB:7F:B2:A9:CA:F4:2B:C4:37:DB:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/8739209d-0492-3814-9eef-35e5f7d13167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:37:36:51:86:89:45:a0:2b:ce:8f:ea:11:26:fa:f8:04:
         f2:ad:f3:3c:79:fa:64:b4:93:f2:7b:3f:2f:d2:d5:5e:a4:3c:
         f5:2c:f0:0a:2c:7d:a8:77:aa:32:77:39:fd:bf:3b:b0:75:c4:
         56:28:8f:d1:1a:a2:34:1d:1c:49:d5:c5:ed:a9:eb:0c:d8:93:
         41:19:63:a2:c2:b5:0b:7d:df:ae:78:e7:42:cf:10:34:c3:2d:
         39:b9:75:95:64:f9:35:ed:a7:73:ab:95:dd:ca:29:00:93:6f:
         53:ca:65:e4:6a:70:89:c4:41:45:61:62:dd:80:79:ba:e2:e7:
         f1:79:aa:d9:9f:19:7a:cd:5a:8a:32:62:61:44:54:31:0f:74:
         e0:d1:8b:fe:21:c3:fe:db:51:e1:2b:f9:69:64:59:5d:10:7d:
         dc:82:8c:de:3d:cd:26:d5:09:f6:b1:0c:14:39:9f:82:2d:e1:
         da:56:df:a3:64:fe:c7:38:6a:b9:6d:22:5a:8f:60:1d:a1:ef:
         e3:17:99:2f:dc:ba:5c:a4:50:89:85:46:f9:5c:8a:14:a6:7a:
         79:ce:a4:b2:e2:a7:a4:20:cf:e7:1c:89:20:c3:1e:4a:6b:92:
         9a:0c:81:b4:31:c7:da:b0:ac:a9:d4:68:91:c7:f5:64:5b:df:
         0b:f6:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:03 2025 by rpki-client