Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
File:                     aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (raw, json)
Hash identifier:          Z7gcLjy4HPeR1OYlTwioghv0Xr3beY4hfEu6EdjcUTI=
Subject key identifier:   26:13:7D:C8:E1:B7:27:90:F7:41:45:05:EB:4B:FF:24:5D:E4:3F:EE
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584B99D79A0BC39871AC92D28D40
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     30690
IP address blocks:        2602:f99b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9a:0b:c3:98:71:ac:92:d2:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=581f3699-81da-4d95-b9c0-847dba7155f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:a7:45:19:f3:ec:5f:ad:e7:da:6c:55:45:
                    88:04:e1:db:0d:2d:30:5d:e6:3d:19:27:14:d5:78:
                    3f:47:70:65:2f:49:da:11:d2:1c:3c:9a:ca:45:96:
                    94:5f:18:6d:e0:f4:72:9f:e6:0a:63:17:fe:05:04:
                    24:d7:5c:57:a3:38:d9:0c:ed:83:33:f5:aa:44:48:
                    a0:e9:9b:5b:3d:12:7a:7d:8e:0a:11:16:68:e7:93:
                    c5:99:5a:7c:1f:a8:34:e7:44:41:67:ae:66:f6:b0:
                    26:76:f1:73:63:f2:07:e3:98:39:7e:2b:c8:50:b4:
                    b4:bb:41:39:48:76:c9:44:47:94:7f:45:1d:50:fd:
                    9d:c0:e0:72:df:fc:04:5c:ff:fa:cb:23:63:d7:97:
                    af:76:bd:5d:5e:99:94:af:b1:d4:49:ff:80:ca:e7:
                    ee:71:15:68:58:b4:c2:9d:a4:a6:28:ee:e3:36:0a:
                    45:6a:17:d8:c2:df:24:c6:78:e7:d5:99:40:44:30:
                    42:f6:d0:04:d5:77:d7:da:e4:10:4e:1b:42:e6:bd:
                    45:40:76:10:2d:c2:f5:bd:c7:b3:cf:c6:02:f0:03:
                    bb:62:c6:5a:55:6c:43:1e:dc:d0:c0:a0:8d:a5:4d:
                    a4:e6:df:d6:91:de:1e:9e:75:9c:bc:8d:6a:bd:67:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:7D:C8:E1:B7:27:90:F7:41:45:05:EB:4B:FF:24:5D:E4:3F:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:16:a6:4e:59:f1:32:04:65:87:19:93:33:36:06:35:cd:
         a3:bb:51:4b:62:66:21:12:98:cb:89:19:8a:1d:b8:2b:38:75:
         3d:f4:fd:b1:6b:74:54:db:72:b0:32:48:4a:a4:a2:50:ca:12:
         d6:0f:32:f2:4d:c6:53:5d:47:45:b5:29:c4:3e:b2:b8:1f:33:
         af:ce:7f:57:b7:08:c7:ba:8d:a3:a5:93:52:e1:93:68:40:4e:
         9b:6c:ea:e9:f6:7b:86:a0:72:12:65:54:d4:84:19:a2:5c:d4:
         22:26:dd:97:8d:c5:db:53:5e:5e:f7:69:f2:27:97:ed:9d:94:
         9f:94:48:9b:78:4b:c6:f3:5d:d6:69:93:78:dc:35:c6:63:d4:
         a5:f0:9b:50:19:1b:b3:12:40:0e:8a:7c:e6:ee:83:e5:84:de:
         a2:36:82:3e:6e:bc:cd:c6:cb:29:81:10:87:4a:52:3c:2e:1e:
         4b:75:b0:04:0d:17:ad:38:f5:b9:5c:9e:bb:c2:19:fe:26:ac:
         59:f5:00:61:f8:37:b5:82:32:f7:c2:dd:bb:77:78:95:3b:02:
         77:c8:83:df:fd:07:8e:70:db:ad:f4:0e:fd:76:ab:18:f3:ae:
         bc:49:03:9a:d1:43:54:81:08:d6:6f:60:1a:d2:2b:f7:56:23:
         62:1a:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:51 2025 by rpki-client