Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
File:                     aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa (raw, json)
Hash identifier:          saRXSS4VjUmOQyYvICVUOTjDR3Z/S2jVtw+z8QoKTx8=
Subject key identifier:   69:C1:AE:86:23:7C:51:99:00:0E:D0:EC:FB:37:E0:7B:82:F7:29:85
Certificate issuer:       /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial:       010D0C9F4328584D59EA68BDF9E6ED3761D95EE0
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     30690
IP address blocks:        2602:f99b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:68:bd:f9:e6:ed:37:61:d9:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=78b00f40-81ef-406e-9a46-8fec1000bb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:58:4f:45:81:04:55:f9:e4:d8:63:9a:0f:
                    75:8f:62:ed:57:8a:42:eb:53:57:ed:56:60:9e:22:
                    68:1c:16:cf:ee:d7:c1:8b:41:00:53:b8:b1:52:ef:
                    d5:c1:9e:b3:ce:12:92:d3:1e:b2:dc:77:54:92:e8:
                    ff:75:03:ed:ad:50:64:b9:f5:57:c4:cd:a1:a4:ab:
                    3f:95:af:42:f0:6b:4c:1e:2a:92:cb:f0:0c:3f:d5:
                    5b:72:27:a1:2f:0d:38:03:7a:43:fc:c4:c8:82:0f:
                    86:1c:4e:df:65:5f:bc:66:34:03:a5:02:d6:3d:92:
                    a4:b0:88:67:0e:61:62:f0:62:c3:ef:d1:f9:38:c3:
                    80:2f:1e:ac:79:a9:c8:d4:78:4b:3c:d4:3c:28:bc:
                    1c:c5:e9:a6:cd:7a:5a:cb:5e:d1:4c:f0:41:0c:31:
                    7a:3e:08:0d:b2:86:25:8a:a4:27:db:fe:d9:65:8d:
                    16:f1:3f:65:04:44:5b:a5:78:0b:07:05:b2:14:1d:
                    7a:42:6e:48:d2:a0:eb:b7:84:be:07:99:e9:14:e6:
                    0d:d0:dc:c4:93:64:33:b9:37:d5:33:15:5c:13:32:
                    94:a5:73:36:44:17:43:46:ac:4c:af:b8:65:45:4b:
                    72:a0:a8:0d:71:4b:3d:fb:7a:6d:1a:dd:99:27:79:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C1:AE:86:23:7C:51:99:00:0E:D0:EC:FB:37:E0:7B:82:F7:29:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/aebdf556-2f6a-3251-b1c2-5b9e20c527e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:87:25:5e:6c:e7:2f:0b:bc:0c:c1:77:c9:e6:2e:25:b2:
         05:f0:ac:41:07:38:1a:59:b1:c9:c0:ce:45:28:72:86:1f:c0:
         76:0e:5e:b7:23:13:df:c2:b8:18:76:17:bb:04:c7:78:1a:2c:
         9c:18:67:80:8b:d5:4a:45:d0:5d:03:dc:bc:49:83:c3:12:17:
         ab:ed:37:af:6b:6c:a2:0c:75:8c:e8:19:cc:35:2b:93:05:97:
         97:be:a4:1b:7b:08:77:76:55:7b:0d:a4:60:69:13:45:22:0b:
         09:c5:4e:df:48:59:6f:91:8b:17:e0:2f:13:2d:36:76:24:4c:
         07:2c:36:0e:4b:f0:08:cd:4a:2c:cc:ed:34:9a:d1:59:a8:50:
         26:57:3e:1a:f2:2c:a0:09:65:36:a8:48:2f:fe:12:be:10:a6:
         9b:47:31:31:71:76:84:96:06:24:39:ec:ff:94:51:e5:f0:13:
         5f:f7:37:36:e8:04:21:c9:c3:87:b6:0a:88:96:21:4a:35:ef:
         e0:37:6f:35:32:b6:f4:8a:21:cb:5d:34:ba:c0:aa:42:9b:2e:
         39:dd:2a:aa:cc:99:11:26:8f:61:fb:23:73:4d:7a:f5:51:bf:
         80:98:bb:25:4e:cc:c8:37:4e:6d:02:70:0b:4f:9c:56:65:0b:
         3a:61:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:37 2026 by rpki-client