Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa
File:                     d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa (raw, json)
Hash identifier:          VuIn2uwYohZpopGNbJCzpTCZrTcqS51ypbqUiZ7R9+E=
Subject key identifier:   B7:E8:BA:6B:54:BA:71:4C:17:F1:F7:B5:F1:15:D7:C3:83:F9:B8:25
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584E253EEE6DC41528FC91BDA720
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     140666
IP address blocks:        2602:fa80:3c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ee:6d:c4:15:28:fc:91:bd:a7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=84b7587c-3f21-45cb-ae67-d360de472906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:ee:ae:12:12:67:5e:09:df:e9:ba:98:4b:
                    54:9e:6f:78:f7:5f:d1:6c:f0:70:65:ad:e0:1a:97:
                    28:89:c6:bc:ef:d8:16:4a:f2:5c:77:f5:3f:d7:50:
                    00:ee:ce:7a:94:5d:84:29:59:9a:7e:a9:04:7f:64:
                    2a:98:aa:30:7b:fd:41:f5:43:43:a3:c7:84:1a:24:
                    13:11:6f:af:f9:09:cc:d7:60:7c:e5:02:bd:19:49:
                    40:f4:7b:05:ef:ae:2e:14:53:f3:d6:8c:2a:54:69:
                    a8:cd:a6:83:d6:62:7b:15:8e:ef:25:09:3d:28:d9:
                    a7:a0:80:f3:5a:94:0f:b8:69:45:11:f6:30:58:69:
                    19:d0:ff:38:aa:25:82:4c:2e:f9:63:54:40:45:d1:
                    34:f6:fa:66:7c:40:35:db:db:fb:3f:8e:98:3e:85:
                    a6:f6:80:1f:f4:55:34:09:1d:57:8c:9a:d5:86:3a:
                    ee:7f:fb:e9:f8:4d:0a:2c:e6:51:06:e2:b4:97:23:
                    4d:5a:8a:58:7a:55:bc:d0:d9:ba:a2:02:a5:3f:b1:
                    8d:8d:8f:d5:1e:29:56:6b:70:2a:d5:fa:13:ad:bb:
                    e3:e6:1c:83:73:85:12:2d:4c:b4:49:00:b0:b9:0c:
                    69:ef:56:06:af:3f:d8:6a:85:42:e7:68:ce:c4:8d:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:BA:6B:54:BA:71:4C:17:F1:F7:B5:F1:15:D7:C3:83:F9:B8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/d35e1e59-2d15-3254-bcb4-1d4adbd85dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:3c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:10:e5:03:ac:a5:14:00:6c:4b:bb:8a:94:dc:23:33:25:
         eb:87:c6:b5:c8:04:8e:40:db:b3:a1:74:9c:b5:47:7a:70:a5:
         a5:d0:c3:2d:9f:c7:9f:e0:ee:ea:1e:ff:a9:2e:b4:b0:9a:e4:
         14:f8:17:6d:f4:3c:3c:c8:1a:5b:ba:01:0c:8d:08:76:9d:ba:
         d2:ca:95:b2:b0:61:98:31:a7:51:5c:d0:15:ae:76:fa:28:93:
         33:d2:f9:22:ae:ff:99:01:d5:30:81:ed:fa:75:8f:68:45:66:
         ae:8f:a6:42:4f:96:2e:a2:c4:d8:f3:a9:d5:47:7e:29:1b:39:
         3f:2d:cc:af:68:ec:55:86:70:3a:9d:0c:87:80:5f:c4:38:7c:
         d1:df:40:29:d7:61:5b:7a:49:65:bc:04:17:dc:9d:5b:fb:9d:
         ca:1b:1b:ba:8e:b9:54:08:05:39:b9:6c:d3:a4:b3:1a:85:82:
         43:ae:00:7b:90:51:12:b6:00:8b:bf:c5:89:d9:b8:bf:8a:24:
         cd:03:f9:cf:2b:fb:0e:35:f4:30:f9:bd:72:2f:63:2b:77:27:
         0d:54:b6:9b:d5:9b:11:f2:74:69:8c:44:10:4f:2b:1d:c5:e0:
         29:35:8d:e7:df:74:95:66:21:8d:e1:9d:a5:46:37:0c:7f:01:
         cf:e2:23:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:04 2026 by rpki-client