Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
File:                     3bafc015-eee5-3b8a-82fc-f368e1449458.roa (raw, json)
Hash identifier:          vsNbzEb28qjYIJl+E4ftykgwymQkggCf7skSBRrnQ7M=
Subject key identifier:   F2:BD:C8:9F:27:D1:BC:58:EF:53:10:55:E2:A7:9A:21:0F:03:29:EC
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584B6631F2E2636231B62DE77000
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     49585
IP address blocks:        2602:faaf:1::/48 maxlen: 48
                          2602:faaf:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f2:e2:63:62:31:b6:2d:e7:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=b40256c8-9724-4501-98d8-c7ba3db3707b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:50:ac:f5:df:a2:4b:60:96:43:44:86:4e:
                    85:48:61:8e:06:13:c9:51:c3:05:d0:3d:43:67:bf:
                    d6:f4:2d:88:87:08:f5:40:d4:c7:6f:49:05:55:93:
                    f7:1c:6b:26:9d:04:26:ef:ba:ee:8a:14:0d:b9:8c:
                    53:10:4b:64:bf:df:9f:52:1e:6c:57:ce:71:3d:63:
                    a7:85:87:3b:8d:38:a2:f2:85:98:c9:75:b5:74:88:
                    8b:24:9d:62:a1:da:55:6f:4f:d1:41:9e:a3:85:39:
                    ec:97:77:49:11:eb:43:8c:d0:ee:c8:7f:ae:38:9c:
                    4c:dc:94:e0:a4:18:80:c4:4f:79:e0:a9:cc:92:d6:
                    88:98:80:0c:0c:25:9d:b3:e6:d8:ac:68:52:5e:62:
                    41:0f:da:b9:99:92:7d:f2:1d:aa:27:df:b2:d3:22:
                    a9:ba:de:fe:d2:a2:02:65:2f:d8:be:b3:de:72:c0:
                    15:93:43:e3:52:81:22:bb:4c:34:70:a9:08:b7:72:
                    e3:4c:68:4c:fc:2f:f5:68:41:74:1e:c8:83:90:38:
                    f7:4c:8f:91:61:c4:68:c1:fb:ce:74:0b:dc:2b:d6:
                    58:ae:cd:54:26:a3:3b:e5:f2:38:84:f8:95:ba:25:
                    77:82:aa:69:b7:ee:df:96:d7:b2:e2:df:f1:d7:3b:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BD:C8:9F:27:D1:BC:58:EF:53:10:55:E2:A7:9A:21:0F:03:29:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/3bafc015-eee5-3b8a-82fc-f368e1449458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:60:ed:fb:33:08:10:1e:ab:56:af:ad:7d:f8:e1:f5:42:
         74:7c:e1:c3:e1:77:40:0f:74:f0:8e:0c:c8:01:fe:b6:4b:1e:
         0d:61:85:37:ed:5b:57:fa:05:19:04:71:64:61:b5:5d:79:b8:
         5f:9b:48:7b:34:7f:d0:c0:d2:eb:a8:1e:06:1f:1a:5d:50:ff:
         4a:a6:7f:a0:78:e1:85:42:27:77:6c:f7:1b:a3:f9:a1:7e:3f:
         c8:f7:e5:b6:5a:19:2b:31:28:44:bc:56:1d:72:94:4e:64:42:
         22:8d:05:c0:00:0b:e0:ae:33:46:cf:6b:fb:b5:59:94:13:bc:
         66:e3:fc:4f:64:1c:2f:bd:3f:95:48:ac:ec:2a:0b:e2:57:25:
         69:e9:86:d9:ac:0b:43:12:74:ab:ee:c7:58:e2:52:b3:0f:67:
         5e:5f:a8:5e:f2:39:ea:49:c9:8b:e3:47:61:d1:45:9e:2a:b3:
         89:10:19:cd:0b:08:e9:f9:dc:61:8d:2e:7f:e0:f7:57:84:2d:
         d3:c5:1c:ad:3f:9b:ef:f8:7e:54:13:fe:74:d4:12:a2:6a:54:
         e4:ef:a9:17:42:4e:54:b0:23:f7:83:41:85:d1:3a:1c:9d:f5:
         bb:2b:48:9b:fb:97:a0:3c:f2:e9:b9:19:2b:a0:f3:11:bd:15:
         66:06:e4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:07 2025 by rpki-client