Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa
File:                     9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa (raw, json)
Hash identifier:          RHjXpNIEgQdQCVUFMUenWuJLk6U9WvGACXu+r9YQywE=
Subject key identifier:   CE:F9:3D:41:02:DA:4E:7E:B9:BA:CD:1B:D6:F3:F8:CC:23:20:D5:9E
Certificate issuer:       /CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
Certificate serial:       010D0C9F4328584B7B21F54750FA465386C7D080
Authority key identifier: 67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     63139
IP address blocks:        2602:fa80:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f5:47:50:fa:46:53:86:c7:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35fefd7-f2e5-416c-932a-0d52d430c3cd
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=51fd0e50-6e29-4d59-90c4-8fc1d7d30b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:76:cb:02:a7:ab:d0:a4:da:06:31:7c:7f:
                    23:f7:ae:5c:22:2f:b9:b0:05:23:89:ee:e6:94:df:
                    b9:62:d1:4f:5f:15:e3:b9:04:76:46:71:cf:16:4d:
                    19:b8:bc:51:e5:42:eb:1f:86:28:6c:6f:90:f7:67:
                    e3:fe:61:c7:30:3c:63:3e:14:d5:93:6a:bb:66:38:
                    f8:e6:9b:50:fd:04:90:fd:6d:86:0e:3e:c6:66:4a:
                    92:72:9a:74:fb:69:37:c6:35:9b:e9:8b:23:5b:3c:
                    1f:02:18:ff:19:1c:40:75:05:68:78:8d:93:84:6d:
                    bc:94:e2:de:b4:37:38:af:64:90:3b:de:e2:39:0e:
                    0e:9d:a1:75:bf:98:d5:f9:97:3f:9c:91:a8:99:f8:
                    ec:02:68:f2:bc:2a:a3:a3:41:71:e6:2a:41:c1:47:
                    a2:df:49:8e:df:b2:7f:b1:05:86:54:8a:f2:91:9c:
                    4e:dc:d6:70:f3:b8:42:f7:70:10:e3:53:9d:bb:96:
                    19:48:12:3d:19:7d:fe:4d:27:d5:e2:84:11:0c:6d:
                    80:6a:54:1d:27:f2:17:3f:bf:af:5e:8b:c3:1c:8b:
                    07:06:36:ec:84:45:d5:d8:ec:6f:f9:6d:95:ef:0b:
                    e3:62:da:9f:04:f1:22:45:13:26:ad:73:d9:5d:5d:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:3D:41:02:DA:4E:7E:B9:BA:CD:1B:D6:F3:F8:CC:23:20:D5:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/9d2a61c9-bb18-3eb9-8d6e-dcce3306e07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd/b35fefd7-f2e5-416c-932a-0d52d430c3cd.crl

            X509v3 Authority Key Identifier:
                keyid:67:4F:75:BE:1A:C4:72:EC:57:DF:A6:79:B2:9E:83:F9:B1:0B:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b35fefd7-f2e5-416c-932a-0d52d430c3cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa80:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:80:d3:b7:8b:34:95:cd:67:08:4f:ad:c6:ac:3d:9d:50:74:
         f1:59:77:47:f5:5a:ea:81:36:f1:20:ff:a7:47:6f:15:c7:84:
         46:ba:c9:d9:8d:6b:76:d0:48:cd:d7:0e:e8:2d:da:d5:31:e6:
         21:6d:b7:71:c7:60:ae:2f:ca:56:05:c5:8e:cd:4a:a6:ab:b3:
         aa:06:c1:34:d8:d5:d1:9a:55:71:92:9a:33:a1:e9:d0:41:9b:
         66:e6:02:50:93:f4:36:9a:5a:5e:0c:10:11:d4:c5:1d:a6:67:
         8e:e4:da:5a:26:9d:10:01:36:0c:16:07:c0:e5:56:93:c4:d3:
         fc:a7:e3:8a:17:47:d0:de:0c:2d:d2:83:96:09:c3:2d:38:1c:
         4e:31:48:37:25:52:8b:63:91:ea:78:64:73:ef:83:e8:e4:82:
         b6:41:22:5f:66:bf:2d:9e:f3:3e:22:5e:c1:21:93:b2:8a:8b:
         c3:45:73:3d:3a:63:1c:f6:d6:0d:92:84:32:68:bb:80:7c:00:
         0a:5c:8e:24:39:f2:5c:a2:17:2a:19:17:ad:21:4a:44:d2:2b:
         fc:20:30:3f:f9:28:13:cc:be:ec:28:0e:23:8a:a6:eb:6a:38:
         36:49:cc:7c:c4:77:71:69:20:f6:6b:6e:08:f7:9c:8b:ed:fc:
         e4:16:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:55:16 2025 by rpki-client