Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa
File:                     240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa (raw, json)
Hash identifier:          MavvuRIxaHq7kANROoS0kOc6Go7TAFnvEa0JneDVG2Y=
Subject key identifier:   47:64:94:D7:FB:33:43:78:A1:95:02:A1:57:6C:02:9F:C5:3E:C3:B1
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584E5E79FCBF4CBB41B28827C980
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     4186
IP address blocks:        2602:fbdc:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:fc:bf:4c:bb:41:b2:88:27:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=a5b9664b-3f4a-413c-8353-add016dffab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:7b:4c:ee:55:4a:9a:75:32:e5:e4:d0:11:
                    c6:d2:ec:19:cc:2d:16:d9:6e:80:a4:e2:d9:31:4a:
                    2e:ec:81:10:8c:c8:10:b0:72:11:e3:8d:bf:66:0d:
                    3b:66:b9:29:bc:81:58:2e:61:c1:b3:52:8a:7b:be:
                    c8:e6:00:97:72:54:73:9d:12:e4:22:c6:e0:4b:04:
                    5b:b1:f5:7f:81:76:de:34:ad:8f:4a:3c:23:7a:c2:
                    eb:a1:13:aa:7d:b9:64:b5:c4:4f:c8:44:88:2a:f7:
                    69:49:79:da:84:de:f1:67:d4:5c:c2:2b:5d:e0:95:
                    ee:24:2e:40:09:f9:cd:41:a9:ed:5c:2d:61:46:f0:
                    c6:13:65:53:f9:63:df:b5:8f:65:6c:9f:1c:e2:c8:
                    9c:2b:e3:ab:77:2a:5d:11:eb:b4:16:d6:45:1d:e0:
                    c8:d3:02:ba:71:5f:44:a9:b3:40:d3:32:d9:7a:6a:
                    45:4e:50:54:bf:83:e8:4e:15:2c:b7:f7:4e:d6:01:
                    43:e8:ff:75:ec:87:7c:36:bf:26:af:16:e2:98:41:
                    00:b1:74:d3:85:2e:60:dd:45:9a:08:0a:ab:5e:64:
                    6e:06:1d:d0:fa:96:8a:2b:b8:47:23:a0:3d:20:5c:
                    ee:10:fe:8f:5b:a3:ee:f8:52:ee:1f:f8:68:55:31:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:64:94:D7:FB:33:43:78:A1:95:02:A1:57:6C:02:9F:C5:3E:C3:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d4:c7:75:d2:f1:da:0a:f5:0b:c7:ed:6b:56:76:50:d1:8c:
         da:a6:22:0a:20:8e:9b:8b:1a:74:79:03:c3:f0:d0:14:f4:21:
         b8:d1:b9:79:5f:02:77:3b:35:13:a1:8e:26:82:3d:95:cd:84:
         12:57:48:db:c5:1e:de:71:fd:db:6e:4b:df:ca:46:a3:77:a4:
         a9:5d:20:1a:77:8c:47:69:e0:90:8c:cb:05:28:8e:93:33:ac:
         04:4b:d8:d4:91:34:ac:99:f2:73:17:24:1a:59:2f:f6:d9:eb:
         c6:b3:65:70:0f:c6:b8:65:f3:c2:69:11:95:77:6c:23:82:71:
         3e:e6:58:2b:7d:00:b7:fc:f9:eb:6a:84:e2:7b:8d:8a:e9:e4:
         c5:5a:1d:a4:eb:fe:81:ea:e5:7d:d2:c9:3e:9b:05:66:08:1e:
         8e:b5:a4:b8:e9:1e:6b:a0:fe:cc:c8:f9:17:a7:b2:84:49:2f:
         94:dd:52:55:54:3a:a2:7a:dc:45:df:ba:a0:87:ab:58:a8:2d:
         d3:67:8c:21:1b:33:0b:e9:59:59:7d:c6:60:fb:25:ef:5a:2b:
         e0:e5:b0:7a:da:ed:d7:19:16:05:16:ab:91:42:61:a0:77:60:
         6f:f4:eb:5c:d6:f8:36:38:36:41:fd:65:b9:46:ed:05:b7:ab:
         bb:bc:32:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5eefy/TLtBsognyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
YTViOTY2NGItM2Y0YS00MTNjLTgzNTMtYWRkMDE2ZGZmYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy17TO5VSpp1MuXk0BHG0uwZzC0W2W6ApOLZ
MUou7IEQjMgQsHIR442/Zg07ZrkpvIFYLmHBs1KKe77I5gCXclRznRLkIsbgSwRb
sfV/gXbeNK2PSjwjesLroROqfblktcRPyESIKvdpSXnahN7xZ9Rcwitd4JXuJC5A
CfnNQantXC1hRvDGE2VT+WPftY9lbJ8c4sicK+OrdypdEeu0FtZFHeDI0wK6cV9E
qbNA0zLZempFTlBUv4PoThUst/dO1gFD6P917Id8Nr8mrxbimEEAsXTThS5g3UWa
CAqrXmRuBh3Q+paKK7hHI6A9IFzuEP6PW6Pu+FLuH/hoVTHX+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEdklNf7M0N4oZUCoVdsAp/FPsOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvMjQwZTExY2ItNTNlMC0z
ZTFmLTk3ODEtYTgyMmUwZDM1YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALjUx3XS8doK9QvH7WtWdlDRjNqmIgogjpuLGnR5A8Pw0BT0IbjR
uXlfAnc7NROhjiaCPZXNhBJXSNvFHt5x/dtuS9/KRqN3pKldIBp3jEdp4JCMywUo
jpMzrARL2NSRNKyZ8nMXJBpZL/bZ68azZXAPxrhl88JpEZV3bCOCcT7mWCt9ALf8
+etqhOJ7jYrp5MVaHaTr/oHq5X3SyT6bBWYIHo61pLjpHmug/szI+RensoRJL5Td
UlVUOqJ63EXfuqCHq1ioLdNnjCEbMwvpWVl9xmD7Je9aK+DlsHra7dcZFgUWq5FC
YaB3YG/061zW+DY4NkH9ZblG7QW3q7u8MqA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:25 2026 by rpki-client