Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa
File:                     6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa (raw, json)
Hash identifier:          VbkDsPx7GyUeNbd327TcY4gRQp4kqLBZB/u+DlN1ll4=
Subject key identifier:   E1:18:B7:79:62:EC:F3:A7:1A:8C:38:AA:AC:7E:D8:67:1C:5C:AC:94
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BCF157CDEB12178EFD100
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:cf:15:7c:de:b1:21:78:ef:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=189ba27c-f0bc-48ff-94a1-c2ec485117d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:41:cd:a2:9e:64:d1:ea:14:b5:de:d7:38:
                    a2:52:54:6b:0f:9a:25:39:18:cc:b7:07:9a:4f:71:
                    52:af:96:5b:c2:93:f7:96:98:23:1b:01:b2:e9:14:
                    39:4b:c8:09:95:08:3a:c4:09:e9:37:03:be:ab:55:
                    d0:64:2b:59:a0:58:4b:d0:80:eb:47:1e:ae:92:59:
                    16:63:90:29:82:f7:e6:18:71:de:75:c6:a7:da:6e:
                    c9:1b:97:5f:c3:14:30:08:45:83:8f:b0:a3:67:d7:
                    9a:03:a7:5c:19:b9:4c:e8:c9:85:0f:14:ff:84:b8:
                    c5:9a:35:0b:d8:59:d9:0e:0c:45:cf:26:fb:75:3e:
                    44:db:11:0d:82:af:f4:47:11:b0:16:a5:c2:a2:93:
                    16:ca:dc:2b:b5:84:9b:74:f8:6f:fb:52:4c:b6:cb:
                    4a:58:b7:12:eb:c4:16:4a:5d:72:c6:e4:c7:70:e7:
                    76:30:33:f7:00:4f:eb:9d:7e:38:60:5e:2d:2a:43:
                    e7:1f:ee:de:2e:1d:ac:02:47:41:a3:a1:ff:99:ed:
                    1a:13:c8:ad:b1:8e:d3:98:7c:f5:7d:ed:67:c7:67:
                    6b:eb:96:aa:bb:b7:4f:d2:3a:ec:14:67:63:f0:d4:
                    9e:36:4f:91:10:03:65:1c:ab:c4:bd:03:7a:ad:55:
                    2c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:B7:79:62:EC:F3:A7:1A:8C:38:AA:AC:7E:D8:67:1C:5C:AC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bb6b9d3-703b-3e36-a9cc-bfdc2c7746fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6a:1a:1b:9b:f0:26:f7:68:ac:17:81:6f:1a:12:c4:b1:0c:
         e1:91:be:02:3e:5b:37:ff:be:6a:56:c4:f7:43:da:e5:4c:ad:
         b1:1f:e8:32:88:22:15:a6:fc:f4:51:75:a4:24:f7:7c:9a:29:
         ce:d2:97:29:89:fa:d5:51:15:dc:31:dd:ef:17:be:d3:00:ad:
         65:d7:72:91:a6:e9:ef:71:82:69:fd:4a:0a:75:b1:0f:98:21:
         c0:15:8b:4d:ae:72:35:1b:a9:8e:37:45:22:d1:8a:45:4b:d7:
         13:f5:c5:4e:60:99:f6:35:5a:a2:3b:ac:92:c5:37:76:c6:f7:
         27:c2:bd:8d:bf:b9:cd:cd:d2:1e:2d:3f:d0:78:5e:f7:80:f6:
         88:82:29:00:3c:43:f5:7f:f2:fb:ce:17:18:51:d9:cf:06:ea:
         ad:df:bf:d9:87:79:a7:d5:48:1d:ed:fd:e0:79:c7:bf:6e:5f:
         53:1a:e0:5e:10:a3:7f:fb:eb:f1:0f:8b:f2:b2:dd:86:01:a5:
         74:c6:3f:b3:ac:0b:b3:cd:0c:0e:bf:2d:d9:0f:56:aa:e6:95:
         a8:9b:0f:9e:1d:bd:2a:46:83:4f:9d:3d:0f:20:6c:00:3b:02:
         41:08:ed:a9:51:82:c3:4c:bd:07:d5:0b:b3:56:98:25:db:2d:
         dd:de:d2:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram88VfN6xIXjv0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
MTg5YmEyN2MtZjBiYy00OGZmLTk0YTEtYzJlYzQ4NTExN2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29BzaKeZNHqFLXe1ziiUlRrD5olORjMtwea
T3FSr5ZbwpP3lpgjGwGy6RQ5S8gJlQg6xAnpNwO+q1XQZCtZoFhL0IDrRx6uklkW
Y5ApgvfmGHHedcan2m7JG5dfwxQwCEWDj7CjZ9eaA6dcGblM6MmFDxT/hLjFmjUL
2FnZDgxFzyb7dT5E2xENgq/0RxGwFqXCopMWytwrtYSbdPhv+1JMtstKWLcS68QW
Sl1yxuTHcOd2MDP3AE/rnX44YF4tKkPnH+7eLh2sAkdBo6H/me0aE8itsY7TmHz1
fe1nx2dr65aqu7dP0jrsFGdj8NSeNk+REANlHKvEvQN6rVUsOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOEYt3li7POnGow4qqx+2GccXKyUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvNmJiNmI5ZDMtNzAzYi0z
ZTM2LWE5Y2MtYmZkYzJjNzc0NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHBqGhub8Cb3aKwXgW8aEsSxDOGRvgI+Wzf/vmpWxPdD2uVMrbEf
6DKIIhWm/PRRdaQk93yaKc7SlymJ+tVRFdwx3e8XvtMArWXXcpGm6e9xgmn9Sgp1
sQ+YIcAVi02ucjUbqY43RSLRikVL1xP1xU5gmfY1WqI7rJLFN3bG9yfCvY2/uc3N
0h4tP9B4XveA9oiCKQA8Q/V/8vvOFxhR2c8G6q3fv9mHeafVSB3t/eB5x79uX1Ma
4F4Qo3/76/EPi/Ky3YYBpXTGP7OsC7PNDA6/LdkPVqrmlaibD54dvSpGg0+dPQ8g
bAA7AkEI7alRgsNMvQfVC7NWmCXbLd3e0jQ=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:28 2025 by rpki-client