Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa
File:                     70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa (raw, json)
Hash identifier:          fPdEhoM8Cvo4NPVm8K+wl1pGSHQ4U6t4r0VoWEgCgwM=
Subject key identifier:   11:44:D0:96:A8:53:70:BA:61:04:59:40:72:63:04:BB:5C:B2:83:74
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F7E7DC072DEF2B4CA2C2A6CC0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     11873
IP address blocks:        2602:fbdc::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c0:72:de:f2:b4:ca:2c:2a:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=5a487105-4501-43a6-8951-b10428ecd37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:9a:72:41:08:ca:24:91:d1:92:26:fc:b6:
                    27:66:b8:01:8e:11:57:20:3b:db:16:6c:4d:72:cd:
                    54:7c:bd:73:a7:5d:09:9b:df:9c:71:98:7b:92:4d:
                    eb:75:13:3f:64:e8:07:13:77:79:68:cf:e7:cb:6d:
                    9e:95:36:be:3e:d6:26:28:1f:3a:92:2e:25:0d:3a:
                    55:4a:3f:f9:6a:e3:3a:07:04:12:66:d5:6e:80:f7:
                    eb:37:37:74:f7:f6:bc:38:d2:34:67:1d:05:63:30:
                    c8:da:3e:58:9e:31:08:51:8a:ab:a2:d9:64:00:6b:
                    32:fa:22:8d:a0:02:f7:1e:2e:90:b7:18:e2:36:96:
                    73:c3:ed:c3:32:b5:2c:4f:81:57:ac:a9:e6:bd:e3:
                    b8:7e:5d:a6:bb:cf:32:cb:b6:14:fe:b1:a3:a5:05:
                    b4:a1:3b:0d:4e:b8:73:64:fa:38:6a:fe:b7:ff:0c:
                    9c:65:9a:db:d0:61:b9:1c:46:61:e2:41:50:96:17:
                    8d:d9:b5:32:10:2a:65:33:20:3b:6e:b1:d3:ed:04:
                    2a:fe:4f:e5:d2:d6:19:0a:d1:d2:9b:57:a2:7a:b3:
                    de:8b:3c:93:86:49:06:a0:13:e1:94:b7:74:c9:a9:
                    cc:ac:a7:1a:c4:ca:f4:00:61:3d:9c:63:dd:ca:3a:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:D0:96:A8:53:70:BA:61:04:59:40:72:63:04:BB:5C:B2:83:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/70dd74d3-fba5-33e2-b3de-ed44ae36d471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f2:07:78:59:21:1d:ef:76:99:da:48:99:c0:f2:f7:ab:64:
         b3:71:fd:3b:03:9a:c6:5e:04:26:e5:7d:0b:ae:fe:17:7d:9e:
         67:09:86:84:63:47:43:60:5e:6c:b0:01:a3:54:e0:fe:f0:81:
         c7:e2:40:6f:55:44:75:9d:4e:4f:70:46:92:70:6f:52:61:7c:
         3b:a8:eb:d4:13:a0:01:58:55:cb:d8:db:89:a6:fe:60:7c:3d:
         63:a6:ef:4b:5b:66:3b:5f:12:4f:b7:0a:e8:a3:8d:02:4b:eb:
         3a:01:16:c4:d2:ca:6c:bf:c3:e8:21:ad:05:54:26:a5:db:2a:
         76:20:a0:39:74:f5:da:38:c9:35:cb:96:e5:b5:a5:97:ea:07:
         97:74:ef:d5:3e:32:50:00:08:77:eb:f2:06:80:9d:b3:9a:8f:
         2c:1c:88:2e:00:64:fc:ae:91:e4:a0:e5:8f:d5:55:38:64:11:
         3f:0d:cf:1b:85:df:d7:25:47:21:1a:1e:23:64:0c:1c:71:90:
         98:17:30:80:68:21:bb:ac:fd:9b:09:40:82:82:5c:e1:fd:ad:
         20:d8:fa:bf:c0:44:28:f6:ff:70:94:2e:ad:46:0d:96:1f:27:
         80:a6:66:73:eb:05:da:a6:bf:31:74:42:5b:d8:1c:63:f9:6a:
         17:9c:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:31:32 2026 by rpki-client