Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
File:                     85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa (raw, json)
Hash identifier:          AnOc977RdQYcAnk+3OqFzney5WNh0S+oi/EY/IDXTKM=
Subject key identifier:   A5:8A:BE:BB:79:61:DD:54:48:34:72:50:B5:89:8D:88:93:84:14:DA
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BC5186A146E0F0B63E980
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:8e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c5:18:6a:14:6e:0f:0b:63:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=ac7b52f0-cd67-4bf2-be9b-a439ba5b57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:50:ee:1b:f1:6e:17:d3:d0:85:a2:0b:5b:
                    56:8b:be:5a:0d:2e:63:71:94:de:69:f9:1a:7f:3f:
                    41:82:d8:34:03:9a:5b:f0:be:5f:ae:7e:f7:77:e4:
                    95:e0:60:39:4b:2b:67:24:f2:d1:c6:86:5b:c6:c1:
                    9a:c6:de:c3:fe:bf:44:7a:28:fc:45:5e:e7:5e:18:
                    c8:9e:8a:ed:b7:32:6f:23:3f:f8:a3:aa:8b:5e:92:
                    9f:73:b1:e6:0b:41:38:dd:9a:ec:39:5a:1c:54:f8:
                    91:c4:36:ec:4a:b0:40:db:4a:3d:a7:59:25:0a:d6:
                    45:79:13:1f:ea:19:dc:cb:85:f2:ff:ca:50:21:34:
                    66:3d:57:b8:a7:45:83:95:6e:c2:8c:20:36:88:2d:
                    e4:09:58:42:d0:ff:df:a4:88:ea:5d:d5:12:61:b9:
                    f1:63:1b:db:02:58:1e:32:39:c3:ff:07:59:f4:28:
                    36:96:0b:09:1a:75:f1:2f:2d:a5:8d:df:dc:e2:52:
                    6a:60:ad:e4:3b:e9:dd:a9:65:e2:74:9d:98:93:4e:
                    bc:b2:82:c5:18:55:8d:25:f3:df:d5:93:4c:de:73:
                    98:2b:c0:77:f2:5e:52:e9:1a:02:41:ef:ec:8a:e9:
                    68:5b:a2:49:c9:95:a6:bc:a2:69:2a:0b:0f:e4:3f:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:BE:BB:79:61:DD:54:48:34:72:50:B5:89:8D:88:93:84:14:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:8e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:8d:40:9a:5d:47:b8:6c:70:7f:54:fe:14:51:10:1c:92:
         0b:95:40:35:a4:56:ac:2b:23:99:86:09:8b:e5:73:75:7e:88:
         35:45:cc:3c:af:ff:4a:37:00:4e:cf:c6:02:3f:ee:de:e0:83:
         37:84:29:19:7a:63:12:fd:b5:c7:03:15:5d:17:42:bf:fa:6b:
         1b:a3:ce:c0:2b:3f:dc:59:8b:91:b2:4a:81:a2:d8:8f:ee:53:
         b7:1f:97:91:63:7a:b0:f6:b7:29:36:40:d3:2d:8b:f7:37:aa:
         23:59:3f:2f:f6:2d:e6:cd:4e:90:c5:a9:0d:8c:37:22:a2:d9:
         c2:aa:e8:b0:e8:4a:97:28:54:6c:07:a3:d6:5d:80:a4:99:51:
         37:d9:d6:5b:ef:f7:77:0c:ca:21:3b:3d:48:e1:25:50:2e:86:
         7b:80:4d:9f:f5:4c:0e:ef:48:a0:8e:84:c6:10:83:1f:5d:95:
         db:49:08:ed:64:c0:be:e1:2d:e5:a2:db:03:b0:e4:9d:b9:0b:
         d4:27:be:43:f7:d0:5c:83:cd:5d:a3:12:3f:58:4b:a3:8f:45:
         b6:3f:d2:92:93:53:06:b1:f2:16:1b:c6:45:a4:fd:0c:9f:43:
         84:f1:f9:d6:53:34:02:23:28:b6:7f:f8:44:d4:08:54:67:eb:
         dd:71:b9:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram8UYahRuDwtj6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk
YWM3YjUyZjAtY2Q2Ny00YmYyLWJlOWItYTQzOWJhNWI1N2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJJQ7hvxbhfT0IWiC1tWi75aDS5jcZTeafka
fz9Bgtg0A5pb8L5frn73d+SV4GA5SytnJPLRxoZbxsGaxt7D/r9Eeij8RV7nXhjI
norttzJvIz/4o6qLXpKfc7HmC0E43ZrsOVocVPiRxDbsSrBA20o9p1klCtZFeRMf
6hncy4Xy/8pQITRmPVe4p0WDlW7CjCA2iC3kCVhC0P/fpIjqXdUSYbnxYxvbAlge
MjnD/wdZ9Cg2lgsJGnXxLy2ljd/c4lJqYK3kO+ndqWXidJ2Yk068soLFGFWNJfPf
1ZNM3nOYK8B38l5S6RoCQe/siuloW6JJyZWmvKJpKgsP5D9RYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKWKvrt5Yd1USDRyULWJjYiThBTaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvODVmOGU3YzAtYTFkOC0z
Zjc0LWJlNDktMDRkYzkxMzYyMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB2pjUCaXUe4bHB/VP4UURAckguVQDWkVqwrI5mGCYvlc3V+iDVF
zDyv/0o3AE7PxgI/7t7ggzeEKRl6YxL9tccDFV0XQr/6axujzsArP9xZi5GySoGi
2I/uU7cfl5FjerD2tyk2QNMti/c3qiNZPy/2LebNTpDFqQ2MNyKi2cKq6LDoSpco
VGwHo9ZdgKSZUTfZ1lvv93cMyiE7PUjhJVAuhnuATZ/1TA7vSKCOhMYQgx9dldtJ
CO1kwL7hLeWi2wOw5J25C9QnvkP30FyDzV2jEj9YS6OPRbY/0pKTUwax8hYbxkWk
/QyfQ4Tx+dZTNAIjKLZ/+ETUCFRn691xudw=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:21 2025 by rpki-client