Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa
File:                     8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa (raw, json)
Hash identifier:          V29dbTKcQBY1BSMyZ22fNKiBn7EgvJwycCkAS6Kpy/A=
Subject key identifier:   89:14:31:57:26:67:F3:A5:C1:99:DA:31:55:F1:03:A7:79:8D:FA:84
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BC40DAEE8227A9A682640
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c4:0d:ae:e8:22:7a:9a:68:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=753474ed-042a-43b4-b699-9acc4b317c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:f9:84:d1:b9:6a:ab:93:35:9e:d9:82:a4:
                    fb:6e:d4:df:d8:a4:c9:06:89:a4:d9:6e:4c:f7:ae:
                    96:ed:9d:49:d6:b7:5c:6e:ce:32:0e:e9:2e:e9:34:
                    11:10:99:30:5b:90:9e:d9:b0:1f:aa:0d:fb:54:a8:
                    b9:01:e4:fc:90:58:ed:1f:6a:11:d8:b0:e7:09:1b:
                    de:3c:34:e4:e8:4a:b7:85:f7:ee:7e:30:6d:d9:9e:
                    d1:00:74:ce:71:48:db:1d:b8:ce:2d:89:bc:9e:94:
                    c1:b9:91:c3:1e:39:b2:df:aa:ba:75:56:d9:3a:f5:
                    64:8d:0e:3e:46:70:92:d3:b9:c3:fa:01:d3:60:84:
                    8f:9d:0b:91:50:dc:dd:0a:58:94:7f:c6:d0:a7:c6:
                    d2:14:6f:5e:fd:8f:3e:c7:b2:c6:2b:97:22:8b:26:
                    e4:79:dd:ca:96:44:e1:5d:d8:6f:ef:1d:d4:77:d2:
                    48:cd:71:0d:63:56:c9:3f:5c:b0:68:59:c5:8b:2f:
                    57:c7:f2:f6:6e:b1:99:70:c0:02:e9:89:07:af:d1:
                    fe:fd:2c:48:9b:d9:45:2e:a6:98:f4:8f:c0:1f:6d:
                    80:13:1b:47:ac:24:51:c3:28:dd:bf:67:00:80:d8:
                    ed:77:52:64:ec:21:b9:a5:7e:ad:a5:6d:4f:07:a9:
                    7f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:31:57:26:67:F3:A5:C1:99:DA:31:55:F1:03:A7:79:8D:FA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:93:29:a9:da:91:8f:91:eb:6f:ca:75:47:fc:4c:6d:87:1f:
         93:07:18:88:1d:31:1c:63:09:34:ea:00:2b:8b:45:64:d3:a8:
         d7:a6:d8:89:17:06:c6:62:3d:de:5c:59:d7:c8:8f:d2:08:09:
         86:02:84:ff:4b:eb:fc:c0:61:9d:46:d1:e3:7d:a9:7e:cc:af:
         2b:73:b8:4b:f8:e1:00:75:b6:f4:40:49:6c:f6:03:e4:4f:0e:
         c3:e1:9b:48:65:ab:d4:e6:0a:f0:89:47:66:83:78:53:57:9f:
         6a:1f:93:cf:4a:9b:83:c8:c7:6e:c0:45:10:8d:9c:e4:c0:42:
         7e:a1:d6:79:a3:04:03:1d:d0:b4:99:63:2e:5e:91:a3:ce:9d:
         d7:1d:76:4e:55:9a:38:4d:eb:59:9e:f4:4f:7e:55:0c:38:c9:
         3a:9a:d9:68:a1:17:61:f2:58:b5:fc:22:d0:a8:b8:f2:b6:4e:
         94:ff:03:8a:19:a0:a9:da:86:92:cc:0b:a3:5c:83:8f:07:b2:
         df:1a:8b:b7:2f:9d:6d:19:d1:d3:aa:51:68:f5:61:d2:2c:c5:
         76:44:7f:7f:c0:32:6f:5a:6d:1a:38:31:b4:66:b4:e0:f1:fd:
         ae:21:7f:db:58:75:f2:30:d1:69:c1:a9:9e:75:81:f9:32:c0:
         9a:13:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:21:36 2025 by rpki-client