Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
File:                     dfa13ca2-8a87-3b38-9706-132ae3f66301.roa (raw, json)
Hash identifier:          DjJdq0kZYSLQWnKL82s+LfJiLgy0few4378b67X6V+Y=
Subject key identifier:   2A:D8:50:18:14:4F:4B:62:4C:A0:A9:03:26:5E:33:DF:43:A8:FE:80
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BC4B41BA6891EBCD68F60
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c4:b4:1b:a6:89:1e:bc:d6:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=8f572d6d-b966-4c5d-9f75-4e98a10f6eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:62:49:fe:8d:a0:9e:79:10:22:88:60:f2:
                    6d:08:36:86:76:7b:62:60:16:39:90:84:88:da:90:
                    d3:96:4e:97:b7:f0:f1:f9:4d:dd:27:1c:0b:3a:99:
                    f3:87:09:bf:8e:27:ea:f1:ff:4a:ce:fd:4c:44:14:
                    a6:f4:f8:71:fe:52:6e:d1:bd:4a:b1:5b:fa:d5:b0:
                    d7:db:3b:af:f2:b2:cf:ef:8b:e3:54:f6:10:2e:1a:
                    5f:08:37:7b:9b:e0:0f:1a:70:c8:44:b0:64:a1:1d:
                    fa:e1:97:f8:9f:b9:ac:24:04:94:2e:d9:35:c3:8b:
                    37:03:40:bc:a0:59:90:d5:fe:50:92:b3:36:7c:75:
                    7c:6e:32:92:fe:2b:78:ec:3c:7f:a8:81:16:09:db:
                    10:ba:9b:12:cb:29:fe:25:6c:45:9b:bd:3c:ea:7e:
                    fa:be:6f:36:44:00:c8:35:7e:b4:17:28:25:d9:ae:
                    d8:2b:61:4e:2d:d5:2e:dd:29:76:20:89:cb:8d:7a:
                    0c:80:f5:73:b1:60:e8:6b:c3:a2:5d:b5:38:3f:ec:
                    03:7c:4a:06:10:b3:de:bc:86:e2:e1:08:89:1d:55:
                    2b:52:38:8a:ac:fc:b3:37:7b:dd:65:cf:a0:01:42:
                    c6:f4:fa:9c:aa:0f:ae:0e:42:b7:7f:64:2c:b4:34:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:50:18:14:4F:4B:62:4C:A0:A9:03:26:5E:33:DF:43:A8:FE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:41:d4:91:05:01:9f:65:65:27:b0:7b:69:8e:a7:72:ad:6c:
         9f:48:02:fa:4f:15:14:4b:33:bf:82:b1:02:96:0a:12:e5:08:
         64:8f:60:92:c9:a3:79:78:05:a1:ff:c7:fc:f2:c7:dc:c1:54:
         46:66:1d:69:5d:2a:e4:4e:59:e5:79:2f:84:2d:68:0e:34:67:
         2e:97:90:e0:88:e5:eb:39:98:48:70:99:8e:af:50:09:51:04:
         4d:bc:c1:28:5a:5a:3f:ab:97:b7:c3:2d:be:db:7d:5c:98:0b:
         4f:07:73:6e:97:3b:e2:1c:cf:bb:f1:97:29:86:04:90:0d:c5:
         b2:61:8d:21:aa:2c:38:f2:ad:0e:91:41:dc:8a:d8:c3:80:f6:
         96:67:ea:b5:49:dc:cc:d5:9d:d5:d2:d5:03:72:d1:5a:43:46:
         44:ca:54:7e:5a:7a:27:2b:3f:5a:84:63:8b:1a:e6:99:f6:85:
         02:ab:34:0a:dd:d1:49:d4:5b:22:d7:75:42:77:0f:e3:ba:98:
         22:6d:6c:71:86:40:16:c9:a6:e7:d1:f9:88:30:84:e0:14:82:
         c3:2a:ed:e4:35:1b:02:b3:41:45:25:ad:87:8f:47:1e:54:be:
         ee:40:42:6a:90:74:dd:8a:f5:98:c1:8a:d0:dd:ec:34:12:cf:
         97:90:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:17:25 2025 by rpki-client