Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa
File:                     e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa (raw, json)
Hash identifier:          kzOaeWHSmHVAkyHDtDrv80oBs0+dlDUeew9mhqlwySE=
Subject key identifier:   F1:A4:E1:23:2A:35:53:90:F3:6F:4C:E9:9E:D9:F5:EA:78:81:E4:C5
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584E5D14ACB81AAFE9EF95051180
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:ac:b8:1a:af:e9:ef:95:05:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=8ba72f24-7619-4912-ab85-01ff1ff73119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:b6:22:e4:58:42:57:f1:e5:b6:b0:2a:cc:
                    2d:d0:e6:cb:18:24:e3:20:b7:12:94:3e:86:34:3d:
                    64:69:98:a2:ce:95:db:e4:eb:9c:cc:54:53:b1:fc:
                    9b:6d:8f:43:38:d0:fc:5d:b1:1f:31:76:16:c4:5d:
                    85:8d:84:4b:41:d1:67:a6:41:ac:67:59:93:bd:99:
                    01:7d:7e:02:a3:ec:36:8e:7f:fd:5b:70:86:45:08:
                    b5:29:a0:a5:e2:92:fe:52:1e:ff:c1:84:bd:5d:1f:
                    30:e0:e9:72:70:2c:31:f7:93:70:dc:4b:3f:5e:9b:
                    57:dd:6b:b7:85:f1:1e:9b:4a:25:e9:29:b4:cf:ce:
                    0f:f8:ef:fb:fc:9b:d7:4a:92:45:0c:c7:96:b7:e1:
                    8b:2c:e8:e8:18:a5:8a:b5:99:97:2a:3d:6c:70:53:
                    c0:d9:c1:9f:a3:2e:fc:9a:e6:df:9c:61:e2:66:64:
                    b2:66:bd:7b:1b:d4:ac:6f:e2:77:7f:15:15:76:40:
                    d9:e2:05:cf:1c:c4:4f:40:f7:df:22:2f:75:58:a7:
                    95:5d:eb:19:47:0a:92:3f:1b:b9:33:4e:a9:f1:0b:
                    88:a9:9b:0d:3e:8a:2f:63:48:c0:a3:4d:e4:a9:ce:
                    87:17:fd:0a:bd:c6:ad:de:1a:e3:f9:de:0a:1a:a5:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:E1:23:2A:35:53:90:F3:6F:4C:E9:9E:D9:F5:EA:78:81:E4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:be:d7:61:34:62:13:14:00:1b:7e:c0:8f:67:d3:8b:cf:
         ee:62:c5:f0:be:d1:25:3f:c8:95:61:65:61:00:99:fe:09:d9:
         0d:ad:71:fc:b0:ec:3a:c0:34:c9:86:c5:9a:f7:85:c5:09:bb:
         b3:7c:ab:3e:fd:2a:b6:b2:ea:5e:85:1c:68:7a:65:ee:70:2f:
         35:f4:e7:6f:42:54:40:40:40:b4:84:55:97:67:20:c9:a8:a4:
         55:2c:b4:c3:31:8d:78:51:4d:41:84:16:3c:3c:b6:78:13:2d:
         59:ec:97:ba:e8:3d:ce:71:64:dc:61:7b:fb:f6:91:23:85:98:
         32:b5:de:e2:08:35:8c:ae:60:26:ab:25:b5:3a:2e:cf:95:5f:
         27:81:f5:d6:7b:f6:ca:41:ad:64:b1:29:4b:d3:ff:dc:07:71:
         71:90:c1:0d:05:c5:49:3c:f3:7b:00:de:60:1f:45:20:27:65:
         ed:d1:b6:55:9f:5e:70:48:4a:58:7f:25:45:e3:1e:a7:bb:80:
         48:88:57:33:e1:61:8a:72:69:89:b5:8e:2e:8f:db:89:fc:7d:
         56:8a:be:4f:d8:23:6d:3b:8e:46:e9:ef:93:5b:d0:b0:f7:7f:
         b1:ac:53:f3:ef:34:2b:65:41:49:1a:a1:d6:a2:99:5a:29:6a:
         37:a2:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:12 2026 by rpki-client