Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa
File:                     e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa (raw, json)
Hash identifier:          gx3uSTa7vbP3DylqPAUY3Tzh0gY/oFujMEEcsZAIwWY=
Subject key identifier:   3E:62:03:62:BB:DA:07:AC:D4:31:84:6D:FD:EE:E0:DA:29:BF:F6:F0
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584ADA9BC4342F7F542F97D3EA80
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     3423
IP address blocks:        2602:fbdc:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c4:34:2f:7f:54:2f:97:d3:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=73d6ea6e-f5aa-4f0d-b540-bbaca8e8696c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:d2:9c:24:da:bc:36:dd:46:9f:21:86:91:
                    7a:35:3f:c2:06:7e:e3:fb:61:c6:b9:9c:d7:d7:6e:
                    99:3a:1a:23:9a:65:83:68:c0:1e:a4:4d:30:c0:58:
                    9d:61:56:7c:99:41:4f:09:62:6f:6e:da:07:7c:ee:
                    f1:4b:04:f6:17:04:6e:db:25:64:dc:84:fa:0c:ad:
                    67:3b:1d:7f:f6:77:0f:d7:a9:c9:44:12:1a:aa:70:
                    ab:4f:a7:2b:47:77:99:c0:4f:74:c2:1d:8a:ef:0e:
                    9f:44:94:ac:43:2c:ea:38:64:62:05:4b:10:6e:b2:
                    2f:e8:a9:9d:30:c1:00:a8:3b:8a:ec:4b:90:cb:4d:
                    f1:d1:52:d3:8f:6d:64:fa:df:a0:51:06:45:04:f8:
                    fc:8c:28:2a:f5:a7:b3:dc:9f:64:90:76:c0:f5:a2:
                    da:f8:9c:8f:68:15:ac:81:8a:fb:04:ae:d4:6d:43:
                    5e:15:06:3a:f5:ca:94:03:63:41:2c:75:42:5d:db:
                    98:3e:6e:6e:8e:37:46:58:e7:78:f1:18:23:d7:df:
                    b6:73:0e:1b:42:11:30:f3:10:b8:c0:4d:ad:f1:87:
                    41:9a:45:ee:b9:37:86:ff:02:a6:c3:c8:be:a4:89:
                    d8:4b:32:98:7b:f4:00:44:2e:f2:f8:e0:20:e1:48:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:62:03:62:BB:DA:07:AC:D4:31:84:6D:FD:EE:E0:DA:29:BF:F6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/e38c55a3-e65d-33e9-9bc2-fc44b5662bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:03:d5:78:b8:1e:18:a1:78:cd:92:19:db:35:ee:c6:95:bf:
         51:ae:be:dc:db:2d:d1:07:fc:a7:af:04:71:91:e8:2f:3d:1a:
         70:ba:13:c1:39:1a:7e:34:ff:c9:27:a2:2d:4a:26:48:06:a0:
         67:b0:67:34:8d:de:e0:9a:43:e0:f3:8e:55:14:b4:bf:fe:5b:
         63:3a:17:41:a8:6b:3e:8e:b6:b4:cf:0d:ab:5d:ab:cb:89:d7:
         d1:51:5b:7a:bf:0c:e3:94:81:2f:46:b5:a6:b1:94:14:5e:e7:
         7b:fd:a9:30:c8:48:a5:14:17:96:86:c4:b3:e2:fd:c4:9d:ee:
         01:4c:10:e8:1a:bc:50:38:c2:37:c2:31:45:8c:c8:9b:fd:0d:
         ba:f9:d4:ca:be:75:ab:26:c4:cf:13:70:c3:92:2f:1f:62:3f:
         88:d9:1f:bb:a0:c1:75:fb:48:82:e8:16:48:cd:71:e0:03:dd:
         32:f7:c5:f0:1d:73:4a:98:63:52:c2:aa:be:08:ed:12:db:b5:
         67:fb:35:21:85:47:38:16:26:de:f4:bb:0c:74:e0:a8:1a:e3:
         6b:c5:18:e1:68:f2:db:90:61:ad:e3:f1:67:ec:00:a1:9a:f0:
         e8:bc:c2:61:0f:9c:e0:89:59:51:ca:ed:01:8c:fc:1b:9f:bf:
         d2:65:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:22:17 2025 by rpki-client