Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa
File:                     3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa (raw, json)
Hash identifier:          /m5OPalRaMQ6b0Gi11vGlSYiddqWOkZEvFT55JX8hdQ=
Subject key identifier:   92:19:B3:90:70:D0:92:16:D5:B9:C4:42:B8:C8:08:75:A0:66:B8:10
Certificate issuer:       /CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
Certificate serial:       010D0C9F4328584F2ABD01E4F0B9240F61C23300
Authority key identifier: 52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     7352
IP address blocks:        2604:cd00:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:01:e4:f0:b9:24:0f:61:c2:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e23f82b-dfd5-4328-8256-8d7abb886b20
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=51b48d45-e6c4-452f-93a3-2a1763516dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:f5:73:1c:f2:e0:7d:11:27:18:6f:26:4e:
                    29:ce:17:a5:e9:82:bb:80:6d:56:6a:42:95:8a:9e:
                    3c:14:0a:64:bf:c1:44:84:80:65:6d:47:ec:6d:1b:
                    fe:2e:80:e3:93:9d:62:23:02:8e:26:85:0f:25:13:
                    4f:bb:a7:b6:36:2b:9c:b9:51:08:a5:54:84:ac:25:
                    c6:dd:cb:af:73:7d:cb:97:2c:c0:e7:64:a1:6d:f2:
                    2b:bd:44:59:3a:c4:d5:13:d8:31:8e:08:c4:0d:dc:
                    96:92:79:72:38:96:d6:96:4a:e5:2a:05:fa:0a:bc:
                    0d:e2:7b:e5:94:cb:f6:33:6e:38:f8:fc:e2:61:9e:
                    e2:88:6b:77:d3:2d:e2:69:f0:85:9f:e3:18:a9:ef:
                    21:82:05:5b:ef:35:ba:0f:8d:7c:8e:c1:e0:7d:95:
                    74:c8:8d:d1:9f:2a:3b:38:69:56:04:21:99:0e:3e:
                    d2:1d:5e:41:e8:4e:7a:8c:65:1b:06:c0:a2:37:aa:
                    74:c5:1a:a6:5d:8c:fb:81:bc:dd:b5:49:01:75:0d:
                    40:8f:86:95:5d:5d:1d:dc:32:f2:f4:c8:21:14:bb:
                    14:d3:95:30:fb:99:92:fa:cb:c8:37:3f:75:1d:ba:
                    5b:cd:52:fb:4c:94:b3:67:2e:0a:8d:2c:ba:fb:a9:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:19:B3:90:70:D0:92:16:D5:B9:C4:42:B8:C8:08:75:A0:66:B8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/3b6e7c5b-7c8c-36d3-8b8d-fef0e64b047d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20/2e23f82b-dfd5-4328-8256-8d7abb886b20.crl

            X509v3 Authority Key Identifier:
                keyid:52:F3:50:1E:7E:41:90:84:24:0A:59:F9:C3:7B:50:03:63:5A:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2e23f82b-dfd5-4328-8256-8d7abb886b20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cd00:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:f1:a6:91:f0:86:f1:79:b2:da:7d:1b:24:96:9a:82:2c:
         2b:1b:c3:15:d0:2d:48:1d:f9:2a:49:12:7f:24:76:54:91:00:
         8f:f0:0b:02:f8:f1:e9:42:76:f6:4c:25:06:52:11:e3:d5:1b:
         22:87:93:96:b2:b0:33:60:06:ec:31:65:43:8d:3a:e8:a2:a1:
         85:78:03:2d:9c:a6:3b:8d:10:f3:d6:41:99:69:53:de:61:c2:
         c7:c9:05:f9:08:1c:7f:e0:2d:23:70:0d:22:ab:7b:55:c7:3e:
         67:ba:54:1a:04:5d:cc:38:a9:fa:04:9b:99:c5:ca:ce:a0:4b:
         77:1a:79:c8:84:2c:9b:e7:04:99:ab:c1:82:da:38:86:d7:5f:
         b7:e5:64:53:fb:10:2d:fc:a2:bf:01:25:a2:10:26:ea:f8:53:
         44:88:d0:5b:0f:ad:06:52:65:0a:7e:86:bf:5d:b9:a4:0c:5b:
         d2:59:65:86:fc:c5:f9:6d:b7:76:66:0b:d3:55:43:89:ec:d8:
         3e:0f:65:d4:b8:e2:71:d9:9f:d8:19:fa:f7:79:14:a5:2f:52:
         37:a2:43:c2:10:f6:b7:a1:e1:46:84:62:46:e2:40:5b:3c:2b:
         4b:99:bb:81:6e:4d:93:55:13:41:99:c6:18:f0:15:ef:05:8d:
         34:e5:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:54:09 2026 by rpki-client