Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
File:                     78061b29-d846-3107-a526-47fd5a8d4b89.roa (raw, json)
Hash identifier:          X6E0yj3inbI14Zqebeh04nyrvXO3w8uK3wvt+AayOeM=
Subject key identifier:   3C:1E:4B:8E:3E:39:25:E9:F9:DE:8A:F5:58:F7:C2:B0:56:7B:92:29
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584CF9B78806FA1C2AABB99E0D00
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa
Signing time:             Wed 25 Feb 2026 02:00:32 +0000
ROA not before:           Wed 25 Feb 2026 02:00:32 +0000
ROA not after:            Tue 26 May 2026 01:00:32 +0000
asID:                     3423
IP address blocks:        2602:fbdc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:b7:88:06:fa:1c:2a:ab:b9:9e:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Feb 25 02:00:32 2026 GMT
            Not After : May 26 01:00:32 2026 GMT
        Subject: CN=09ed9567-1993-484a-97e6-658f4d6ddddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:77:8d:af:04:57:e6:1d:3d:d8:29:cf:1d:
                    10:42:8a:f1:41:7e:d1:96:60:a2:cc:cd:13:1d:1d:
                    e6:17:b3:68:36:5a:70:e0:59:54:a0:d7:1c:02:14:
                    40:99:9b:9a:03:4f:85:02:0f:0d:b3:d1:42:ae:df:
                    41:84:2b:d7:51:90:f1:0e:5f:26:bf:ad:c8:12:a5:
                    85:0b:6e:76:6d:19:90:4e:1b:66:f6:50:21:62:1e:
                    6d:de:72:83:fe:de:c8:7c:40:91:7f:6a:4c:3d:f0:
                    ca:3a:03:c3:35:1a:3d:8c:ab:df:4f:89:d1:e7:0f:
                    ec:a2:53:74:c8:ee:1a:7c:6b:90:fc:50:92:16:36:
                    ea:73:e7:a6:47:a9:78:66:6b:ab:2c:5e:b6:b6:79:
                    cf:e4:b3:da:4d:76:75:08:22:f2:bc:38:5a:95:64:
                    fb:54:32:25:fa:e6:62:e0:e0:03:2e:09:6b:74:bf:
                    8b:c6:5a:05:80:eb:c9:fc:da:7a:06:49:4a:c7:fa:
                    ed:cb:7b:4b:16:e4:86:0d:af:46:27:22:f2:cd:f8:
                    7b:43:38:3f:ad:1e:dc:fa:b3:70:72:52:69:49:ec:
                    35:9d:53:66:17:47:ab:a2:9e:0e:2b:9a:06:a9:97:
                    58:30:c7:53:52:dc:ce:5a:8c:09:97:fd:7f:c1:f7:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:4B:8E:3E:39:25:E9:F9:DE:8A:F5:58:F7:C2:B0:56:7B:92:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/78061b29-d846-3107-a526-47fd5a8d4b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:54:77:0c:95:c1:1b:41:43:ee:24:fc:83:16:21:4a:45:
         12:d7:84:28:5c:5b:47:7e:84:6f:38:25:a7:52:c5:20:c3:c8:
         ba:9b:e9:22:eb:0c:87:81:0d:9a:fa:d8:77:f0:6b:31:89:8e:
         1b:b0:73:85:88:c5:0d:71:d4:fc:9e:c6:41:9e:99:fa:dd:8d:
         cc:a7:fb:19:34:57:6e:43:27:dc:18:18:3e:64:1b:05:11:6f:
         b5:d8:fc:54:ba:3c:19:f9:b5:58:59:8b:a0:44:61:81:b3:aa:
         7d:1b:1c:39:d3:c7:48:ec:93:0a:8e:89:b2:00:93:cf:23:d4:
         0c:52:d1:0a:08:f1:4d:d1:06:5c:89:4f:2c:e6:1f:62:bb:65:
         37:69:a7:30:5c:b5:f1:df:b5:0c:0c:60:da:4e:d5:3c:35:a3:
         f4:1a:d2:3d:5a:bb:3d:51:69:2d:52:ac:0a:8a:a0:dd:3b:7e:
         cd:51:50:b0:8a:15:28:3d:fd:ab:78:4f:eb:ec:34:dd:ae:94:
         e7:ef:e3:43:2a:4a:94:a5:1b:45:61:9f:07:8c:c7:a8:4b:1e:
         47:14:2a:5a:b2:67:9b:66:50:07:e6:fd:d4:8b:ef:67:5f:29:
         5e:d0:f7:be:53:24:20:65:0c:93:b6:d9:ed:1b:e1:f3:7c:07:
         5d:92:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:12 2026 by rpki-client