Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
File:                     85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa (raw, json)
Hash identifier:          N2vVvuAMxzz1UVDJfiKNNK6DrNOlPNUjdvI1VjIVD80=
Subject key identifier:   95:48:36:24:81:43:A6:87:DA:86:D4:0F:29:F8:78:13:CF:7D:17:0E
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584D7CCFD6CEF3746546B8623BA0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     3423
IP address blocks:        2602:fbdc:8e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d6:ce:f3:74:65:46:b8:62:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=38fb59e6-5d8f-475d-97b6-d9b8fcd9c3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:f0:f1:c8:17:4c:46:fc:77:ea:d4:82:3d:
                    c4:a2:8a:c9:4b:ea:b6:45:f9:e9:39:f2:f4:da:96:
                    7a:bf:55:b0:1c:6a:a6:08:35:cb:7a:d9:28:10:96:
                    65:d5:a4:f6:c6:c2:dc:2e:94:e2:20:a9:c7:fa:0d:
                    ed:18:b4:e8:c3:c5:5d:5b:f7:e0:b4:29:27:cd:b4:
                    2f:a0:2f:07:5e:9a:15:66:dd:29:e2:11:a7:0f:d1:
                    79:ce:e9:9c:39:e5:b2:dc:b9:05:aa:59:f8:09:a9:
                    a7:b4:73:61:35:48:cc:bb:81:b8:ea:77:aa:b9:58:
                    dc:a6:f4:63:19:56:46:8b:a1:87:e8:42:9d:70:2b:
                    89:e7:83:fc:6e:d8:32:33:ce:d0:a3:76:21:59:d8:
                    ff:f6:1b:76:91:b2:6b:11:40:50:a1:2e:a3:28:74:
                    8e:e9:90:82:1c:f4:c0:68:04:f7:3f:d6:bd:c7:22:
                    95:a0:80:41:9e:48:dc:d2:a7:34:e3:6f:5f:de:d3:
                    93:e2:42:cb:8b:e5:1e:12:c6:0f:5f:10:02:ec:78:
                    77:16:58:d6:92:e5:da:ad:e3:13:e4:3d:08:34:79:
                    a1:2d:a8:5b:68:15:f4:3c:e5:ff:8c:9a:2e:44:15:
                    51:18:ab:28:e0:fa:26:1a:79:e0:cf:85:b0:5e:22:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:36:24:81:43:A6:87:DA:86:D4:0F:29:F8:78:13:CF:7D:17:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/85f8e7c0-a1d8-3f74-be49-04dc913622f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:8e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:84:12:9a:44:3f:58:e9:96:73:cf:53:ef:5e:3b:2c:9b:3a:
         04:fe:e4:f7:76:ea:df:aa:e7:ec:d2:33:12:84:ab:7a:30:c3:
         ee:a4:9e:7a:fd:69:be:7a:6b:cf:fe:af:00:67:3f:d6:eb:3d:
         05:50:b6:ea:c0:1d:60:3f:85:be:59:58:33:34:27:fb:8d:e4:
         77:dd:92:62:5b:bb:b9:c5:ca:5d:d1:03:b1:3b:0b:3e:9d:c2:
         dd:e1:11:01:50:a9:8a:3a:be:95:0a:79:0f:9a:5c:15:e5:b1:
         0a:73:bb:20:da:3e:44:cf:45:cf:6f:76:19:c5:e7:52:d1:65:
         e4:e3:74:77:a4:83:2c:7f:12:e6:36:19:e4:be:3c:ca:4e:22:
         c6:1f:f1:3c:cd:2a:d4:b5:64:e2:80:a3:01:f0:5b:c8:77:1d:
         39:e2:54:b0:22:96:41:2e:38:fe:cb:75:22:c3:66:5a:a2:8e:
         78:36:f0:00:b3:74:86:45:1e:18:6c:ab:c6:b1:31:37:8d:f5:
         4f:2e:97:8c:ca:66:de:08:02:80:d7:c6:57:fa:fd:1e:c9:48:
         fe:47:4e:04:1a:24:96:ae:75:0f:46:18:fb:61:c3:21:5b:ba:
         2f:cc:a7:82:6f:da:cb:78:0c:b6:cb:88:b8:43:87:4b:29:2a:
         e2:f0:47:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:32 2026 by rpki-client