Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa
File:                     8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa (raw, json)
Hash identifier:          nJwWSxNmSf+fagW5vbMbbe8pcEfz9cJb/DfzJCrB/bg=
Subject key identifier:   82:F9:97:72:E3:96:63:24:78:5F:BC:13:F3:7A:09:F8:DD:17:62:56
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584BBB758E7B2039995F4BC5AB24
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     3423
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8e:7b:20:39:99:5f:4b:c5:ab:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=7372fec5-4d7d-488f-802d-65e4c30e4170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:0c:52:6a:10:a6:f3:1f:6d:46:94:8a:38:
                    9c:9e:9d:b8:a7:6d:c2:0d:56:92:4e:7c:98:fc:00:
                    44:cf:8b:8e:be:56:53:82:9e:5a:74:0c:f2:a5:eb:
                    49:e4:df:f1:57:a8:0c:d4:49:09:2a:43:33:8b:34:
                    e2:80:e3:86:f6:69:26:7f:e1:60:90:c9:7e:29:35:
                    aa:07:37:17:2b:ac:96:a4:46:0c:31:d4:9b:a5:16:
                    5b:cf:21:44:83:60:49:1a:be:9e:cb:af:58:f3:79:
                    fa:81:fd:d2:47:eb:bb:f3:e2:9d:5e:ce:33:a3:70:
                    48:60:b4:a0:75:31:77:64:24:7d:85:13:18:ae:60:
                    90:0a:8b:fd:eb:c4:e9:c1:8a:34:73:70:7c:65:b6:
                    21:01:37:c0:ff:ac:d8:26:25:53:f9:7c:96:af:44:
                    7e:42:21:4d:af:8d:ff:47:35:0d:86:06:36:51:ee:
                    0f:67:2c:72:25:55:c3:b6:e7:1b:6f:b6:a4:c2:c1:
                    dc:f2:27:1b:3a:4d:1e:00:4a:33:6f:91:b4:51:15:
                    70:00:1c:d8:21:77:60:5e:88:da:03:e4:53:00:d5:
                    f2:1a:c1:a0:9a:fb:42:3c:43:ad:02:14:52:9a:ad:
                    e1:df:8d:7f:41:e3:ee:32:9c:c5:3f:f6:67:d5:e4:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:97:72:E3:96:63:24:78:5F:BC:13:F3:7A:09:F8:DD:17:62:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/8e2f1de1-ac2d-3e9c-a8d1-92ec485970d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a8:2d:fb:12:cb:8d:3d:4d:16:79:01:d3:ac:f1:de:7e:93:
         f4:bd:58:74:44:dc:a4:86:b1:80:f2:f4:71:f6:e4:89:df:05:
         57:06:80:f8:d5:21:7c:8b:d9:e5:b0:92:1c:c1:77:28:97:59:
         c8:47:78:19:9a:d6:88:3f:1c:76:9f:f9:9c:b4:69:14:1c:b1:
         b7:83:f2:cb:25:6c:d7:55:e6:0f:e3:ee:a9:4f:23:ac:e4:b8:
         90:b4:3b:15:f9:b0:e1:90:5d:dc:8c:67:da:a2:c0:82:45:df:
         0e:21:35:fd:86:1f:aa:b7:75:af:d2:fa:35:98:27:5b:b1:26:
         98:1d:bd:7f:31:55:c6:a1:99:a6:8a:5c:f8:2a:ba:2d:12:0d:
         62:9c:ff:f3:f5:da:53:b3:31:cc:46:fe:b7:0c:7e:a9:ec:72:
         73:78:f4:55:01:7e:82:03:ed:b5:70:fe:ad:f4:b4:a3:82:13:
         06:c0:10:9c:91:08:df:5f:8e:00:97:fb:fa:bb:f8:72:ea:9f:
         d5:54:59:e9:da:c8:6e:79:da:a0:37:ca:d7:ec:1f:af:2e:ed:
         05:5d:df:ef:a7:95:c9:ad:96:92:d7:81:32:74:a0:64:2f:13:
         0f:8f:79:93:d2:86:9f:f5:28:2e:f6:06:27:28:b7:4a:c5:63:
         e1:3e:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:34 2025 by rpki-client