Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa
File:                     94c32bfc-5386-38c8-a11f-4f545260b6de.roa (raw, json)
Hash identifier:          /nRerzDPgrOUfbZplZrNoccBQd2bymn0J7aaEiCOwWY=
Subject key identifier:   E1:86:DE:3B:F8:B3:C4:56:D3:C6:66:80:5C:D7:5B:85:8B:4A:0E:ED
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584BBCDADF77F1A1158D36F7F280
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa
Signing time:             Mon 03 Nov 2025 14:00:38 +0000
ROA not before:           Mon 03 Nov 2025 14:00:38 +0000
ROA not after:            Sun 01 Feb 2026 14:00:38 +0000
asID:                     4186
IP address blocks:        2602:fbdc:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bc:da:df:77:f1:a1:15:8d:36:f7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Nov  3 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2026 GMT
        Subject: CN=6866fd5f-ed06-4b7c-b9d3-947642d20fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:c2:71:9b:be:f9:c1:6b:52:4c:58:eb:47:
                    b9:53:68:d5:84:eb:e6:bf:15:a4:ee:42:96:4c:77:
                    a1:f5:5e:a4:d2:cf:80:b5:a0:ff:40:41:35:23:2b:
                    79:d9:6b:50:4a:23:54:86:71:ac:1e:db:20:04:b7:
                    7d:15:72:c7:90:8c:60:26:54:35:6a:4f:22:25:ff:
                    86:94:f2:03:cb:18:8a:91:cc:54:8d:b2:05:b6:ac:
                    5a:4d:7e:d4:69:6c:ba:73:4c:5b:f8:b8:30:06:02:
                    d3:07:e6:ba:63:07:34:b4:fd:15:36:ce:96:bd:72:
                    3f:d9:e2:03:dd:29:1f:af:72:87:76:8c:8c:be:75:
                    8f:8f:15:21:fa:4a:0b:da:3a:60:ce:09:98:6c:0e:
                    72:6f:a0:b8:31:6c:d8:a2:39:e0:72:72:79:ed:51:
                    4b:53:cb:71:43:cc:b4:7a:da:91:ef:c0:13:81:1c:
                    7c:4c:6f:aa:41:83:e1:ce:08:c8:c7:d9:91:a8:ec:
                    d3:12:14:10:ee:9a:a3:e3:89:49:a1:cb:52:d1:f8:
                    30:7a:3a:ab:f7:f2:1a:93:c3:59:0e:76:54:d7:d7:
                    e0:38:90:05:c5:f3:d0:e7:2f:59:08:84:24:ed:f2:
                    3a:e4:45:6c:f1:38:06:43:92:44:b5:45:6b:92:a3:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:DE:3B:F8:B3:C4:56:D3:C6:66:80:5C:D7:5B:85:8B:4A:0E:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:fa:dc:38:b4:ed:3e:88:c4:9d:6d:4b:00:c0:2e:20:38:
         56:8e:cc:6e:6a:48:9d:b0:98:c4:1f:49:58:b9:93:1a:2a:ef:
         e3:01:bd:0b:e6:47:6b:e9:0d:c2:35:58:e1:4d:af:01:e1:f8:
         66:ce:7b:ec:62:13:b4:35:be:49:48:37:b6:63:75:3e:e4:11:
         67:0e:d0:b8:b3:0e:33:e2:69:98:1d:b8:7f:cc:df:dc:20:07:
         3b:13:28:ee:97:a8:49:95:dd:83:30:57:37:4b:bf:51:bb:9e:
         c3:b8:8f:43:70:29:d3:65:b1:a0:3b:70:78:89:50:91:e0:8b:
         a6:79:a3:0b:a6:b9:3b:dc:52:00:c2:22:43:be:57:a2:78:da:
         80:54:30:11:41:3c:26:76:20:74:ef:07:2e:66:f6:37:91:f2:
         37:c7:12:d2:ec:15:e6:1c:6d:2e:07:49:ed:80:be:ac:d5:7e:
         72:fb:28:75:68:3c:75:4f:c4:7f:51:41:86:50:64:a9:fe:ca:
         f6:9d:5e:3d:76:e5:65:99:7f:9c:1e:85:f0:8d:aa:bc:fa:1d:
         dc:d3:d6:63:52:63:46:55:c5:61:cd:1d:55:af:91:f4:19:66:
         39:59:27:7d:77:a0:6c:b1:b9:c9:99:dc:fb:19:17:c5:0b:07:
         27:96:db:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu82t938aEVjTb38oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk
Njg2NmZkNWYtZWQwNi00YjdjLWI5ZDMtOTQ3NjQyZDIwZmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS/CcZu++cFrUkxY60e5U2jVhOvmvxWk7kKW
THeh9V6k0s+AtaD/QEE1Iyt52WtQSiNUhnGsHtsgBLd9FXLHkIxgJlQ1ak8iJf+G
lPIDyxiKkcxUjbIFtqxaTX7UaWy6c0xb+LgwBgLTB+a6Ywc0tP0VNs6WvXI/2eID
3Skfr3KHdoyMvnWPjxUh+koL2jpgzgmYbA5yb6C4MWzYojngcnJ57VFLU8txQ8y0
etqR78ATgRx8TG+qQYPhzgjIx9mRqOzTEhQQ7pqj44lJoctS0fgwejqr9/Iak8NZ
DnZU19fgOJAFxfPQ5y9ZCIQk7fI65EVs8TgGQ5JEtUVrkqNwnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOGG3jv4s8RW08ZmgFzXW4WLSg7tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvOTRjMzJiZmMtNTM4Ni0z
OGM4LWExMWYtNGY1NDUyNjBiNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKx+tw4tO0+iMSdbUsAwC4gOFaOzG5qSJ2wmMQfSVi5kxoq7+MB
vQvmR2vpDcI1WOFNrwHh+GbOe+xiE7Q1vklIN7ZjdT7kEWcO0LizDjPiaZgduH/M
39wgBzsTKO6XqEmV3YMwVzdLv1G7nsO4j0NwKdNlsaA7cHiJUJHgi6Z5owumuTvc
UgDCIkO+V6J42oBUMBFBPCZ2IHTvBy5m9jeR8jfHEtLsFeYcbS4HSe2AvqzVfnL7
KHVoPHVPxH9RQYZQZKn+yvadXj125WWZf5wehfCNqrz6HdzT1mNSY0ZVxWHNHVWv
kfQZZjlZJ313oGyxucmZ3PsZF8ULByeW23Q=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:22 2025 by rpki-client