Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/ad90b4ea-73f0-3dbe-bed9-082157609fd3.roa
File:                     ad90b4ea-73f0-3dbe-bed9-082157609fd3.roa (raw, json)
Hash identifier:          7bxAf7m6uy4E6CTm5PNAKHzc/TupeE/sG0/srhWphAA=
Subject key identifier:   42:C5:F9:CD:8A:32:BF:8F:4E:7C:93:9B:EA:6E:F6:EA:7A:A2:BC:82
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584D7F9A8543AA6EC881F9D7DB40
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/ad90b4ea-73f0-3dbe-bed9-082157609fd3.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     4185
IP address blocks:        2602:fbdc:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:85:43:aa:6e:c8:81:f9:d7:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=c0ba235f-2a3d-4728-84b2-dfff30ebe70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0f:5a:01:eb:22:2c:47:d4:92:a0:ec:81:88:
                    6f:f9:34:13:f4:10:de:68:11:43:c0:74:fb:21:2e:
                    3b:7f:51:9e:21:16:24:e4:8a:e8:37:aa:ce:b7:2e:
                    c0:09:91:78:ed:9b:f0:58:39:99:3a:bf:32:a6:85:
                    ad:30:d3:7e:d3:61:47:44:2f:1e:23:f1:18:16:48:
                    ca:72:bf:54:68:5c:f9:90:89:3d:25:ab:98:2b:02:
                    a4:55:6d:a9:76:ca:94:e7:73:4f:dd:a4:14:51:ef:
                    d1:ba:39:f3:52:bd:c2:95:b1:eb:56:95:62:ed:b8:
                    4d:b3:fe:ef:a4:b6:5f:de:67:85:fb:e6:e7:02:25:
                    5e:8d:f5:cb:b2:f4:0a:29:75:bf:6f:23:28:af:22:
                    70:02:8f:3d:d6:0b:cb:11:00:ad:fc:9b:15:f7:a5:
                    f4:9f:f9:dd:2e:0c:79:c2:5e:17:70:6b:9f:87:7c:
                    c7:67:68:04:2a:4a:97:0c:38:c6:a3:02:c9:32:72:
                    b2:77:30:34:74:6d:ee:a1:d7:66:78:9e:8d:51:9d:
                    9e:d1:e5:b2:62:8e:00:4a:b3:c7:a2:00:63:8a:44:
                    ca:9d:45:32:e8:2b:c4:f7:7f:6a:3f:51:13:7a:c6:
                    22:a9:31:86:a6:79:1b:27:06:e4:95:ce:bb:5c:da:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:F9:CD:8A:32:BF:8F:4E:7C:93:9B:EA:6E:F6:EA:7A:A2:BC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/ad90b4ea-73f0-3dbe-bed9-082157609fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:7c:02:79:7f:b4:36:08:a7:4f:4e:3e:72:5e:34:4a:07:0c:
         74:46:36:b0:a0:31:0c:71:b3:74:68:1c:55:00:cf:88:d7:19:
         8b:5c:50:f1:7c:f9:1e:42:c3:2b:c3:d0:3f:7a:1d:b6:55:94:
         bd:66:74:2f:20:d2:c0:10:a1:cb:8f:fc:a2:1a:1d:83:55:68:
         42:e9:a5:00:be:72:19:30:66:9d:60:98:c4:1b:20:9f:75:7c:
         e2:e9:1a:8f:72:51:3a:18:54:be:83:44:56:c3:bb:5a:f7:f8:
         61:a7:1a:54:5e:8e:ab:9b:94:e1:8e:fc:8f:b7:58:fc:03:f9:
         67:75:ae:26:8b:27:37:2f:6e:3e:a6:c9:d6:4d:2f:57:24:e1:
         b7:73:7c:42:6b:3b:26:4f:95:c8:d7:67:5b:8a:c3:e1:9e:a7:
         2f:39:9a:b4:f2:c8:18:26:b7:78:ec:33:05:c8:c2:ed:83:82:
         b5:53:a5:4b:5c:06:64:6e:72:16:5b:f4:cd:18:3e:33:64:57:
         78:c6:8b:24:a7:28:4b:48:83:8e:b6:3a:e7:fd:62:ae:01:5f:
         ba:7f:ed:7b:00:02:80:a1:7e:5b:2b:aa:91:a0:9c:73:06:44:
         4d:14:a6:73:50:05:50:e2:85:e3:98:43:dc:e9:10:5c:e6:0f:
         3c:37:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:30 2026 by rpki-client