Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
File:                     dfa13ca2-8a87-3b38-9706-132ae3f66301.roa (raw, json)
Hash identifier:          7pCq6LbSAGSnqZzwIYrU1BuDwF5zGCAXEOVl4BkQa6o=
Subject key identifier:   95:AC:55:D9:12:F1:F7:E9:B4:70:F9:0C:93:8D:54:DE:30:3A:73:B2
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584BBB758F33776F4D00F18D85C0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     3423
IP address blocks:        2602:fbdc:89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8f:33:77:6f:4d:00:f1:8d:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=53ee11b7-44c7-4110-a37b-fc071744f870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:78:6c:f3:47:ec:49:c2:25:37:dd:b1:b7:
                    ce:e8:67:c4:58:7a:c4:b1:c0:aa:f3:a2:60:d0:bf:
                    23:24:67:b7:bf:71:78:35:75:a8:fc:29:fd:c2:f0:
                    1b:89:b1:f6:a0:3a:90:9f:9a:c8:20:f6:81:61:3e:
                    01:38:8c:2f:72:0c:3c:e5:69:ca:f7:44:96:44:2f:
                    fe:e0:87:93:d2:5c:0f:d8:e2:d1:46:3b:4e:91:f0:
                    a2:aa:58:39:11:bb:6f:39:f5:e1:a8:9a:e1:18:14:
                    f3:80:ad:5b:77:32:f5:ac:79:2c:b3:9e:bb:f5:97:
                    3e:1e:d8:b4:2a:a0:c6:42:6c:2a:e5:71:00:9f:9a:
                    2a:08:a3:1b:59:9e:c8:ac:da:d8:64:9b:75:27:e2:
                    32:86:98:70:7c:23:17:05:d7:58:47:a2:fc:ba:c8:
                    e2:98:d5:ea:46:5a:77:9c:c7:37:58:f3:a6:49:57:
                    0a:2f:97:52:b8:46:e7:c3:80:5e:92:86:fe:9a:e8:
                    c9:95:c8:24:71:2d:39:dd:a7:7c:7f:3e:4c:d9:19:
                    4d:b7:e9:5f:2c:33:ee:07:2a:37:e5:63:b4:07:4a:
                    10:ba:fa:de:66:a2:d6:fc:1a:58:da:a0:ce:74:48:
                    fb:a6:8c:5c:e5:57:8c:0c:96:eb:6d:f0:35:12:d8:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:55:D9:12:F1:F7:E9:B4:70:F9:0C:93:8D:54:DE:30:3A:73:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/dfa13ca2-8a87-3b38-9706-132ae3f66301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ff:e7:e8:5d:4b:91:25:c3:b7:fe:75:da:54:6c:dd:34:59:
         81:b6:29:05:19:35:32:69:32:cd:60:2d:12:40:ac:3c:25:e6:
         10:e3:15:c6:a9:02:b9:3d:0b:d3:66:06:8b:62:9c:09:38:5e:
         b2:a2:78:24:c9:4c:fc:44:3c:4b:56:2c:27:80:c5:25:a0:5e:
         f2:08:d8:6e:e6:13:89:53:88:c3:5b:98:bf:89:7b:64:e1:21:
         87:a2:71:15:0e:c1:49:4f:49:09:a8:5a:c9:9f:55:8c:d2:08:
         18:b1:e9:41:c9:bc:df:97:48:d0:00:2d:30:f7:5b:0d:67:34:
         4c:ee:b3:fa:f1:f7:7c:af:04:88:31:65:0c:b5:80:95:59:50:
         54:3d:1c:2b:15:08:9b:3c:c3:a7:ee:83:70:52:6e:48:4e:c3:
         8a:94:e8:38:45:ca:88:94:be:df:eb:e4:6d:84:ab:6c:9d:68:
         a8:f6:f5:b9:86:e7:e5:11:dd:6e:c5:0a:b5:d2:58:c9:19:0e:
         e0:8b:81:26:2e:6a:fb:51:20:06:d9:43:ce:12:17:5f:26:65:
         21:09:6a:38:37:28:dd:7c:bf:13:53:f8:18:dc:66:47:d5:0a:
         d8:53:13:dd:74:c7:28:45:82:32:11:5b:36:17:5a:ec:c2:02:
         4c:1b:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:13 2025 by rpki-client