Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa
File:                     36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa (raw, json)
Hash identifier:          kA0uCmZewdpQGDDumaMsSi9oPmBjeCG4b0978D+Nztw=
Subject key identifier:   69:C5:3F:9E:2A:EE:E2:D7:73:BC:83:EB:DC:AB:59:87:98:AF:81:17
Certificate issuer:       /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
Certificate serial:       010D0C9F4328584D75D53F3E48D328F643D0F440
Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     8070
IP address blocks:        2606:e540:c02::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3f:3e:48:d3:28:f6:43:d0:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=0bc5b8d4-a44d-4065-88e1-893ef4500cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:bb:6a:d1:c6:20:04:69:ec:33:23:e3:3d:
                    8e:79:e6:4f:1f:f5:ec:28:27:c5:08:de:9d:13:0d:
                    03:be:15:d1:27:43:32:ff:4d:d4:a2:08:dd:f3:a7:
                    f8:3d:bc:15:56:ec:92:16:6e:ec:be:a0:95:bb:19:
                    01:45:ea:5b:71:b4:e2:c3:5f:51:fe:53:a1:12:40:
                    be:a5:4d:4b:c6:67:74:8a:55:ee:cf:29:0b:15:b5:
                    52:1a:74:c6:72:9d:0f:94:e2:6e:9b:48:c7:6d:3b:
                    b0:11:5b:67:a9:f9:19:0d:c2:d8:ac:80:df:2c:64:
                    c7:e6:41:5e:54:41:38:26:20:95:bc:8d:c1:8e:52:
                    d6:a1:b9:05:e9:1c:1c:28:f5:3c:cd:72:b2:0e:38:
                    fe:e3:48:30:c4:31:a7:6e:45:3c:3d:26:fc:94:4d:
                    5e:a1:9e:c8:ec:50:d2:84:ef:f3:c9:ec:8e:80:14:
                    7e:7a:4d:a9:c5:72:f3:0b:42:2f:2a:b4:3b:9e:db:
                    2a:98:f7:00:2a:0f:8b:c1:8d:21:65:c9:f6:8e:a3:
                    01:b5:51:42:f6:dd:4e:84:dc:5d:0f:55:2b:15:a7:
                    3a:3a:40:c4:1e:48:aa:1d:d8:95:59:5f:3e:c0:7a:
                    11:f0:e2:16:18:40:2f:47:89:0d:bd:56:c6:54:51:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:3F:9E:2A:EE:E2:D7:73:BC:83:EB:DC:AB:59:87:98:AF:81:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/36bdb9f6-a9aa-3c34-b7fc-b79ba39abbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl

            X509v3 Authority Key Identifier:
                keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:e540:c02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:b7:c0:a3:9b:b5:9c:5a:ef:6e:49:1c:c7:ec:01:53:ff:
         e8:b0:55:80:e7:fc:d4:ba:bd:1e:ff:77:21:9a:4e:f2:41:66:
         ea:88:31:bd:71:98:38:c2:b7:a5:f8:c1:07:eb:65:67:a0:99:
         4a:05:54:e9:de:b0:2f:9c:bc:6a:71:d4:67:d7:e8:80:4f:ee:
         ae:c1:8d:f3:0a:ec:40:da:b3:b7:a6:0a:9a:7f:5a:e1:68:25:
         2d:d1:d8:4c:f6:cf:e5:93:64:79:15:5e:20:69:58:5d:8e:74:
         10:1c:1d:c2:56:78:86:e5:2f:e4:81:59:50:73:ed:d3:8f:67:
         d5:ae:2f:9b:25:20:c2:c3:80:30:c7:07:50:3a:10:45:21:8f:
         91:95:e7:30:b2:6d:c1:31:b2:18:59:1a:99:57:68:8f:d9:fd:
         70:d9:de:37:c9:dc:79:d6:96:dc:1d:87:a1:d2:50:d1:de:30:
         6d:ff:ff:39:d5:66:f2:74:8f:bf:f9:40:17:51:81:2f:e7:06:
         c5:43:1f:64:0e:46:e0:bc:24:21:60:f1:8e:65:fd:b8:9d:a3:
         0b:5c:c8:40:4b:31:90:04:88:a5:c6:e9:8e:f0:db:d9:f3:b1:
         80:15:1b:56:5a:55:d0:11:0d:ac:cd:35:f9:f1:65:c5:d1:eb:
         1e:6f:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:09 2026 by rpki-client