Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
File:                     36a58b02-00a6-30dd-8d4f-2db78ed20646.roa (raw, json)
Hash identifier:          PIqA/+TJF8bKrPqXlVHcQIXypX4y8vEbkT6lY8w4uYc=
Subject key identifier:   1A:24:82:42:36:7B:0E:6B:FF:4F:6D:D3:08:D1:2E:A2:B0:49:8C:EC
Certificate issuer:       /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
Certificate serial:       010D0C9F4328584F4C3D6A1D9C3951BADA632280
Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     402585
IP address blocks:        2620:23:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:6a:1d:9c:39:51:ba:da:63:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=67a36565-3bb2-4d3c-8285-3cc5e77a656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:8b:03:63:ad:ac:3b:9c:86:3d:96:de:61:
                    f9:f5:c6:1e:66:1e:fd:58:ae:3a:3f:7e:60:de:e9:
                    c9:16:f3:69:68:54:81:22:95:05:31:7b:fd:33:bb:
                    10:01:d0:f1:7d:32:06:64:95:f1:7b:1e:cc:ac:fe:
                    21:f7:0b:67:42:39:ad:80:6d:da:65:12:ab:4f:3f:
                    5b:6a:39:b4:5a:c9:f3:b4:61:1e:12:ef:9b:74:a7:
                    34:1c:ec:73:db:4c:8d:54:b5:5f:da:47:ac:ce:ed:
                    9c:b6:bd:49:c0:2e:07:c5:e6:ed:b9:f7:ef:0f:1f:
                    e3:59:64:f7:d4:7c:47:85:bf:b1:e3:f8:8b:eb:fb:
                    7c:e9:b6:89:1c:fc:b3:25:b9:e6:b3:d2:89:a3:41:
                    bc:05:1f:ff:5c:0b:06:4b:35:48:57:e3:23:e0:2d:
                    00:00:5c:af:43:f6:18:4f:46:e8:1d:a9:d5:3c:2e:
                    7b:91:01:dc:30:45:6f:ec:a2:17:4c:8a:aa:76:18:
                    1c:4f:6c:00:d3:45:ee:47:d3:74:ec:52:26:c4:ea:
                    55:ee:e3:29:ba:73:d7:2d:99:64:ee:e3:78:45:f4:
                    48:34:7b:a0:3e:14:51:a4:8e:14:0b:d9:fc:4a:8a:
                    d6:74:9c:a6:cc:01:3a:56:7a:97:04:52:74:76:55:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:24:82:42:36:7B:0E:6B:FF:4F:6D:D3:08:D1:2E:A2:B0:49:8C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/36a58b02-00a6-30dd-8d4f-2db78ed20646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl

            X509v3 Authority Key Identifier:
                keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:23:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:a1:3c:86:f8:28:e5:4b:ef:25:0c:f7:8a:57:0b:f5:c3:
         b6:4b:96:56:d0:ba:77:65:f1:8d:65:d3:ce:27:94:9d:0c:93:
         a3:2b:69:3d:95:d2:23:d0:15:cb:5e:94:01:91:5b:e5:e1:29:
         f3:c0:3c:2b:51:f3:d1:8b:00:66:51:46:ca:04:40:7e:a7:e0:
         9f:89:50:f8:c8:89:71:80:91:f9:2a:68:61:11:db:53:53:04:
         b5:62:23:23:df:05:89:3e:5b:f8:03:11:67:44:00:e0:7e:cb:
         b1:36:c5:e7:52:0f:a4:85:5d:3b:98:e6:00:7c:72:6a:cf:89:
         4a:0c:c4:fc:33:ef:a0:d6:a6:5a:cd:2c:cb:a0:c7:20:a6:23:
         44:43:a1:50:8e:d2:86:f3:d6:5f:9b:ae:48:bf:ab:aa:bd:3b:
         be:da:4a:8e:3f:15:09:fb:9c:a1:93:d3:06:1e:ef:74:48:35:
         3e:1b:6d:49:e1:fe:3a:49:11:e0:ed:00:98:2d:28:be:ff:1e:
         29:06:60:74:9f:38:77:10:04:fa:1a:02:bc:31:21:fa:b0:c1:
         f1:59:90:ca:43:a0:67:fa:77:de:09:d9:15:69:88:ca:2e:64:
         ae:9f:f7:8c:74:4a:79:cd:a6:6a:27:66:69:b4:49:62:a1:a0:
         b3:3a:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:23:19 2026 by rpki-client