Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa
File:                     19b54d00-8c77-38da-95d8-df833940e979.roa (raw, json)
Hash identifier:          JLXdY0mEIxZ71ns+2SsDiUvQiwjf1R1tmuUX6f9/i3s=
Subject key identifier:   E5:CC:B3:A3:CB:5A:4F:9B:B4:56:1A:3C:ED:79:FD:CC:85:A5:46:2D
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F024225A7E8FE1AB5B2EC5C80
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     4186
IP address blocks:        2602:fbdc::/40 maxlen: 40
                          2602:fbdc:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:25:a7:e8:fe:1a:b5:b2:ec:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=a6285db9-f76f-4625-85e6-48965216ffba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:29:a8:30:fd:3b:1f:ad:62:14:cf:db:0c:
                    83:a8:62:a0:6a:43:99:67:6b:dc:be:46:f2:ab:ef:
                    b1:e2:bf:71:73:d3:d6:57:75:6c:5a:5d:59:70:60:
                    42:a5:51:4d:3a:b0:29:ad:b6:02:cb:b3:24:61:c0:
                    6f:2a:3d:f3:56:c3:df:c3:3f:9e:85:f3:6c:56:f3:
                    10:41:f0:3d:bc:37:60:c6:77:c4:4c:73:10:f6:46:
                    55:15:c9:5d:17:56:8d:ef:f5:21:a9:9e:84:71:a0:
                    7b:b0:a3:a5:a0:a6:23:e9:bd:bc:c5:d2:3d:cf:0d:
                    8d:0b:1c:06:b9:15:12:93:25:a8:45:99:f3:ad:60:
                    8e:c2:a2:d3:38:b0:fc:7e:60:b1:65:23:a7:77:50:
                    38:b8:d8:e7:36:34:e2:bf:d7:a1:38:69:1e:3e:c5:
                    b9:3f:ed:2e:44:62:03:60:77:d2:ad:df:7e:d9:64:
                    51:4c:6f:8a:8c:a3:d4:ee:3b:d1:a9:9a:54:ef:cd:
                    0e:7c:19:9d:a0:69:38:f4:8a:4a:52:26:34:d8:08:
                    59:22:f3:4b:fd:86:c1:42:3c:91:96:0c:2e:00:d5:
                    4d:1e:d5:b4:c0:6e:fd:2e:14:0e:09:68:7e:62:ac:
                    bc:65:63:c0:ae:80:4c:3e:ba:48:87:d0:40:11:20:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CC:B3:A3:CB:5A:4F:9B:B4:56:1A:3C:ED:79:FD:CC:85:A5:46:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/19b54d00-8c77-38da-95d8-df833940e979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:1a:de:88:b5:f2:99:c8:4d:bd:11:4b:73:7b:64:ae:c0:0e:
         b2:6c:2e:f6:45:a6:bf:6f:70:e4:f7:22:d5:9e:c3:72:4b:b0:
         64:7f:25:d0:47:72:5e:9b:95:d3:63:8f:8a:ff:b7:fd:84:6a:
         f4:1b:93:49:b3:52:3e:9b:3c:6a:24:bf:0f:36:7e:60:cb:5b:
         53:10:00:ee:49:89:aa:7f:19:70:4b:8c:05:8d:19:07:a1:9f:
         6b:67:ed:98:c2:65:74:47:79:2d:2b:9b:53:69:e5:1b:26:8c:
         a6:85:0b:55:46:6e:0c:f4:6a:8f:73:f7:35:62:f8:6a:18:13:
         39:ab:17:83:13:6b:9d:50:d6:58:ca:9e:e3:e4:c5:7e:9a:e1:
         2b:16:08:04:b9:4b:5f:6a:94:51:90:31:32:13:f5:b1:7f:d4:
         5b:00:db:d2:e0:c3:e4:9a:74:c4:af:9b:ac:29:3a:b6:b2:ab:
         4d:d7:90:51:4a:61:51:81:e0:d2:98:6d:ae:fd:1c:b0:eb:ca:
         b5:52:e5:ad:c4:6a:a3:c7:2e:0c:ac:a0:83:f1:5d:99:34:a4:
         68:a1:6f:2d:5f:0c:54:e4:ee:4a:80:ec:16:b1:42:73:ff:9c:
         b1:9f:2c:52:da:42:f1:1f:a2:f2:bd:e0:b9:ba:ab:23:09:47:
         b5:74:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:27 2026 by rpki-client