Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa
File:                     240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa (raw, json)
Hash identifier:          zZLCnb9IIgER/iZTSCYSzFBRIZb2lLXpyGuRTmRrW1Q=
Subject key identifier:   4D:BB:5F:DC:5D:AF:D4:96:20:D3:6D:8B:B6:3D:B8:87:DE:09:A7:BD
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F00DCCA680F073CA919076EA0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        2602:fbdc:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:ca:68:0f:07:3c:a9:19:07:6e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=c93022a8-f319-48ca-86a1-78eb61e3c327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:4c:0c:3b:95:b5:f8:08:87:9c:a8:5f:1a:
                    03:c5:c5:88:f5:17:3f:d6:ff:c7:f0:c9:91:0d:e1:
                    37:65:dd:be:c9:af:b6:df:c9:bd:dd:65:1f:ef:7a:
                    a1:dc:8b:0e:88:51:ca:c4:e4:5a:92:0e:de:bc:be:
                    c3:06:9e:c0:bd:ca:72:fd:d6:6f:b4:85:5c:4f:78:
                    7a:fa:0d:36:2e:6d:b9:ac:dc:33:1e:29:e7:7c:20:
                    48:96:9e:aa:c6:53:49:95:ca:64:9c:56:19:11:a6:
                    49:0e:81:20:5a:35:0d:01:f7:12:38:bd:b1:d2:d9:
                    42:25:22:9f:f9:f1:48:f2:9a:09:69:bc:fb:0c:d5:
                    38:6e:7d:ac:cc:03:8e:2b:25:27:48:de:b8:8e:f6:
                    70:8b:9c:64:b2:5b:e8:75:dd:c8:1a:67:e3:04:80:
                    b4:e9:3f:cd:a8:bb:54:52:3a:1f:cc:04:c7:79:c1:
                    47:20:6b:79:cd:0e:10:be:af:a5:9a:9e:13:5b:eb:
                    eb:57:7d:f8:46:ba:10:05:05:b0:71:89:d0:6d:4c:
                    d1:fc:ca:c6:e7:0d:b6:41:66:d0:00:89:b3:64:9b:
                    82:1d:8f:78:38:02:2e:a9:2e:f9:07:bc:72:43:fa:
                    2c:cc:ab:8f:79:93:1c:29:a4:2c:6a:27:4b:36:f9:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:5F:DC:5D:AF:D4:96:20:D3:6D:8B:B6:3D:B8:87:DE:09:A7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/240e11cb-53e0-3e1f-9781-a822e0d35c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:a1:fb:20:64:37:37:28:83:db:1d:02:0e:bb:32:78:da:
         45:c4:6c:7a:b2:25:38:14:bb:37:ca:dd:0b:26:fe:f6:19:3d:
         53:b0:79:d9:cf:72:84:6c:90:31:f5:42:b1:c7:4e:0e:c2:39:
         ca:5f:b0:b7:6f:6b:73:2f:1f:29:6e:fa:03:7c:a7:5e:b3:58:
         47:43:2b:1d:97:d4:0f:ab:8c:22:e2:aa:08:39:d4:e9:57:3a:
         2c:81:20:a0:3f:ca:11:02:4e:21:9a:16:db:7a:5a:a4:4b:a9:
         16:5c:fc:6d:86:14:74:ea:20:14:50:2d:38:c4:cc:a0:16:7d:
         27:72:d6:8e:4e:d7:ee:3d:16:c8:de:52:e5:da:3a:aa:93:93:
         77:7f:0e:98:60:a0:31:1a:28:5f:56:21:82:c1:08:06:46:39:
         fd:c9:ad:66:97:57:94:a7:cb:3c:d5:c4:ce:35:6d:ce:da:9c:
         55:e5:f7:63:39:5b:ea:cd:15:cb:7f:a2:f4:ce:38:e1:a5:89:
         e5:c5:a4:52:b2:27:1a:5b:42:54:68:fe:1c:bf:8a:72:ff:07:
         e5:6f:3e:b2:a0:ec:6e:67:57:27:50:6f:0d:af:9d:c8:31:48:
         08:31:bc:e8:01:cf:97:2d:02:c9:cb:bb:49:75:69:a1:23:2d:
         6b:03:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:33:56 2026 by rpki-client