Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa
File:                     3abdc333-7267-3354-bea0-b6096260f71c.roa (raw, json)
Hash identifier:          fOiZYzfAxtO5oldXXW3oKpCLTQXqWQDdSoq7Wrjw65o=
Subject key identifier:   B9:28:A1:2B:10:B0:80:7D:2C:5A:BE:83:09:E4:CB:5E:6E:4E:E7:D5
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584FA42DD6A0F996B3F6ED064A80
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     4473
IP address blocks:        2602:fbdc::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:d6:a0:f9:96:b3:f6:ed:06:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=1ead77c4-43e2-4211-97f3-4e21ce4bea64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:34:59:42:0b:a9:93:68:69:bb:33:77:d3:
                    d4:f3:72:e5:21:18:ee:8f:84:d4:99:d1:fd:0c:c9:
                    09:8c:ef:d4:2a:76:5b:b7:74:8a:0a:f1:ae:92:f2:
                    41:ee:5a:88:39:5c:35:42:9c:87:ef:9e:34:4e:93:
                    3d:01:88:5c:d2:ae:6e:ae:ed:84:c8:86:fe:ac:2b:
                    70:6e:ed:84:b8:ea:39:64:6f:40:7a:26:45:6a:87:
                    39:3e:e7:1f:a7:e5:05:e9:09:d4:05:8d:34:71:f6:
                    5f:06:1e:cf:59:e0:33:bb:70:c5:a8:2f:5d:eb:8d:
                    e4:4a:d9:f4:3c:b2:18:23:5c:57:f4:d0:5a:b1:b7:
                    43:ef:23:90:63:08:85:20:d0:e1:ab:e5:be:ff:5d:
                    8c:fe:a9:cc:40:93:ae:00:a8:50:c6:43:86:8d:0e:
                    7a:82:95:96:21:bf:28:6d:27:53:e2:e5:0a:6b:ac:
                    ae:b2:64:c5:e9:ae:8b:cc:f9:59:92:b4:d6:70:53:
                    6f:2a:15:20:00:83:2b:ab:57:aa:af:a9:ff:71:24:
                    86:4d:71:60:9d:51:90:7d:28:89:86:5d:cb:d6:3e:
                    29:c1:85:07:ec:9a:69:27:1c:f6:8a:bd:a9:7e:1d:
                    7e:0f:6c:98:b5:16:49:59:51:f1:15:83:b2:39:5e:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:A1:2B:10:B0:80:7D:2C:5A:BE:83:09:E4:CB:5E:6E:4E:E7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/3abdc333-7267-3354-bea0-b6096260f71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:73:89:2a:33:7a:e0:0b:d1:11:82:d0:d2:b9:0d:4a:0b:
         54:f6:57:a6:a2:98:5c:fe:a0:1d:84:2f:73:1a:04:d5:6b:de:
         bc:03:a7:86:fd:b6:d6:ab:5b:d6:4f:58:1f:e5:7e:6b:77:10:
         85:44:35:d8:d0:41:35:20:70:48:e8:95:62:1e:0a:9f:35:64:
         1b:9a:36:cd:54:63:2f:68:63:23:39:04:51:49:91:a9:9b:cd:
         84:44:7d:11:3b:5b:a7:11:ec:71:c8:7a:0a:23:3f:35:c2:06:
         28:30:f4:e1:6c:61:54:e5:e7:72:63:bf:16:b4:5a:07:3f:44:
         31:c8:fd:01:cf:ea:53:ee:3f:92:14:91:17:26:fb:62:67:d5:
         d2:0f:86:bb:0d:92:13:41:e7:11:3d:76:4c:ac:d2:08:3c:2c:
         68:7a:38:98:c9:e6:4e:39:88:ea:bc:ea:17:d8:b1:a7:e1:27:
         6b:5a:7b:cc:ae:08:e9:c3:9b:b9:2b:c0:af:48:fb:53:9e:22:
         2e:1a:7b:9c:58:24:d4:72:1b:ce:51:d5:af:da:a9:ba:46:74:
         03:e6:e1:d2:7d:8a:83:0a:5c:d7:4b:a4:c7:38:14:1f:02:c9:
         a0:71:4d:7a:b9:8f:96:7a:e4:b8:d1:52:9d:4b:da:33:6d:aa:
         65:af:a1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:19:42 2026 by rpki-client