Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
File:                     5587e601-3810-3cad-ad39-d5b549845ba7.roa (raw, json)
Hash identifier:          aoTXsPeanx9AfDMFeVi1NqI5lPjLixj0ZPpKiWSuTvo=
Subject key identifier:   22:E8:28:A2:58:6D:0F:AD:9D:D3:9F:F7:F2:D5:9F:19:38:23:A6:6E
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F00DCCAA670A7044DB504C380
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        2602:fbdc:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:ca:a6:70:a7:04:4d:b5:04:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=ca73cd9a-31b2-4139-b92b-8c4a8dd14aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:32:d6:dc:54:6c:4c:ee:80:5f:2a:09:2a:
                    3b:56:cf:21:58:12:29:e2:ee:b7:2e:92:72:a8:db:
                    ee:73:f1:f3:14:37:cc:ee:54:84:a1:58:fe:c1:63:
                    cd:7e:4e:05:51:a3:db:96:0c:33:64:d2:e5:d8:93:
                    89:ea:14:5b:ba:ed:e9:ef:99:88:0c:ca:f9:a4:25:
                    f8:9a:77:29:ae:61:b2:c7:e6:65:27:3a:ee:b5:91:
                    c5:f0:e2:89:0c:e5:ea:f6:25:9e:50:21:31:63:47:
                    83:79:28:73:b9:ca:b4:e6:ed:80:d8:11:25:6c:1f:
                    07:11:78:bc:c2:a3:e5:fa:65:30:d6:6c:77:c0:e6:
                    6f:99:79:8c:f8:b2:b9:b5:c3:d3:03:b0:89:31:2e:
                    c7:64:06:df:5c:d7:53:62:84:4a:3f:0e:a0:3e:ce:
                    40:b2:49:51:5d:64:39:7e:69:2d:a2:e2:9f:7f:e9:
                    c5:cb:b0:50:b9:5a:04:ab:fb:51:02:e7:f5:e4:72:
                    43:69:7d:05:f5:8e:48:23:9f:09:b6:28:75:b4:41:
                    60:8c:24:19:26:b9:7b:8a:87:b0:ee:c1:98:04:ce:
                    ff:6b:c3:77:f4:bd:f2:98:9e:09:69:b2:84:ce:ed:
                    b9:1e:8d:a6:86:dd:67:38:dd:f6:f8:f0:21:d2:4a:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:28:A2:58:6D:0F:AD:9D:D3:9F:F7:F2:D5:9F:19:38:23:A6:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/5587e601-3810-3cad-ad39-d5b549845ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:c2:79:7f:ff:13:1b:cb:59:2d:1b:46:ef:1b:d5:27:92:d6:
         14:52:48:17:22:a9:b1:e2:e4:9a:38:b5:f7:af:15:7a:07:7e:
         31:99:ce:23:d4:c8:dd:db:6c:45:b3:12:ec:07:14:97:84:32:
         56:53:5d:3c:d5:a1:4f:e2:d1:a5:34:f1:33:39:c7:98:ad:5a:
         85:56:85:28:81:fa:df:07:34:29:a5:81:4a:36:a0:c3:88:76:
         68:27:9f:bc:ca:74:e0:66:70:25:30:c7:4f:c1:a1:ec:67:8f:
         ae:91:bc:78:50:16:d5:9e:28:e9:fe:90:30:69:c4:5e:55:32:
         30:df:41:80:18:ab:d5:38:9f:f9:32:3a:1d:ae:cb:29:b6:8d:
         ba:07:c7:1a:c0:2a:42:3d:57:93:37:ba:c9:89:12:af:13:f2:
         d3:90:79:b3:74:0c:5e:76:cb:cc:4a:6c:fc:57:f2:eb:00:2d:
         27:36:eb:8a:12:87:f1:72:96:55:94:ef:e7:54:88:ce:ba:6d:
         99:66:10:ca:bb:f5:44:c5:ce:57:02:e1:94:6b:84:69:b0:82:
         d8:4d:7d:33:34:6b:88:0c:58:00:bc:01:f9:97:32:59:16:93:
         6f:b1:cb:44:3b:a7:f6:b5:b9:1b:b3:36:64:77:96:bf:ce:93:
         22:6e:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:30 2026 by rpki-client