Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa
File:                     6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa (raw, json)
Hash identifier:          ndSpDbqasg45QyAV5+PJALg76M2VWRv3m43NVqE9M6c=
Subject key identifier:   8C:27:92:F5:26:67:7E:8B:80:E4:2C:4D:AB:E7:2D:A3:4B:C6:BB:B3
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584FA16332B75C0C404B5BDFFD80
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     3423
IP address blocks:        2602:fbdc:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:32:b7:5c:0c:40:4b:5b:df:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=0254d8ca-224b-4566-98ca-0ecd72471d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:22:35:b1:97:66:9f:4c:a1:c6:d7:7e:07:c9:
                    55:94:4a:19:c5:5a:a4:18:4e:ab:b7:2f:85:83:62:
                    98:54:d8:99:04:d9:07:23:fd:8b:bc:da:3d:d7:35:
                    bc:9b:48:4d:62:ce:99:2b:7d:eb:61:e7:50:13:e3:
                    a0:db:70:7d:85:b7:cc:de:90:7a:5f:73:7a:42:c1:
                    bb:b2:07:bb:52:ad:d7:11:32:95:05:d0:ae:36:5d:
                    0e:9f:b4:4f:43:61:e1:14:2a:cf:65:92:01:00:5f:
                    3e:77:21:bd:11:25:03:36:ce:31:99:da:c3:5f:42:
                    7f:f9:2c:a2:64:35:63:2b:5e:68:3d:4e:d6:81:73:
                    90:06:f0:d2:1c:83:ba:13:53:b4:9a:71:9f:dd:66:
                    ef:d9:c8:69:bb:fa:7e:3b:d8:a0:14:0a:92:75:d8:
                    0e:9c:e0:95:f5:80:d7:b1:ff:05:ca:0d:15:36:38:
                    49:fb:ce:1a:b0:c7:2d:cf:24:95:d1:f7:97:96:c0:
                    60:53:1a:8f:69:c6:c7:29:bd:32:bd:45:b3:38:15:
                    74:a1:06:cc:d7:05:3f:9b:5c:7f:2c:b0:b2:8e:af:
                    28:12:cd:d2:86:4b:73:cf:39:e7:46:ec:77:00:88:
                    f0:b2:08:b9:8b:20:5d:22:ad:db:65:dd:08:4f:c4:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:27:92:F5:26:67:7E:8B:80:E4:2C:4D:AB:E7:2D:A3:4B:C6:BB:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/6bdfd389-73c2-31ab-8e79-f06e5f0b7c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:70:72:b0:5c:58:52:c2:84:00:80:40:d5:1a:50:5e:f1:1d:
         a1:be:45:58:95:92:81:a3:ed:61:6d:ce:c1:93:d7:35:3e:4b:
         42:ec:c6:bb:8e:c2:18:f1:e3:4d:bb:87:db:4e:df:56:64:80:
         90:40:b3:89:37:b4:81:a4:40:eb:48:a8:7f:e4:eb:8c:b6:ae:
         a7:44:0c:2d:37:9f:de:4b:ed:62:34:ab:01:51:a3:8e:84:4a:
         0e:e5:f3:9d:3c:10:a5:37:05:aa:28:f0:0b:b2:cd:86:61:93:
         db:28:06:d8:e7:b6:27:26:8c:98:12:67:cf:63:fa:ae:96:ab:
         5a:f5:26:d8:af:c0:58:ae:13:5b:9b:ec:c7:71:d1:b5:a6:1d:
         ae:9e:40:60:e3:bc:06:cc:6e:95:b8:9e:20:84:1a:e7:4b:90:
         0d:2d:98:ad:79:a2:b7:ae:1b:06:9c:9a:24:fc:88:bf:e2:d9:
         bd:11:3c:b5:37:ef:c3:28:39:b2:f7:a2:5a:de:fa:f6:3a:c3:
         fc:80:3e:7d:ae:04:e7:a9:d2:7f:a7:90:1d:8e:e0:ac:45:75:
         b7:db:2f:25:fa:e7:7f:23:2f:10:a0:7f:6a:71:7e:18:25:f7:
         7c:65:ad:02:58:0e:98:db:88:3b:e9:6a:0d:97:60:42:5c:fe:
         a6:74:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:42:03 2026 by rpki-client