Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa
File:                     94c32bfc-5386-38c8-a11f-4f545260b6de.roa (raw, json)
Hash identifier:          9BxTvd2eadx2JZcTwjmpf9n7yfgh4acWWQB2bf1wFGM=
Subject key identifier:   6A:23:08:85:87:A7:B9:61:69:0E:B5:39:8A:07:EE:CC:C3:A1:47:7A
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F00DCCA5B9924DEB3856A6480
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        2602:fbdc:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:ca:5b:99:24:de:b3:85:6a:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=9358e105-5376-49a3-84ca-e031f900a2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:14:23:a7:b1:8c:41:29:bf:48:11:b1:98:38:
                    ea:b4:93:88:2a:54:68:ac:e3:6c:0b:10:63:4d:39:
                    55:07:56:14:45:c2:82:49:15:c5:1f:d4:34:72:3b:
                    f7:31:e3:ed:1e:7e:5f:a5:8f:d7:f4:47:91:b3:fe:
                    f9:59:fa:0d:9a:5d:cf:ad:85:c8:fa:84:09:c9:45:
                    96:f6:4a:a7:3f:e2:aa:92:df:7a:92:3c:24:58:39:
                    db:66:95:41:c5:b5:64:72:bf:a3:cb:e9:b5:69:03:
                    b1:1f:d6:fa:28:44:44:7d:4e:5a:12:a3:f1:95:07:
                    4a:a5:02:ad:b1:f1:fb:1f:27:3c:bd:8f:cc:6c:03:
                    64:40:98:67:cf:c0:50:f2:7a:42:c1:20:31:0f:50:
                    3b:9b:21:40:85:a3:6c:e9:04:8a:3d:4e:c1:9e:fd:
                    bd:bd:57:f7:08:1a:b9:65:45:22:7c:e2:d5:ce:a2:
                    36:a7:cc:6e:61:74:f5:57:98:0d:d1:15:97:4a:1a:
                    6c:70:6d:db:65:20:bf:8a:40:6a:3f:4e:e9:68:84:
                    0f:9a:ba:e4:27:e2:eb:4b:95:11:d1:35:1b:47:62:
                    c3:da:65:f2:05:de:94:1f:66:83:3b:66:64:23:52:
                    42:35:6e:62:59:1d:73:a7:10:26:fb:f6:43:00:a0:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:08:85:87:A7:B9:61:69:0E:B5:39:8A:07:EE:CC:C3:A1:47:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/94c32bfc-5386-38c8-a11f-4f545260b6de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:65:f0:50:a2:8b:1f:a7:9a:70:ad:01:b5:f0:9d:ed:ec:1b:
         e1:87:77:f6:cc:78:8f:24:45:22:36:03:e6:4e:24:a0:42:d5:
         8d:bf:a8:19:64:6d:12:e1:a3:94:86:4a:bf:ab:a0:31:c7:ed:
         a6:b8:2a:a2:9a:4f:3d:16:83:90:57:83:21:54:11:ef:05:d9:
         83:d5:ab:df:7f:e5:1f:72:2c:46:8c:62:5f:95:01:24:3a:6e:
         6c:8f:69:e1:31:91:92:a5:9f:d3:8f:af:05:c0:e2:e7:9f:f7:
         e4:07:dd:d4:77:13:5b:a3:8e:28:16:2a:39:89:c4:e9:86:e4:
         97:7e:f3:fc:7a:3c:8d:8f:79:27:e9:dc:6c:51:62:60:aa:09:
         9c:82:4f:07:26:c8:9f:20:cc:56:51:5a:5f:27:ea:19:04:ee:
         38:06:5b:9b:cb:b4:97:95:55:b5:b0:00:bb:f8:79:80:82:0a:
         da:48:79:f7:01:ad:84:18:3c:fa:fa:1e:b5:77:00:f5:ee:9b:
         50:4f:8f:48:62:8c:84:f2:80:c6:a4:23:12:1b:4b:fd:79:92:
         42:d4:37:7b:c2:ad:77:db:7c:54:f5:3c:96:b5:fc:9f:5c:26:
         3d:60:01:7b:31:87:11:01:05:87:91:ae:7e:f3:7e:55:43:1e:
         35:f4:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:23 2026 by rpki-client