Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/d4150a39-c51d-34cd-a368-39bca0f67fbc.roa
File:                     d4150a39-c51d-34cd-a368-39bca0f67fbc.roa (raw, json)
Hash identifier:          6desinnvL9zktNV7b0012QkW4rBOtmHxPFXhhYl5eVo=
Subject key identifier:   51:91:FB:E2:49:CE:3E:CC:51:55:4F:1E:9C:E3:23:FB:80:16:3F:56
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584EFF777A3B7C002C9C1B623800
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/d4150a39-c51d-34cd-a368-39bca0f67fbc.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     3423
IP address blocks:        2602:fbdc:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7a:3b:7c:00:2c:9c:1b:62:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=b1c0dd9f-0b93-4584-8acd-4c1ad4ecbafb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:44:3a:35:57:aa:0c:46:2d:98:25:7c:52:65:
                    f5:eb:4d:44:0b:98:7d:25:a6:70:ed:fa:59:d5:c2:
                    f6:10:00:3b:83:8a:ba:36:f2:3a:b4:d9:8b:cc:98:
                    9d:8d:c0:45:f8:52:69:75:62:87:fc:06:4d:11:32:
                    8f:4d:87:ef:20:a6:8b:d6:00:ab:1b:ad:09:97:c6:
                    11:e5:b5:bb:8b:eb:8d:7c:76:23:87:63:22:ec:25:
                    7e:40:32:56:97:9d:43:11:22:23:02:76:9e:b5:6a:
                    0d:cc:c6:0f:7b:09:19:f3:2a:4c:d5:65:47:56:0b:
                    ad:74:04:a1:45:c4:8f:b2:80:5d:fd:06:7b:1a:9f:
                    bb:34:d5:1b:c7:55:18:1e:ed:6c:b5:f3:42:17:ef:
                    0f:d8:74:c8:66:45:f3:ed:79:ec:10:a1:e3:d9:c6:
                    b2:bd:d9:d2:d5:cd:fd:6d:93:ad:88:1d:4f:0f:2a:
                    7b:fc:3c:5a:f5:62:41:ed:c3:43:93:fd:66:dd:bc:
                    12:06:3d:34:4a:cc:ee:33:ae:3e:38:b1:1a:bf:04:
                    78:5b:ee:40:24:bf:b6:c0:7b:7f:1e:cb:8b:0a:93:
                    fa:68:21:8c:4b:04:56:0d:16:9f:a3:f9:29:4f:98:
                    09:cd:5f:61:35:4f:8f:19:3f:3b:0a:fd:2b:3a:4b:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:FB:E2:49:CE:3E:CC:51:55:4F:1E:9C:E3:23:FB:80:16:3F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/d4150a39-c51d-34cd-a368-39bca0f67fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:a3:7c:cd:cd:e2:47:96:d6:1d:77:a0:73:42:f8:80:88:
         b4:d0:1e:79:2a:24:77:80:f2:bc:aa:9c:9f:b0:3b:34:fc:f1:
         f6:a4:d2:ce:d8:c8:be:81:de:1e:4a:fe:8b:4a:e8:24:72:e9:
         a5:19:19:e0:5a:4e:04:fd:9b:ea:72:d0:77:6d:52:e7:a7:5e:
         aa:0e:b5:f7:da:a5:ec:ad:21:59:4b:a6:17:a9:e9:77:6e:50:
         68:4a:67:6a:b2:b1:8a:53:9d:0b:07:e3:e3:74:a7:0a:83:af:
         3f:0b:48:eb:10:18:8a:5a:98:24:d4:a9:a8:68:86:ae:05:2e:
         fc:83:78:fa:5c:6f:a0:f1:35:c6:56:5e:e5:a9:19:3e:d9:3a:
         da:e9:52:27:f6:c0:a1:32:11:39:d8:97:3f:bd:25:dc:13:6e:
         6c:23:08:8b:f7:84:bf:b0:46:fa:01:84:aa:50:78:34:8b:cd:
         8d:96:16:0c:f5:b8:63:d7:92:10:9d:3a:4d:26:b0:20:f8:10:
         d6:17:37:cd:99:29:09:b9:78:6b:64:da:97:8a:f1:9a:24:8d:
         b4:46:0c:f6:d0:f4:79:d0:b1:f7:64:13:0c:b2:25:36:f4:bc:
         79:d8:6f:fb:39:af:1b:33:a3:fe:91:d9:49:59:e8:9a:bf:e5:
         b4:8f:47:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7/d3o7fAAsnBtiOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
YjFjMGRkOWYtMGI5My00NTg0LThhY2QtNGMxYWQ0ZWNiYWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Q6NVeqDEYtmCV8UmX1601EC5h9JaZw7fpZ
1cL2EAA7g4q6NvI6tNmLzJidjcBF+FJpdWKH/AZNETKPTYfvIKaL1gCrG60Jl8YR
5bW7i+uNfHYjh2Mi7CV+QDJWl51DESIjAnaetWoNzMYPewkZ8ypM1WVHVgutdASh
RcSPsoBd/QZ7Gp+7NNUbx1UYHu1stfNCF+8P2HTIZkXz7XnsEKHj2cayvdnS1c39
bZOtiB1PDyp7/Dxa9WJB7cNDk/1m3bwSBj00SszuM64+OLEavwR4W+5AJL+2wHt/
HsuLCpP6aCGMSwRWDRafo/kpT5gJzV9hNU+PGT87Cv0rOks5ZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFGR++JJzj7MUVVPHpzjI/uAFj9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvZDQxNTBhMzktYzUxZC0z
NGNkLWEzNjgtMzliY2EwZjY3ZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73ACL
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAArQo3zNzeJHltYdd6BzQviAiLTQHnkqJHeA8ryqnJ+wOzT88fak
0s7YyL6B3h5K/otK6CRy6aUZGeBaTgT9m+py0HdtUuenXqoOtffapeytIVlLphep
6XduUGhKZ2qysYpTnQsH4+N0pwqDrz8LSOsQGIpamCTUqahohq4FLvyDePpcb6Dx
NcZWXuWpGT7ZOtrpUif2wKEyETnYlz+9JdwTbmwjCIv3hL+wRvoBhKpQeDSLzY2W
Fgz1uGPXkhCdOk0msCD4ENYXN82ZKQm5eGtk2peK8ZokjbRGDPbQ9HnQsfdkEwyy
JTb0vHnYb/s5rxszo/6R2UlZ6Jq/5bSPR4E=
-----END CERTIFICATE-----
Generated at Sun Sep 13 13:25:51 2026 by rpki-client