Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa
File:                     f920aa5a-1977-33fa-9434-afde31a0d21c.roa (raw, json)
Hash identifier:          bmoNzBKo0Dnr8WSWwuGTzLVsCx5A+05e4GQ/oTxDmfc=
Subject key identifier:   D7:A6:93:97:30:F3:C5:41:02:BC:82:72:9D:20:8D:62:55:07:52:BB
Certificate issuer:       /CN=36ee0355-1d23-4ead-8858-b26a81c6add0
Certificate serial:       010D0C9F4328584F00DCCA8E0428E827615106C0
Authority key identifier: A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     4186
IP address blocks:        2602:fbdc:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:ca:8e:04:28:e8:27:61:51:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee0355-1d23-4ead-8858-b26a81c6add0
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=e3069ade-c636-41b6-8f62-3a0461fbe189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:91:be:b1:14:4b:97:eb:29:f6:4e:c0:55:
                    54:a5:f6:f5:f6:0b:02:7b:25:dd:41:56:d6:e0:2c:
                    92:bb:57:17:6f:19:df:ae:48:7d:9c:a9:10:5a:95:
                    fa:f8:75:c5:4a:36:71:b0:93:a7:93:5f:6f:f6:ef:
                    2c:66:c2:76:c9:81:7c:68:53:da:c3:bf:1b:17:95:
                    0f:cc:eb:97:b0:d4:d6:5d:37:34:7c:36:53:55:25:
                    08:e7:00:18:12:80:bc:c6:10:af:9f:c2:4a:b4:aa:
                    ae:77:95:67:93:89:49:da:19:c5:3a:ee:ad:b8:2f:
                    de:34:23:fe:3f:d2:3b:a6:a1:05:bf:51:e1:5d:0a:
                    fc:35:95:e8:cf:4d:05:b5:fc:22:99:8c:da:04:7a:
                    84:25:9a:9f:ed:45:b5:e9:6d:4e:6c:87:37:95:b0:
                    18:e4:a4:01:c6:01:d7:d8:32:5a:96:cb:17:2e:35:
                    11:f7:d4:15:75:37:c2:88:94:09:9f:f1:f7:86:00:
                    92:60:31:b3:2a:cc:e6:62:17:cd:5d:80:8f:ea:ca:
                    e1:39:b7:48:87:8f:57:30:95:1f:da:a8:8f:a3:40:
                    a5:4f:32:bd:40:90:17:22:70:a9:5b:ba:2f:6d:03:
                    87:1d:8c:05:c0:c5:e1:f3:81:39:82:9a:02:05:d8:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:93:97:30:F3:C5:41:02:BC:82:72:9D:20:8D:62:55:07:52:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/f920aa5a-1977-33fa-9434-afde31a0d21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0/36ee0355-1d23-4ead-8858-b26a81c6add0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:BB:BA:23:A0:43:B3:7B:2C:CA:AF:E0:AA:44:10:AB:11:93:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/36ee0355-1d23-4ead-8858-b26a81c6add0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbdc:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:05:38:6b:b1:e7:b9:be:cb:5b:0c:4d:b1:bc:8f:3d:f0:
         aa:f7:c1:db:4c:23:cc:fd:a7:14:9b:20:b1:15:a7:92:82:70:
         32:4f:a6:58:2f:b8:34:09:dc:b3:32:fd:5b:19:81:61:ff:32:
         e8:1a:3e:e2:d6:a4:6e:4c:ad:e9:af:1b:9b:39:a9:01:9a:21:
         01:0b:1e:b3:13:67:50:06:3b:5f:a0:dd:0a:97:a0:36:a4:c9:
         ba:58:c5:c2:2e:0d:48:db:30:a1:e9:58:9d:4c:ed:78:df:bd:
         7b:01:97:39:b2:bc:9c:dc:b8:fe:9d:bb:c6:29:02:35:a9:fb:
         2b:77:f0:78:a0:9b:2a:65:33:54:21:55:7b:43:c3:f7:98:3d:
         ab:45:08:b1:0e:1b:30:b1:34:c9:d3:af:aa:5d:e3:df:42:0d:
         9c:10:46:5d:9c:d7:ff:83:1b:fb:9e:6f:a7:c8:0e:3a:9e:a0:
         9f:a5:e3:1f:fd:d0:12:e8:e7:9a:2b:b5:0c:19:25:85:ee:27:
         cb:ce:41:1e:f1:41:b7:42:7d:49:40:14:c1:2f:ad:5e:23:fd:
         f9:69:90:09:37:db:59:2c:fc:af:a7:82:b4:4b:66:9e:ab:19:
         b5:e3:81:85:92:eb:f0:71:f8:a8:71:4b:55:64:d0:80:a0:a2:
         59:db:70:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8A3MqOBCjoJ2FRBsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzZlZTAzNTUtMWQyMy00ZWFkLTg4NTgtYjI2YTgxYzZh
ZGQwMB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk
ZTMwNjlhZGUtYzYzNi00MWI2LThmNjItM2EwNDYxZmJlMTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0mRvrEUS5frKfZOwFVUpfb19gsCeyXdQVbW
4CySu1cXbxnfrkh9nKkQWpX6+HXFSjZxsJOnk19v9u8sZsJ2yYF8aFPaw78bF5UP
zOuXsNTWXTc0fDZTVSUI5wAYEoC8xhCvn8JKtKqud5Vnk4lJ2hnFOu6tuC/eNCP+
P9I7pqEFv1HhXQr8NZXoz00FtfwimYzaBHqEJZqf7UW16W1ObIc3lbAY5KQBxgHX
2DJalssXLjUR99QVdTfCiJQJn/H3hgCSYDGzKszmYhfNXYCP6srhObdIh49XMJUf
2qiPo0ClTzK9QJAXInCpW7ovbQOHHYwFwMXh84E5gpoCBdg3YQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNemk5cw88VBAryCcp0gjWJVB1K7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNmVl
MDM1NS0xZDIzLTRlYWQtODg1OC1iMjZhODFjNmFkZDAvZjkyMGFhNWEtMTk3Ny0z
M2ZhLTk0MzQtYWZkZTMxYTBkMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzZlZTAzNTUtMWQyMy00ZWFkLTg4
NTgtYjI2YTgxYzZhZGQwLzM2ZWUwMzU1LTFkMjMtNGVhZC04ODU4LWIyNmE4MWM2
YWRkMC5jcmwwHwYDVR0jBBgwFoAUo7u6I6BDs3ssyq/gqkQQqxGTcJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zNmVlMDM1NS0xZDIzLTRlYWQtODg1OC1iMjZh
ODFjNmFkZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL73AAS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG4mBThrsee5vstbDE2xvI898Kr3wdtMI8z9pxSbILEVp5KCcDJP
plgvuDQJ3LMy/VsZgWH/MugaPuLWpG5MremvG5s5qQGaIQELHrMTZ1AGO1+g3QqX
oDakybpYxcIuDUjbMKHpWJ1M7XjfvXsBlzmyvJzcuP6du8YpAjWp+yt38Higmypl
M1QhVXtDw/eYPatFCLEOGzCxNMnTr6pd499CDZwQRl2c1/+DG/ueb6fIDjqeoJ+l
4x/90BLo55ortQwZJYXuJ8vOQR7xQbdCfUlAFMEvrV4j/flpkAk321ks/K+ngrRL
Zp6rGbXjgYWS6/Bx+KhxS1Vk0ICgolnbcHI=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:34:25 2026 by rpki-client