Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
File:                     85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa (raw, json)
Hash identifier:          I4MtMf/zBHPZSwXLCRFLgE16aH1RpK9XwOqIqt2yeRk=
Subject key identifier:   F8:BA:18:28:80:E2:48:6E:BA:25:75:84:76:B0:B2:00:F4:25:AA:01
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584F6292CC9541A3456FD63F84C0
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     16509
IP address blocks:        2602:277:d00::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:cc:95:41:a3:45:6f:d6:3f:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=759cbc9e-8ee8-450c-b86d-4bc285c5b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:68:9c:7a:ac:5e:30:82:09:50:23:f0:86:b8:
                    8b:ae:c0:45:23:83:8b:fe:ff:33:66:e3:d7:17:5e:
                    f9:19:f6:5a:8e:32:89:4c:d6:93:d4:bd:78:2a:60:
                    d5:2e:4b:2f:0f:54:00:13:97:cb:10:56:17:ca:3a:
                    0e:28:d3:1f:73:18:b7:58:1d:dd:78:66:88:bc:82:
                    7b:04:b4:bf:fe:9b:e2:71:87:4d:2e:dd:35:23:0e:
                    45:4f:ad:f6:a1:82:d4:0c:1c:af:31:db:90:41:ba:
                    25:6c:e1:e7:09:a4:ce:d7:51:d5:88:38:c9:23:a2:
                    f7:9c:f6:39:5b:7a:a8:e2:1c:51:1e:b6:da:1b:f2:
                    6a:3e:13:bc:cb:c7:a4:83:2e:8e:0d:a6:46:25:bf:
                    20:2f:a3:84:cc:15:8a:f3:ca:3e:90:14:cd:34:2f:
                    7e:d1:ae:30:72:b1:dc:0d:82:de:2d:3e:4f:a6:ef:
                    59:24:0f:32:42:b6:ba:24:81:ba:37:4b:00:54:a7:
                    dd:a9:f0:9b:1a:bf:cb:e6:2a:f9:72:3f:8e:6b:34:
                    f8:b5:a7:aa:6e:fd:61:0e:35:a9:14:84:5e:80:56:
                    6a:67:55:b9:61:eb:46:77:e1:58:b3:53:8b:d0:03:
                    ea:99:e9:a9:d9:3b:3a:1c:5d:c0:bd:a1:54:16:a3:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:18:28:80:E2:48:6E:BA:25:75:84:76:B0:B2:00:F4:25:AA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/85f2ee15-c93c-36b9-b51d-dba0e55b61b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:75:ca:7d:95:ac:45:30:82:64:8d:af:6f:1e:b4:07:c7:
         35:54:ea:81:d6:90:09:f9:bc:b2:8b:87:a0:a7:13:4b:ab:6f:
         cd:b0:ab:02:7c:19:24:9a:c6:07:8d:52:c1:b2:e7:ed:b4:cf:
         0a:54:a6:b4:8e:1e:7b:ef:11:0a:81:f3:9b:c8:c1:7a:04:c1:
         21:5e:c1:be:52:d4:c3:c5:16:b2:a9:0b:d8:83:b1:4f:c7:1d:
         5d:c6:54:43:a6:51:dd:df:ee:6a:a4:84:82:72:99:1c:67:69:
         4b:55:f9:c3:09:51:ff:7b:38:c5:c6:db:24:be:20:2b:f6:d0:
         9e:c0:12:40:f7:b3:3b:5b:a1:de:15:55:18:ab:4d:ec:d4:39:
         bd:18:96:ac:ed:28:46:98:4d:9d:9c:ba:d9:72:f8:e2:ca:b7:
         47:77:4e:7c:0a:3b:fe:e3:d4:44:fd:f4:80:3a:d4:e7:11:a2:
         2f:dc:4b:a5:e6:2f:8f:e8:cd:1e:bd:6b:09:38:1f:e8:5b:44:
         72:ee:f3:7d:39:1f:25:fc:b0:db:88:66:b1:25:7a:ea:b9:2d:
         e3:9f:ff:4c:ba:68:4b:f5:65:2c:44:cf:10:02:70:71:0e:78:
         8b:11:38:33:8a:f8:e3:5b:1f:7e:13:c1:3f:04:67:24:b6:ae:
         a3:d9:dd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:11:41 2026 by rpki-client