Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/16011cf3-c848-39ac-82e3-685e1cf16e66.roa
File:                     16011cf3-c848-39ac-82e3-685e1cf16e66.roa (raw, json)
Hash identifier:          YssuGsrMjboMavR4rZN2EmIYN25xOf5HIST1sjeH3kI=
Subject key identifier:   2A:22:43:CB:15:BF:D4:31:E8:6C:FD:AC:DF:0D:40:A6:7B:40:52:84
Certificate issuer:       /CN=ab25395a-ae99-4381-8a03-47162bcebdac
Certificate serial:       010D0C9F4328584F6292BB7B3C809D7992074380
Authority key identifier: E5:36:F4:78:8C:FD:E0:DD:B4:5B:D5:FE:AE:89:21:03:DA:49:F8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/16011cf3-c848-39ac-82e3-685e1cf16e66.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     29785
IP address blocks:        2602:fb5b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/ab25395a-ae99-4381-8a03-47162bcebdac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/ab25395a-ae99-4381-8a03-47162bcebdac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:bb:7b:3c:80:9d:79:92:07:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab25395a-ae99-4381-8a03-47162bcebdac
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=a4f927ec-6446-43e2-a668-eb9f1c52750a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1f:8d:44:55:4a:3a:f7:37:6b:16:fe:0b:8d:
                    3b:88:b7:4e:7d:85:12:7f:03:6a:0c:d5:fe:cc:8d:
                    d8:df:fa:88:7a:32:ac:c2:0c:aa:a3:8e:69:23:b6:
                    ec:c6:94:c6:60:05:a6:b6:6e:1f:71:2f:d7:73:91:
                    d6:50:7c:7b:e6:cb:fa:c7:1b:b4:c2:15:be:41:8b:
                    c8:ce:45:48:88:23:d8:a4:5b:35:77:6c:af:d7:50:
                    04:c4:3c:05:3a:1f:56:f6:95:db:45:d2:aa:38:a8:
                    42:ab:5e:55:fa:66:4e:b9:06:7c:77:11:53:7a:5e:
                    b9:ab:62:12:6c:eb:95:9c:6b:5a:a0:a5:ab:a9:61:
                    62:84:b7:57:2a:75:aa:4b:3b:7b:6d:01:57:16:ca:
                    ac:13:d5:1f:86:a0:27:90:36:c7:0e:bf:ac:54:11:
                    92:55:85:0b:af:e6:e6:97:e5:ec:c1:4f:74:67:74:
                    6c:5b:86:63:a4:7d:c6:55:92:ea:8c:98:5d:3d:2b:
                    62:21:3a:d3:3d:2c:51:02:09:3c:59:94:2c:7f:b0:
                    f9:fa:1c:74:5d:71:0e:a3:01:95:44:e4:75:84:3e:
                    a9:3a:14:cb:b4:6a:99:99:e9:24:22:d2:a2:da:74:
                    3d:09:83:3b:08:36:75:e3:2e:50:36:a4:81:53:51:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:43:CB:15:BF:D4:31:E8:6C:FD:AC:DF:0D:40:A6:7B:40:52:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/16011cf3-c848-39ac-82e3-685e1cf16e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac/ab25395a-ae99-4381-8a03-47162bcebdac.crl

            X509v3 Authority Key Identifier:
                keyid:E5:36:F4:78:8C:FD:E0:DD:B4:5B:D5:FE:AE:89:21:03:DA:49:F8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab25395a-ae99-4381-8a03-47162bcebdac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb5b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:f6:72:14:df:d7:cf:6c:fe:f4:a3:79:cb:2f:04:2c:3a:
         37:77:e1:1d:f7:f5:4f:75:f9:05:69:09:e1:76:13:7e:9d:3f:
         6f:83:ce:bc:39:3c:a7:ec:82:1c:58:b1:26:10:7a:22:22:48:
         02:2c:ca:93:49:59:c1:98:6b:d1:8f:3b:0a:84:66:a8:c0:c8:
         d7:b7:1d:e6:00:17:cc:11:db:b8:19:ea:ad:77:1a:47:fd:bf:
         68:2f:64:fa:09:e5:7d:24:86:04:26:03:0a:e6:38:db:8c:12:
         7a:b2:33:fe:a9:0e:b1:1e:90:43:3e:bf:60:e9:44:33:37:c2:
         40:01:f7:5d:51:4e:d0:de:45:61:6f:64:98:be:fd:98:a2:a6:
         0f:f3:c2:0f:92:fc:d6:29:67:8d:c8:ef:6b:b6:fc:9f:f4:70:
         fb:e6:64:8a:59:d1:15:af:0b:09:e4:f7:65:0b:a2:77:a2:10:
         2a:1d:14:aa:c1:bb:1c:cd:42:03:bd:96:86:32:d9:c6:f9:b9:
         ac:86:8e:97:24:62:4b:36:f9:10:ad:20:88:f7:4d:b0:21:21:
         6d:3f:06:38:18:4e:8c:35:78:ab:b0:d4:de:2b:8e:be:58:61:
         07:80:f0:36:d3:2e:76:8a:fd:6c:fc:cf:e3:11:ed:58:18:77:
         2d:e8:aa:77
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9ikrt7PICdeZIHQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIyNTM5NWEtYWU5OS00MzgxLThhMDMtNDcxNjJiY2Vi
ZGFjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
YTRmOTI3ZWMtNjQ0Ni00M2UyLWE2NjgtZWI5ZjFjNTI3NTBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB+NRFVKOvc3axb+C407iLdOfYUSfwNqDNX+
zI3Y3/qIejKswgyqo45pI7bsxpTGYAWmtm4fcS/Xc5HWUHx75sv6xxu0whW+QYvI
zkVIiCPYpFs1d2yv11AExDwFOh9W9pXbRdKqOKhCq15V+mZOuQZ8dxFTel65q2IS
bOuVnGtaoKWrqWFihLdXKnWqSzt7bQFXFsqsE9UfhqAnkDbHDr+sVBGSVYULr+bm
l+XswU90Z3RsW4ZjpH3GVZLqjJhdPStiITrTPSxRAgk8WZQsf7D5+hx0XXEOowGV
ROR1hD6pOhTLtGqZmekkItKi2nQ9CYM7CDZ14y5QNqSBU1E0jQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCoiQ8sVv9Qx6Gz9rN8NQKZ7QFKEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hYjI1
Mzk1YS1hZTk5LTQzODEtOGEwMy00NzE2MmJjZWJkYWMvMTYwMTFjZjMtYzg0OC0z
OWFjLTgyZTMtNjg1ZTFjZjE2ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYWIyNTM5NWEtYWU5OS00MzgxLThh
MDMtNDcxNjJiY2ViZGFjL2FiMjUzOTVhLWFlOTktNDM4MS04YTAzLTQ3MTYyYmNl
YmRhYy5jcmwwHwYDVR0jBBgwFoAU5Tb0eIz94N20W9X+rokhA9pJ+OowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hYjI1Mzk1YS1hZTk5LTQzODEtOGEwMy00NzE2
MmJjZWJkYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7WwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaD/2chTf189s/vSjecsvBCw6N3fhHff1T3X5BWkJ4XYTfp0/b4PO
vDk8p+yCHFixJhB6IiJIAizKk0lZwZhr0Y87CoRmqMDI17cd5gAXzBHbuBnqrXca
R/2/aC9k+gnlfSSGBCYDCuY424wSerIz/qkOsR6QQz6/YOlEMzfCQAH3XVFO0N5F
YW9kmL79mKKmD/PCD5L81ilnjcjva7b8n/Rw++ZkilnRFa8LCeT3ZQuid6IQKh0U
qsG7HM1CA72WhjLZxvm5rIaOlyRiSzb5EK0giPdNsCEhbT8GOBhOjDV4q7DU3iuO
vlhhB4DwNtMudor9bPzP4xHtWBh3Leiqdw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 10:32:48 2026 by rpki-client