Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/e954f007-23a3-3ae1-8918-9d69605fab55.roa
File:                     e954f007-23a3-3ae1-8918-9d69605fab55.roa (raw, json)
Hash identifier:          LB3lMhb3lUEFyir2WqugrvqtAa8h7KB/x3zKBOb8lFQ=
Subject key identifier:   52:27:D5:0C:01:71:2F:CB:75:5D:AE:00:A8:A4:9C:3E:3F:04:81:34
Certificate issuer:       /CN=f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf
Certificate serial:       010D0C9F4328584F4C3D5EAD24251155EE3585EC
Authority key identifier: 08:FE:FA:C4:AB:D0:1E:3E:77:7B:32:85:21:8C:23:38:2B:C1:FA:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/e954f007-23a3-3ae1-8918-9d69605fab55.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     16509
IP address blocks:        2602:81d:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:5e:ad:24:25:11:55:ee:35:85:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=27ca9d89-b52b-4c63-a2cf-de7d50e51199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:20:68:a1:62:39:b0:aa:31:ed:17:8e:e1:
                    c5:bc:32:7d:b3:c8:84:7a:14:e7:0f:f6:36:ca:7e:
                    29:51:9e:3c:64:17:2b:00:25:e8:f4:96:de:e3:19:
                    6d:1d:f0:eb:22:57:29:a8:84:31:15:0d:58:b9:15:
                    55:68:b2:47:ca:87:3e:58:b5:36:0b:68:f1:83:2e:
                    d9:37:c0:ad:34:38:5a:b5:4d:79:28:f8:df:5b:da:
                    f1:f4:db:8f:63:df:3c:14:37:64:2f:0a:20:5e:82:
                    10:f7:93:4c:59:32:11:59:b6:41:81:0c:f5:eb:71:
                    69:5f:1f:d0:f3:dc:90:e2:51:93:06:d8:44:d9:52:
                    7a:87:5b:da:5d:b3:1c:45:06:f9:d6:5d:1e:ea:ee:
                    18:28:02:a3:ad:76:e6:30:b7:8d:2b:17:9d:89:03:
                    01:ec:54:d8:3b:c4:3d:3d:3e:b8:22:d2:a8:67:06:
                    85:63:5f:b5:4d:ed:35:f3:c9:8c:7a:e3:76:cd:64:
                    e1:7f:c0:71:e4:04:0f:22:1e:81:33:b2:39:bd:0f:
                    96:48:4c:98:91:43:fc:35:23:47:05:5c:8f:2e:82:
                    5c:cc:98:b9:ef:db:4b:19:8d:31:fa:9c:78:a9:b0:
                    a9:fc:d6:63:3d:d1:a0:9c:95:40:19:ea:67:f4:e6:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:D5:0C:01:71:2F:CB:75:5D:AE:00:A8:A4:9C:3E:3F:04:81:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/e954f007-23a3-3ae1-8918-9d69605fab55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.crl

            X509v3 Authority Key Identifier:
                keyid:08:FE:FA:C4:AB:D0:1E:3E:77:7B:32:85:21:8C:23:38:2B:C1:FA:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f4a5b157-bbe3-4d22-949e-8aa9aa5cdacf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81d:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bc:fa:17:1b:f0:a0:7e:09:56:42:1a:b1:09:75:bb:79:e6:
         10:53:1b:a6:15:f9:31:6b:ae:99:c3:41:6e:b6:d6:54:c0:e0:
         d6:a1:44:60:83:bf:b7:8b:de:8f:da:88:17:0b:52:b7:18:8e:
         41:78:c0:d0:b0:50:26:7e:8f:8c:fc:19:be:7f:c0:7c:13:09:
         aa:64:64:47:8e:99:d2:07:b3:95:9c:71:ab:2d:26:16:a9:bb:
         3b:4f:53:14:25:2c:d5:dc:4d:58:0d:6d:55:dc:09:8e:31:a3:
         ee:39:e0:bf:0a:07:8b:f7:f1:f7:19:4a:ab:96:6c:17:50:e9:
         2e:ee:c5:ed:de:05:93:0c:0b:d8:5b:9e:d2:b0:d4:a8:92:ed:
         26:5f:8c:93:9f:32:b0:58:ef:d7:65:cd:a7:de:78:01:1f:7b:
         3e:4d:8f:0e:c0:87:d6:26:3c:ca:c4:66:88:37:28:e0:c9:cc:
         f5:d8:87:79:b1:20:11:5c:8d:6c:87:2a:a3:6f:86:56:2e:33:
         7f:96:28:96:00:37:dc:f8:d8:f2:a7:b5:4b:da:28:9c:93:be:
         20:22:24:c5:b0:c5:60:5d:e4:90:c5:c8:72:e5:57:d1:82:1d:
         2b:a1:78:86:ef:2d:ea:46:42:da:4c:8c:99:ee:4c:c9:36:95:
         65:b8:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:59:01 2026 by rpki-client