Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15ab27ae-8315-33c8-a6d1-906ad4b8d8b4.roa
File:                     15ab27ae-8315-33c8-a6d1-906ad4b8d8b4.roa (raw, json)
Hash identifier:          GlG7rYOej4W6fI+vPulVbi+70UaY/TPXLUsH6+fly70=
Subject key identifier:   90:13:53:77:6B:7E:AD:8C:EC:04:25:C4:D7:C1:CF:42:D9:F3:19:A5
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F5337E935BF5871B947CA8340
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15ab27ae-8315-33c8-a6d1-906ad4b8d8b4.roa
Signing time:             Mon 28 Sep 2026 13:00:12 +0000
ROA not before:           Mon 28 Sep 2026 13:00:12 +0000
ROA not after:            Sun 27 Dec 2026 14:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:37:e9:35:bf:58:71:b9:47:ca:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 28 13:00:12 2026 GMT
            Not After : Dec 27 14:00:12 2026 GMT
        Subject: CN=29160db3-4ea0-499e-acd4-39afd16048e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:36:40:c7:8f:10:9f:53:56:cc:96:de:f3:
                    93:0e:18:f4:12:55:13:14:26:aa:06:b5:b6:8f:b4:
                    62:c9:ce:ef:69:77:3f:a1:db:b2:b2:02:78:15:0c:
                    55:6d:3f:0e:bb:d4:1a:d8:78:dd:42:9f:50:3a:44:
                    fe:7c:52:b6:ef:e1:4a:9a:85:49:fe:4b:e0:0e:d6:
                    14:c1:60:84:69:d9:42:2a:35:ed:69:85:9d:79:d3:
                    e4:78:62:50:11:3b:a6:26:96:73:a9:a3:6e:bb:63:
                    f0:f4:5e:6a:9a:8d:ed:9e:34:cb:30:85:12:c0:13:
                    6e:37:da:4d:6e:72:44:79:98:da:9d:d0:04:23:0d:
                    d0:46:04:37:a5:3e:44:7c:dd:47:35:5f:33:87:1b:
                    a2:c6:11:12:51:80:d8:21:b2:74:6b:a8:b0:fc:dd:
                    a7:e3:65:38:4f:1d:fb:5d:2d:60:14:41:99:62:1e:
                    1f:d5:51:5a:bc:6c:11:08:d3:49:b4:56:30:95:b7:
                    e3:a9:72:fd:f1:25:8e:8a:6f:5e:9c:a6:c2:4a:02:
                    a7:26:04:d5:0a:4f:b4:f8:32:36:f3:15:a7:ca:83:
                    d4:10:1b:4a:01:59:68:e5:68:7a:fd:ad:95:5f:54:
                    18:3b:de:6b:60:8a:9a:f7:e1:27:2f:b5:e5:0f:d4:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:13:53:77:6B:7E:AD:8C:EC:04:25:C4:D7:C1:CF:42:D9:F3:19:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/15ab27ae-8315-33c8-a6d1-906ad4b8d8b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:72:56:04:9f:81:91:41:ba:f8:c4:eb:da:3d:64:97:9f:ce:
         27:be:cd:22:5b:37:df:e5:e0:68:69:c7:8a:26:2a:b7:ad:5d:
         30:96:73:82:fd:a9:d0:17:fc:83:17:3a:be:5a:d1:a2:58:1a:
         fd:7e:01:86:a6:65:e9:20:2d:7a:50:6d:84:0a:f6:f7:f1:f8:
         94:e3:7d:d2:48:ef:26:fc:2d:5b:0a:77:65:e6:b9:14:82:98:
         5e:d3:16:59:fc:23:6c:f8:54:64:f0:6f:b9:55:82:34:d2:35:
         35:72:6c:26:7e:e0:ce:71:d9:24:39:94:71:37:19:dc:6c:97:
         4c:56:1e:95:5a:e7:0d:19:51:84:76:0e:6b:c7:00:41:d1:b9:
         e0:86:88:de:f8:3f:b6:03:00:0c:ef:23:fc:62:e2:c7:d5:f7:
         b1:69:fe:fa:91:bd:1d:5f:29:49:01:17:7f:55:7a:1f:af:4b:
         f1:a6:20:e5:7d:cc:a3:e5:a1:ca:08:45:12:20:c2:8a:4e:fa:
         10:88:7a:1f:25:fd:4a:7e:e0:b2:b6:53:05:5d:84:b6:2d:cc:
         2a:0f:30:60:e1:9c:92:33:0f:1e:8f:77:2b:f3:b0:d9:e5:1d:
         a7:29:58:ef:5d:7e:68:aa:06:db:91:81:87:8f:ed:9a:fb:c9:
         e6:1c:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:29:57 2026 by rpki-client