Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
File:                     af551ec0-d2d2-365d-ac95-d869b4c35812.roa (raw, json)
Hash identifier:          2DBCjZSbU9bf7sno4szySK+o9Nj8c0KO0g71PpklIvM=
Subject key identifier:   DC:12:3A:CB:5E:B7:F7:B8:6C:B4:42:4C:B4:FE:39:CC:48:A5:CC:74
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F497390094872F43C54378700
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:90:09:48:72:f4:3c:54:37:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5842b440-d69f-45dc-b663-096f74c0240b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:0a:fa:b6:8c:82:b1:93:0a:a5:57:79:86:
                    c4:11:ef:b2:25:1f:f5:c4:1e:a4:5b:f9:f3:37:7f:
                    ba:dc:41:6a:e7:6a:0a:59:04:30:4b:99:98:c8:d8:
                    02:78:79:b2:f0:9e:91:da:44:ab:c3:c0:88:25:9e:
                    5f:18:2e:13:4d:af:e5:1f:28:86:26:f9:d2:04:70:
                    2d:fa:a2:b6:07:d4:6e:6a:27:2a:3d:88:ea:b7:d8:
                    8d:2f:0f:f9:9d:5a:8e:36:6f:89:d5:64:d4:3a:5a:
                    68:f3:25:d3:a1:23:3b:9d:78:88:62:d7:0f:62:34:
                    ff:77:56:31:6d:0d:80:dc:7c:07:87:ae:e7:f8:52:
                    2c:54:4e:04:55:47:16:c2:a5:9b:b9:03:eb:40:52:
                    e6:b1:0d:46:1e:52:cb:44:1a:ff:13:ff:bb:58:bd:
                    27:73:db:8a:47:ec:e5:bc:5d:c7:a3:f1:cd:65:d9:
                    df:5f:92:14:13:4f:9c:54:b9:60:53:bb:3d:07:30:
                    05:6d:f4:6b:13:22:ff:fe:b5:b0:6b:38:51:19:a5:
                    22:78:fa:4c:cf:9b:49:99:d8:ae:71:cf:3c:10:93:
                    29:41:6a:48:4b:a5:a1:c4:b2:51:c9:41:56:fb:61:
                    6b:e7:b1:c7:d9:a0:41:79:7c:7c:6c:9c:77:b2:db:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:12:3A:CB:5E:B7:F7:B8:6C:B4:42:4C:B4:FE:39:CC:48:A5:CC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/af551ec0-d2d2-365d-ac95-d869b4c35812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:9a:ce:53:b7:27:6e:f0:c0:26:60:44:8e:aa:9a:de:52:
         76:4a:09:33:09:ed:53:fe:39:e0:37:0f:ea:7a:ce:c9:70:dd:
         b6:c3:de:23:85:70:10:b3:5f:42:1c:60:2d:38:71:db:dd:13:
         ee:39:d0:50:70:39:ae:b3:a1:e4:df:12:ca:a3:3a:0d:68:7a:
         76:e0:f4:9e:66:8a:ea:9a:b9:88:8e:31:01:94:9f:1d:ee:c6:
         d5:a9:91:04:f9:2d:4e:60:21:15:1b:3e:6f:4a:f8:92:5c:c5:
         53:9e:ce:ac:88:1f:62:e1:15:79:d9:44:11:95:c9:ee:a8:31:
         64:03:cb:7c:b1:fd:56:37:0a:bb:78:c2:64:8c:aa:85:ee:25:
         bc:8b:2b:c5:3f:f5:23:08:7d:85:9f:74:4a:a9:d7:12:e6:ba:
         31:86:9b:19:32:43:8c:f3:82:77:2f:33:5c:b0:42:54:27:1c:
         62:97:30:d1:6c:88:a2:0a:dc:a7:7c:56:af:6d:34:a5:93:e7:
         df:15:c3:c1:a6:50:9b:9f:85:16:8b:6a:aa:e4:9e:7e:fc:e6:
         5f:cf:fc:71:b6:37:0d:22:a0:4f:df:9e:ae:1a:7e:2e:6d:90:
         64:89:b1:f5:5f:90:9a:9f:c0:35:e8:b9:1d:e3:d8:78:50:a6:
         b3:00:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:02:00 2026 by rpki-client