Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa
File:                     4c33b29b-7d74-35de-896d-e8663c41392f.roa (raw, json)
Hash identifier:          lowtLg/DhJXX9y9APtK50oe5ljD3CwAIZLHd5Y8sjKQ=
Subject key identifier:   D6:50:BF:3A:36:DD:42:5F:E2:C9:3F:86:29:47:84:42:AA:FD:38:85
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584EF7176AF157AA8143D6B51F40
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2602:277:d02::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6a:f1:57:aa:81:43:d6:b5:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6db46180-0f09-4e17-92d9-fd950f7127cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fe:20:1a:c5:25:f2:20:d7:77:2e:be:6e:b9:
                    13:0b:84:f9:02:2f:77:ac:b5:14:fb:12:8c:c9:68:
                    e8:eb:32:5c:b7:db:74:0e:33:be:52:55:61:7f:47:
                    cd:6b:df:c2:17:b1:1c:1b:34:85:7c:8f:a1:aa:c9:
                    90:ce:d1:f6:a7:9c:57:d2:b7:0b:8c:ed:ce:f7:7a:
                    12:e6:86:2d:b0:f1:e0:d3:69:3b:95:83:10:70:95:
                    04:8e:50:96:3c:a0:1a:5d:c6:92:2d:ed:c8:f1:c1:
                    64:84:cc:e1:98:fd:7b:4a:ae:09:e5:cd:0d:b8:bd:
                    fb:00:71:fd:24:73:9c:35:4a:4b:ef:6d:8c:92:17:
                    39:e9:80:40:60:8a:12:2d:83:55:2b:43:e1:fb:37:
                    3c:22:92:9e:ab:8c:27:45:3d:e8:92:01:8f:13:7a:
                    72:a3:4f:c4:c4:16:fa:89:3e:73:f8:56:91:54:ac:
                    b9:f8:ec:a1:c9:a0:94:2c:58:ef:f4:70:23:d3:04:
                    6c:76:1b:34:c9:95:60:40:a9:d4:1e:93:54:7f:7d:
                    a4:a5:27:4c:a1:9f:76:e7:b1:b9:51:5e:55:40:55:
                    54:9b:e0:1c:f5:ca:67:03:40:b6:22:3f:bd:91:7c:
                    21:c9:70:1a:97:e8:6a:b1:61:3e:88:d7:a6:f0:b4:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:50:BF:3A:36:DD:42:5F:E2:C9:3F:86:29:47:84:42:AA:FD:38:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/4c33b29b-7d74-35de-896d-e8663c41392f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:15:ca:ae:db:cf:41:1c:ea:c2:7d:fc:37:46:16:a0:7a:
         48:f7:06:13:33:2a:5d:05:1e:d1:6b:ee:9c:6f:6d:ee:e1:80:
         0f:c2:b2:15:c3:99:18:d0:25:71:9c:f3:52:e2:92:40:04:44:
         4c:01:56:9a:60:b1:a4:db:0a:e2:10:63:38:f6:a2:13:3b:56:
         9d:e6:24:e9:e3:e0:4f:a5:d4:fc:88:d1:42:85:e6:e0:de:15:
         43:1b:99:c4:9b:2a:d7:12:97:84:41:14:29:4d:c1:ff:c0:ba:
         78:6a:28:ea:01:38:c1:67:22:bc:3c:c9:68:1c:14:49:15:9a:
         36:bc:78:b6:66:20:92:4e:93:b0:01:a0:3f:8c:36:42:69:21:
         38:08:f3:9e:e8:a7:c4:ef:2e:1a:48:54:21:b2:ae:13:6a:48:
         c4:f6:55:d7:e9:7b:fb:da:d3:f1:09:fe:91:cb:d5:8b:f8:91:
         04:b8:f6:9e:87:99:80:46:02:c2:22:67:43:af:ec:fd:de:50:
         ab:ac:2d:6b:64:3f:7d:1f:24:19:e3:cc:af:96:36:15:cc:3c:
         c2:3b:28:b2:fb:81:77:a9:41:32:c5:83:c8:bc:77:1a:c8:e6:
         f9:9c:a7:1a:0a:c4:1f:ff:51:85:2d:80:84:da:97:a2:d7:f2:
         af:6d:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:42:19 2026 by rpki-client