Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa
File:                     8f45e8d1-2145-396a-8fc1-870c6a976845.roa (raw, json)
Hash identifier:          K5uGeiBK++q2l9uzY8oyMCtG0nXDi5z4u0wKoM0HFoY=
Subject key identifier:   7F:DF:66:13:E1:C4:49:60:7E:66:B8:2F:65:7B:86:A4:B1:1A:2D:CA
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584DE1508195F9ECB4B521A64600
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        2602:277:f00::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:81:95:f9:ec:b4:b5:21:a6:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=50e1d929-eedd-4b39-94bf-6e7ba34202ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:1c:43:0f:d3:98:be:dc:14:5c:34:29:67:
                    34:00:e4:5c:67:2a:28:24:21:c7:86:5f:4c:fc:32:
                    e7:4b:40:76:5c:73:0f:aa:66:7b:92:52:e2:c2:dd:
                    d0:bb:bc:1a:9e:a5:c0:a6:e2:91:a0:de:e7:f5:26:
                    90:f0:d4:71:a2:82:48:85:85:4e:1c:40:37:4a:88:
                    cb:a0:bf:5d:f9:46:98:d6:62:f7:1d:d9:18:9d:a5:
                    25:99:b4:59:3d:d9:a8:cd:fc:8e:ab:b6:ad:ef:cf:
                    62:fc:2d:bc:48:8a:a7:25:fc:eb:74:5b:5e:06:7d:
                    75:4d:4d:5f:3c:b2:6f:db:45:4b:f0:8e:08:3f:2d:
                    16:27:95:b0:23:86:40:38:cf:47:2f:21:8b:76:37:
                    78:15:fb:fc:17:eb:47:cf:97:1c:3d:6a:9f:ae:a2:
                    31:0d:52:ca:ef:ed:91:23:9e:09:55:f9:13:72:c2:
                    9c:c8:09:d0:51:e0:33:c7:ac:f9:44:a3:11:66:1c:
                    92:40:6b:b7:0a:f0:72:45:3f:70:a2:fc:e6:60:19:
                    ab:f2:32:8e:dc:f6:e2:47:0c:d8:1d:4a:66:30:60:
                    f6:8d:f9:76:5f:1c:ff:a6:0a:5a:bf:fa:3b:18:b7:
                    a2:ca:e7:ce:06:58:53:9c:76:12:47:81:c4:33:f9:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DF:66:13:E1:C4:49:60:7E:66:B8:2F:65:7B:86:A4:B1:1A:2D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/8f45e8d1-2145-396a-8fc1-870c6a976845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:f00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:72:fb:83:fd:92:ce:9a:bc:2f:f0:87:a0:9b:e1:e9:c6:
         88:ff:34:a5:c8:d3:e7:6b:11:6e:a0:e2:a3:08:63:a1:51:3f:
         35:19:af:e4:4a:f8:c7:54:f1:ca:46:86:63:24:8c:8a:e0:51:
         bc:93:79:c0:86:6c:3e:45:2d:91:4c:bd:26:32:2b:f9:09:b7:
         88:31:a7:91:69:56:16:20:16:b5:11:14:54:5e:d8:f6:1d:11:
         89:75:d2:56:7c:03:fb:72:53:69:a8:68:19:39:c6:23:4b:93:
         1d:0b:d9:8e:f2:0c:d3:21:46:64:01:e8:82:d5:bc:86:e3:10:
         7d:cb:04:ed:cf:f7:c4:42:fc:be:13:3d:63:73:4f:7a:01:8b:
         c7:30:5c:d5:5c:1c:25:ec:02:17:7f:64:4a:3d:ca:f4:1c:82:
         09:e6:8f:62:3b:f2:30:6c:45:f3:ae:40:33:ee:13:72:5c:b7:
         e0:93:27:09:07:58:e4:c2:58:f6:46:84:0b:42:bc:6b:4a:05:
         9f:a7:da:5c:9b:9c:63:35:d5:1a:13:a3:f5:dd:f8:92:42:18:
         ef:36:fe:08:10:73:88:2a:dc:f1:2e:36:15:a9:a7:dd:f5:b5:
         93:31:1d:a9:39:2a:87:7c:88:e8:21:22:6c:9b:11:3a:77:8f:
         2b:c5:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:11:37 2026 by rpki-client