Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
File:                     ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa (raw, json)
Hash identifier:          tM8l9RXqDvkO4Fpxt1BVaK8OqAIxdtB55rUSFsGV0Yc=
Subject key identifier:   53:8C:D3:A5:A4:AB:62:DC:CC:0B:A6:F7:99:6A:E9:AF:66:03:19:6E
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584D07ACF841102BBAEB3CC0A900
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        2602:277:d0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f8:41:10:2b:ba:eb:3c:c0:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=176df54b-b376-4ef3-aab1-4258811101b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:c9:c2:1e:89:f0:91:fe:74:ab:75:5c:40:
                    fe:2b:7d:69:6a:39:0f:07:03:d9:12:17:c4:45:7a:
                    96:50:99:09:a7:e9:9e:a9:24:ea:8a:0e:a9:46:4b:
                    58:de:07:d4:56:09:dd:ef:4d:0b:95:52:ab:f2:90:
                    23:80:bc:04:63:2e:39:c7:e3:30:dd:b0:04:3b:19:
                    d2:d3:53:ad:75:f3:83:59:77:30:3b:28:ab:06:01:
                    f2:e4:05:bf:3f:21:4f:a5:4d:8e:b6:13:eb:9b:0f:
                    f3:47:4c:e8:c6:a6:fb:81:5f:1d:75:6b:64:15:62:
                    00:bf:36:f9:b8:1d:c7:0a:5d:e0:42:6c:23:bc:b8:
                    c0:b2:a8:ee:dd:cb:56:10:2c:0a:f5:0c:92:36:21:
                    11:1f:51:68:eb:df:f1:d0:bc:2e:60:65:16:2b:4b:
                    f1:d3:08:85:c3:3f:c7:84:cc:67:fa:80:cc:ef:9d:
                    40:3a:08:ec:ff:4d:ea:87:cb:3e:0d:cc:e6:e3:18:
                    4a:67:9a:c9:ac:c8:42:07:00:db:aa:0c:b6:b1:f2:
                    c8:82:76:29:20:d7:52:ce:be:9a:f6:e9:ac:d1:34:
                    78:34:98:a7:d4:e6:78:15:ce:e6:9c:01:8f:ac:23:
                    d9:b1:9b:b8:2d:d2:b0:5f:11:68:80:c3:b7:d8:b4:
                    0a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:D3:A5:A4:AB:62:DC:CC:0B:A6:F7:99:6A:E9:AF:66:03:19:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ed0f1ac3-6ddc-354d-a918-c7fe4d167671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:06:a9:9b:8f:0a:13:4e:e9:c5:bf:4b:5a:34:88:41:79:
         93:b7:24:04:36:4e:94:d0:35:e3:d2:20:2d:06:dc:76:ea:41:
         d0:f8:09:ad:d9:ce:03:37:ad:5f:03:aa:1e:57:d9:e2:a7:f4:
         76:83:3a:a8:41:b1:5f:1b:e9:31:1d:37:3b:d8:29:f3:14:aa:
         65:4b:1c:66:cc:7a:0d:88:71:12:72:19:0c:77:e7:42:ed:e3:
         a0:37:fd:45:df:15:bd:b3:1d:e2:d3:7e:79:34:bd:ac:22:3f:
         2b:31:0c:a7:bd:01:74:6e:f3:a6:0a:88:0c:93:15:19:18:e8:
         29:67:94:ce:c8:cb:6b:e1:2d:75:23:61:37:09:b7:b0:32:f8:
         01:1b:fa:f0:7b:80:00:12:dd:dd:a4:62:fd:d4:ed:8b:68:41:
         9a:1e:5f:20:29:c4:b1:d7:06:65:ca:3c:a1:e0:0d:95:62:63:
         1e:10:72:6d:f9:b2:1f:97:f1:59:35:db:59:bb:0a:b7:1d:09:
         f2:26:9c:d5:5f:63:ac:60:73:52:5c:66:af:b2:2c:46:fd:ff:
         f4:2d:9f:bf:33:a3:35:7c:3d:e7:c4:16:b6:4b:d1:b3:58:45:
         03:98:be:20:12:7b:fa:1b:22:d8:0d:c0:34:6b:4b:1a:46:62:
         89:05:9d:d6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrPhBECu66zzAqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxMTAxZjQtYTUyNy00NTliLThjMTYtZDc4YjI2MWU2
ZGUzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
MTc2ZGY1NGItYjM3Ni00ZWYzLWFhYjEtNDI1ODgxMTEwMWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jTJwh6J8JH+dKt1XED+K31pajkPBwPZEhfE
RXqWUJkJp+meqSTqig6pRktY3gfUVgnd700LlVKr8pAjgLwEYy45x+Mw3bAEOxnS
01OtdfODWXcwOyirBgHy5AW/PyFPpU2OthPrmw/zR0zoxqb7gV8ddWtkFWIAvzb5
uB3HCl3gQmwjvLjAsqju3ctWECwK9QySNiERH1Fo69/x0LwuYGUWK0vx0wiFwz/H
hMxn+oDM751AOgjs/03qh8s+Dczm4xhKZ5rJrMhCBwDbqgy2sfLIgnYpINdSzr6a
9ums0TR4NJin1OZ4Fc7mnAGPrCPZsZu4LdKwXxFogMO32LQKTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFOM06Wkq2LczAum95lq6a9mAxluMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjEx
MDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhiMjYxZTZkZTMvZWQwZjFhYzMtNmRkYy0z
NTRkLWE5MTgtYzdmZTRkMTY3NjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxMTAxZjQtYTUyNy00NTliLThj
MTYtZDc4YjI2MWU2ZGUzL2FiMTEwMWY0LWE1MjctNDU5Yi04YzE2LWQ3OGIyNjFl
NmRlMy5jcmwwHwYDVR0jBBgwFoAUmZxX2Q4wTnTaeEpb0pxnHt56bjMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjExMDFmNC1hNTI3LTQ1OWItOGMxNi1kNzhi
MjYxZTZkZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICdwDQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB8VBqmbjwoTTunFv0taNIhBeZO3JAQ2TpTQNePSIC0G3HbqQdD4
Ca3ZzgM3rV8Dqh5X2eKn9HaDOqhBsV8b6TEdNzvYKfMUqmVLHGbMeg2IcRJyGQx3
50Lt46A3/UXfFb2zHeLTfnk0vawiPysxDKe9AXRu86YKiAyTFRkY6ClnlM7Iy2vh
LXUjYTcJt7Ay+AEb+vB7gAAS3d2kYv3U7YtoQZoeXyApxLHXBmXKPKHgDZViYx4Q
cm35sh+X8Vk121m7CrcdCfImnNVfY6xgc1JcZq+yLEb9//Qtn78zozV8PefEFrZL
0bNYRQOYviASe/obItgNwDRrSxpGYokFndY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:15 2026 by rpki-client