Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa
File:                     7ed59551-5e97-3468-99ab-9d77cf890684.roa (raw, json)
Hash identifier:          VuE1Ri1jpE1ANGdDbmJIsQAATf3g5FqT47qBwF/zcDo=
Subject key identifier:   1C:3F:7B:BC:E3:D8:AF:4F:4E:F6:12:9B:15:EF:CA:2C:2B:81:3E:72
Certificate issuer:       /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial:       010D0C9F4328584F498BC29BBCBF54D8B40037B0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16740
IP address blocks:        2602:f5c1:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:c2:9b:bc:bf:54:d8:b4:00:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed60ee97-2742-4867-9650-f19fa29d720c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:48:fb:41:ab:03:d4:14:7d:61:19:e7:b0:
                    23:73:7f:2e:30:75:b5:e5:e8:78:d6:70:3c:6e:46:
                    ae:5f:c6:5e:15:9f:d6:ac:cf:58:b2:40:1d:93:07:
                    db:cf:6a:82:49:bd:3c:c0:00:7b:5a:fc:4f:82:a1:
                    b9:f9:e5:eb:3b:4e:cf:36:c4:97:03:09:7a:c4:03:
                    9c:23:1e:a3:f7:7b:07:fa:63:89:08:4f:86:9b:c6:
                    9b:45:df:a6:2c:7d:33:cc:f6:a5:b6:9d:c8:1c:13:
                    d3:01:9c:76:90:7e:20:a6:8c:ac:0d:9c:63:f0:f4:
                    cb:fe:dc:d8:3e:46:83:f0:df:7d:61:90:55:a5:6d:
                    55:d9:be:70:75:0a:b4:2b:2c:d9:c0:a3:0e:7d:09:
                    db:0d:dd:3d:f6:bf:be:02:8b:85:18:7e:1b:ae:06:
                    07:7f:d2:56:04:a7:83:ff:14:e8:fc:2d:2d:6c:d8:
                    6a:20:b9:23:5b:10:64:72:fb:4b:e9:e1:9c:69:9d:
                    23:cb:c7:d2:3d:bd:1b:a2:7a:23:6b:58:3c:63:bf:
                    43:f8:12:b9:7c:bd:29:8e:f7:b5:d1:c0:25:32:c0:
                    f9:3f:b5:bc:59:7f:90:71:93:e8:ea:7e:cc:ae:af:
                    63:f8:17:1f:e5:cf:10:0b:29:ae:c1:4f:df:83:e2:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:7B:BC:E3:D8:AF:4F:4E:F6:12:9B:15:EF:CA:2C:2B:81:3E:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/7ed59551-5e97-3468-99ab-9d77cf890684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl

            X509v3 Authority Key Identifier:
                keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5c1:33::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e4:c2:3b:24:32:b5:d9:ec:d1:ab:86:80:8f:77:16:14:74:
         25:e8:d1:1d:1b:78:68:cc:28:93:4a:c7:90:e4:c6:41:1e:a5:
         f5:aa:58:40:81:1f:ef:f8:8a:64:d9:64:c7:44:a5:41:5e:74:
         55:cb:33:fb:71:7d:1a:57:76:03:65:63:10:86:61:a0:3f:1e:
         4f:39:76:08:72:6f:bf:53:fd:70:1c:f5:4f:a7:65:96:94:5c:
         97:5c:2c:18:47:86:a2:0e:48:b6:df:57:bf:c1:e2:1e:f3:d2:
         de:30:29:ef:f4:64:75:b8:2a:63:93:f6:e8:fc:36:15:c5:6d:
         d5:48:c6:3f:07:c3:b1:02:10:55:48:2c:91:f1:00:2f:a5:04:
         30:ac:dd:a9:cd:d6:48:f9:f6:a6:90:7e:92:70:a5:f6:39:12:
         49:3f:a2:29:a3:82:23:a5:5b:d9:ca:a0:50:6a:dd:b4:88:5c:
         20:b4:a7:e8:32:18:68:ee:49:1a:5f:07:e9:14:2c:2d:59:ab:
         bc:5f:6b:4f:93:14:72:3a:7e:9b:97:01:2d:81:34:a9:ee:f7:
         83:b1:81:5f:87:ed:99:d7:f0:ac:c8:b6:0a:ea:b2:44:f7:e9:
         34:48:1b:c1:af:9e:9e:99:2b:c9:b9:c7:f2:08:f4:64:72:96:
         15:d2:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:12:20 2026 by rpki-client