Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa
File:                     02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa (raw, json)
Hash identifier:          ZLNP42KeSJidBBDuqyE87fpDqSkmEzgg/ZPl7hKZvc8=
Subject key identifier:   10:6B:F2:87:C0:C8:CD:BD:9D:DE:43:3E:4E:FD:65:E9:A9:0C:56:87
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584B1806E2326B610AC44186FF00
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     31898
IP address blocks:        2602:277:7c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e2:32:6b:61:0a:c4:41:86:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=50b6acb7-39aa-44c4-9d42-d0bdb7ef3270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:3c:cb:12:f3:4e:35:ce:f5:f8:a3:61:cd:
                    6e:26:7b:3f:52:1e:4c:21:88:62:b1:87:b3:94:8b:
                    02:5b:2b:51:b1:37:b1:0c:fa:64:23:5d:51:f7:fd:
                    fc:d2:b9:46:9f:18:e0:f9:27:a8:a2:ef:f0:30:5a:
                    12:8f:e8:c0:5d:f0:89:27:ec:7e:05:ee:03:fc:14:
                    70:0e:27:37:97:a2:6e:b9:1a:63:59:51:4c:9a:c2:
                    5a:68:d8:55:1f:06:a1:a8:08:19:ff:10:67:83:3f:
                    58:19:d1:3f:ac:ec:56:a4:de:f6:54:61:23:eb:bf:
                    08:09:22:08:d0:73:84:3c:85:51:81:29:29:47:3c:
                    70:fe:ed:e2:b7:23:aa:25:f8:67:76:a3:1c:b0:6e:
                    21:25:45:76:1f:f6:0b:51:04:52:18:03:a5:98:4f:
                    8c:1b:87:c5:8c:ee:5b:9e:f1:9a:48:d4:32:16:3d:
                    19:40:07:6b:17:b0:06:91:d0:63:bb:04:dc:af:b4:
                    73:ea:93:b7:56:97:0b:87:76:3f:c0:36:41:8a:8e:
                    82:67:88:09:d2:d2:9c:b2:af:62:28:10:22:1f:5d:
                    7f:2c:e9:dd:c7:40:d1:d1:18:f2:a9:d8:75:76:53:
                    1d:46:39:ff:93:2f:b5:14:c1:05:61:f2:f7:ee:a6:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6B:F2:87:C0:C8:CD:BD:9D:DE:43:3E:4E:FD:65:E9:A9:0C:56:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/02a8f3a8-f97b-332c-a828-b53d2e18f8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:7c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:cc:5a:ab:96:6f:a5:00:a6:f9:e9:ea:a3:e0:dc:2f:a9:
         0e:c9:94:45:8d:81:4a:a1:8a:d6:3e:fa:87:51:7b:7a:27:25:
         13:7c:4e:41:6b:3a:8b:65:bd:d6:59:32:3b:6e:78:84:38:9f:
         d7:79:f8:0d:4c:53:bd:02:6b:1f:3e:9a:c3:fe:61:bd:f3:2f:
         3b:75:53:59:0f:e5:47:f1:e3:10:36:28:50:13:0e:48:c2:e9:
         f2:1b:db:a6:a7:fe:91:3e:5c:88:c1:93:f1:3e:98:ad:b5:10:
         56:93:03:04:1e:31:0d:46:a0:e9:f1:1a:28:bf:88:67:94:aa:
         e0:a2:91:6d:dd:27:ad:9f:e2:8a:4e:f8:e4:dc:77:c6:21:fd:
         37:7c:5f:d8:2f:95:4e:f0:fd:7d:e5:bd:25:d3:2e:89:e5:14:
         2e:8a:e4:37:f6:6f:31:eb:56:16:26:30:22:4c:f8:89:80:ee:
         72:b1:0f:ba:81:ef:96:fb:7f:40:fe:54:c9:08:a6:25:81:ec:
         82:4b:02:5e:58:fb:df:83:b2:3e:56:e5:77:2e:42:32:97:a3:
         4a:33:98:8b:9a:5f:c4:6b:70:86:f5:d7:a8:a3:75:bd:a8:54:
         85:17:4c:28:e6:ae:c9:c2:70:c6:85:ca:42:ce:c0:38:e7:a3:
         d1:a8:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:35:54 2025 by rpki-client