Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
File:                     43a59a46-c115-3889-8c22-deae7fcbc88e.roa (raw, json)
Hash identifier:          3QQY7oxQlsTzE4r3kMKBvjumxqVF2kN8F7IWtAJ17zc=
Subject key identifier:   B5:75:77:12:96:F3:4D:79:95:93:AE:8E:06:8B:34:09:31:C0:5A:AB
Certificate issuer:       /CN=ab1101f4-a527-459b-8c16-d78b261e6de3
Certificate serial:       010D0C9F4328584EF7176AE4E2CD87685C50F000
Authority key identifier: 99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2602:277:d02::/47 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:6a:e4:e2:cd:87:68:5c:50:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1101f4-a527-459b-8c16-d78b261e6de3
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6286659d-a7b6-4658-8647-97175397a3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:57:ac:9c:69:f0:ef:8a:53:a6:96:73:d2:
                    da:24:b0:4e:16:81:8b:eb:7f:d3:f4:a0:fe:7e:29:
                    b6:8f:9d:76:fc:cc:1e:ca:ed:62:c4:90:bf:2c:1d:
                    1c:9e:ae:6a:f8:05:68:bd:a5:c5:a2:c3:f6:46:12:
                    07:f6:15:45:c5:c7:25:18:40:51:23:c3:01:53:6c:
                    99:be:47:c2:b2:f9:fe:13:77:5b:2f:b9:1c:5d:45:
                    35:f0:44:24:9d:60:4e:f2:7b:39:b4:dc:0a:fa:38:
                    2a:98:7f:2e:7b:73:f3:d0:f9:07:3a:30:65:ec:ff:
                    f8:96:f8:9a:20:be:8b:28:e8:59:d6:c3:76:5e:07:
                    47:1b:09:e2:2b:68:46:28:36:05:a0:06:ad:5c:aa:
                    04:55:3d:b8:a1:b1:b8:14:d3:43:79:25:7d:45:1c:
                    fb:c6:4a:1a:d4:b9:f0:38:07:19:a0:fa:90:e2:07:
                    74:27:88:93:99:c0:dc:b2:66:08:1a:80:b1:dc:4d:
                    16:d1:4e:c6:51:69:be:26:0e:47:32:e7:23:13:35:
                    d5:4e:93:d4:2a:ed:0c:f8:fa:a5:90:70:b7:10:02:
                    dc:19:2d:ff:6e:dd:07:b9:a3:e0:b0:bb:d7:4d:1a:
                    56:cf:76:0e:15:9e:91:46:4f:cf:32:6d:cc:ab:1e:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:75:77:12:96:F3:4D:79:95:93:AE:8E:06:8B:34:09:31:C0:5A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/43a59a46-c115-3889-8c22-deae7fcbc88e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3/ab1101f4-a527-459b-8c16-d78b261e6de3.crl

            X509v3 Authority Key Identifier:
                keyid:99:9C:57:D9:0E:30:4E:74:DA:78:4A:5B:D2:9C:67:1E:DE:7A:6E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab1101f4-a527-459b-8c16-d78b261e6de3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:277:d02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:76:4a:8b:e5:d1:78:92:50:c6:17:d6:9c:79:7c:d1:b0:47:
         53:02:18:6a:60:7d:aa:7f:33:ab:87:79:13:bb:83:93:b0:7c:
         f2:d9:08:77:3a:d0:3a:f1:a8:52:9e:9f:9a:5e:be:92:c2:4c:
         a2:26:7a:d9:57:5f:94:29:39:98:00:18:fd:6c:d3:29:74:f6:
         8f:b4:34:88:8a:fa:5d:59:aa:ec:d4:fe:d4:91:cc:80:3b:60:
         5a:94:07:df:a3:42:79:e6:80:ee:36:c4:76:b2:f0:95:df:19:
         f5:a1:57:a9:c6:b5:3c:ae:28:c6:b7:07:14:53:28:8e:6e:87:
         01:38:19:c1:d8:d4:f4:2d:75:eb:8a:f8:a0:28:9e:83:db:89:
         b5:76:45:82:ea:44:07:1a:5c:32:9c:e2:79:73:85:00:82:49:
         25:63:64:01:63:e9:53:8f:77:b0:2d:6c:4d:5b:f8:8f:4e:c1:
         00:b3:60:02:9f:b7:e4:51:b9:f2:a7:83:5d:82:d7:ae:4c:03:
         fa:b0:06:ad:99:90:4d:3a:a5:95:e3:c3:a9:a9:b6:21:c7:4c:
         fd:ab:b0:6a:7b:95:65:58:5b:ba:b0:43:b4:1e:cc:4e:54:e3:
         fe:dc:51:df:5b:4e:12:3a:bf:5c:03:58:9a:5b:36:f4:c8:ab:
         a9:6d:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:45:53 2026 by rpki-client