Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa
File:                     016f1626-329e-31f3-b4c1-e93d91061cd5.roa (raw, json)
Hash identifier:          uG8V0rwRb8rRYSlq4+5nc+tytBU6maX8Hc4WYZIVSJQ=
Subject key identifier:   72:1A:02:E4:30:7B:0D:B1:13:20:4D:37:99:26:BB:77:10:7C:E8:85
Certificate issuer:       /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605
Certificate serial:       010D0C9F4328584F093CCFC5EBF15C8498F11200
Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     27172
IP address blocks:        2602:f635::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:cf:c5:eb:f1:5c:84:98:f1:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b16ec1c2-2340-4345-af75-02e66ed67969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:a6:c6:1e:dc:46:57:79:b7:45:f2:5d:f3:
                    07:4e:4c:3e:ef:1b:aa:ba:25:eb:14:26:c4:b0:d2:
                    9e:6a:30:a9:77:a9:0a:3e:7b:04:ff:0d:f9:37:6d:
                    11:c6:0a:6f:b8:6f:fa:66:28:62:8d:6a:04:55:30:
                    06:3d:11:ac:90:c8:6d:ee:49:6d:68:af:1e:29:2b:
                    9b:e3:c0:a6:13:b6:61:f6:f5:37:51:1e:98:1f:f4:
                    c8:c5:87:1e:51:c1:aa:75:59:94:d1:0c:85:93:7e:
                    8e:c2:a8:db:7b:38:59:9f:db:87:99:38:8f:35:5f:
                    9a:3a:33:ee:02:06:04:c2:43:e6:b6:9e:db:92:fc:
                    06:b3:ef:cc:8c:1b:84:8e:a1:ae:20:87:04:85:a8:
                    ab:37:f6:67:4a:a4:f8:8f:87:f4:0e:bc:95:22:c5:
                    22:70:27:13:70:0d:55:e9:fa:b1:82:d7:f4:4f:4a:
                    9f:fd:be:2f:1f:13:94:5c:d8:50:7b:7a:2b:d6:30:
                    f9:8e:b6:95:ef:c2:68:76:3e:89:2d:c0:c2:80:03:
                    6b:78:18:1b:08:51:59:38:7a:b6:e1:3a:a6:65:92:
                    a6:e4:db:eb:32:29:62:b6:16:f3:2d:97:93:ec:94:
                    b6:5c:8f:68:d5:29:98:6b:99:99:47:44:e7:d2:bf:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1A:02:E4:30:7B:0D:B1:13:20:4D:37:99:26:BB:77:10:7C:E8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/016f1626-329e-31f3-b4c1-e93d91061cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl

            X509v3 Authority Key Identifier:
                keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f635::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:1a:5c:59:41:f4:de:3e:9c:21:45:97:f5:4b:ab:42:65:
         ff:96:4b:e0:39:b3:0e:e7:d3:af:b1:65:54:18:51:6f:28:9d:
         4e:a0:e6:f4:43:2a:9e:63:83:ff:55:9a:15:45:c2:b5:90:e0:
         79:61:54:1e:98:f3:02:42:2c:30:de:f9:a4:cf:0d:6a:b6:a0:
         a7:75:99:45:89:ab:b2:70:d2:a6:b4:06:53:64:40:16:c2:a7:
         27:c8:dd:0d:3e:cb:7e:71:48:51:e6:53:c5:5f:81:8e:af:0a:
         6d:f7:52:ef:26:11:a3:0c:08:11:39:09:43:51:c2:a0:8c:cf:
         fa:cf:4f:01:6a:4d:eb:0e:07:fe:25:79:ac:f0:dc:2b:25:e9:
         75:80:f5:3e:64:23:bc:5f:9f:03:a4:84:c6:d7:db:e8:57:92:
         19:60:6a:5d:ec:04:30:a5:7c:6a:d2:84:b8:9e:4d:c6:b9:5b:
         0a:37:91:38:6a:7c:a6:88:7a:6f:36:25:b1:65:99:44:f0:3e:
         39:61:41:44:6b:09:16:8f:a6:23:ea:c9:63:92:c2:95:c9:2e:
         f5:1a:ac:97:d1:e6:86:75:0f:09:08:9c:fb:da:15:94:d2:78:
         5b:1a:db:41:c6:7c:2c:0a:c9:c3:d1:e5:47:24:3d:b5:11:e7:
         b1:61:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:14:02 2026 by rpki-client