Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa
File:                     f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa (raw, json)
Hash identifier:          6clJkNTgMGv2fOtM4sfnAQ38IxtxgxoHTMsLjo4+SeA=
Subject key identifier:   AF:13:00:D3:0C:24:3A:4C:D4:39:60:8B:1C:E5:02:6E:C1:A7:C4:01
Certificate issuer:       /CN=0abf034d-0709-423c-9216-fae257040e16
Certificate serial:       010D0C9F4328584E9D4A6600766DAD59A5207EC0
Authority key identifier: 83:CA:38:A4:54:72:74:FE:82:BC:A6:92:C9:F5:5D:0A:F9:CB:B1:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     4385
IP address blocks:        2620:8d:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/0abf034d-0709-423c-9216-fae257040e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/0abf034d-0709-423c-9216-fae257040e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:66:00:76:6d:ad:59:a5:20:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abf034d-0709-423c-9216-fae257040e16
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=5bd89ddb-444e-4d7b-a74f-562a78f312d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:65:75:e1:87:79:ea:b9:a8:55:d2:b2:9b:
                    08:c9:50:f3:c4:61:ed:5b:f2:4f:40:5c:a2:56:8e:
                    9e:47:eb:c2:4e:55:ad:03:01:7d:d6:13:e6:30:68:
                    f2:e6:a3:f7:ef:53:a9:d3:c6:08:cb:07:2b:65:4c:
                    f3:1a:eb:7c:a8:08:e0:70:a7:17:7b:8c:d5:89:e0:
                    c4:2f:70:71:89:1b:a4:41:74:fc:e8:f7:38:18:89:
                    8c:ef:c4:62:c2:87:e3:5a:e2:78:7f:bc:ae:44:7e:
                    3e:73:a9:4e:ab:06:94:e2:f2:b3:af:ed:8e:41:6e:
                    74:9e:b3:6b:99:40:22:b1:29:38:93:ca:7c:69:8e:
                    9f:27:1b:d6:98:d8:28:24:9f:1c:6e:bc:e1:d4:30:
                    66:85:4f:5e:df:0e:91:23:b4:14:45:e9:c5:c2:fd:
                    4a:60:61:80:9e:54:dc:93:76:15:04:3c:eb:ed:a6:
                    26:d0:a2:7f:80:73:3d:af:05:b6:65:0a:0a:f3:fd:
                    53:2c:de:fb:90:24:95:c2:8b:e5:d0:bc:c5:80:84:
                    02:67:c4:cc:be:be:51:9f:5e:a4:27:a1:0f:a0:eb:
                    48:93:76:0d:84:cb:1d:9c:87:b2:1d:27:db:e1:2e:
                    ab:f5:05:20:af:fa:57:9b:9d:64:f8:cd:3f:1e:b7:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:00:D3:0C:24:3A:4C:D4:39:60:8B:1C:E5:02:6E:C1:A7:C4:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/f5ab775f-6f5b-3b03-9c35-1aaaae613603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16/0abf034d-0709-423c-9216-fae257040e16.crl

            X509v3 Authority Key Identifier:
                keyid:83:CA:38:A4:54:72:74:FE:82:BC:A6:92:C9:F5:5D:0A:F9:CB:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abf034d-0709-423c-9216-fae257040e16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8d:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:2a:fe:c3:cc:25:d7:f9:c5:25:12:c1:a8:cf:18:59:37:33:
         59:f0:36:3e:a0:62:fa:05:84:3d:68:36:b0:5d:96:bd:18:01:
         d0:31:fc:68:42:4b:ec:94:9d:64:c2:ed:5f:29:f1:19:8e:26:
         db:6f:c2:97:fa:da:ab:1b:63:96:4a:4d:64:d4:3f:48:1d:58:
         ab:a3:7c:26:db:a0:1c:7f:73:09:3a:46:5e:20:cc:d4:0d:e3:
         a3:8c:52:46:c2:6e:cd:c7:cd:ab:87:03:99:71:77:51:aa:b8:
         3f:35:69:96:11:ac:97:9c:89:ab:6e:80:5f:4b:4c:b5:7e:1b:
         35:82:ac:7b:37:e9:3a:a7:28:82:6c:52:2d:f3:b1:7b:2a:c4:
         7b:d9:88:28:9d:42:cb:ec:5c:b9:f9:41:a1:a2:06:ed:bb:5c:
         7e:f9:d7:be:36:b0:8d:07:dc:c5:5a:94:1b:25:28:8f:25:07:
         c4:4b:35:58:55:9e:6f:8d:5b:5d:e7:21:8e:a4:a5:47:e4:43:
         b7:4b:ed:19:30:bd:e6:22:bc:4b:3a:02:00:12:55:fb:4c:19:
         64:e2:e8:e2:e2:d5:11:ab:da:9a:d3:10:73:17:90:c4:70:b8:
         85:78:0e:fb:31:d0:86:64:f7:e1:4a:d8:1a:9d:76:cd:36:b0:
         9e:18:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:11:01 2026 by rpki-client