Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/082712f0-0393-3b53-a91f-d56c1529ddbf.roa
File:                     082712f0-0393-3b53-a91f-d56c1529ddbf.roa (raw, json)
Hash identifier:          +zTk++hbm1uZDnzKllIqoH84PV25KK1Xzku73I309lk=
Subject key identifier:   AC:AD:83:54:8F:E7:D0:9A:A5:5A:71:A3:71:99:80:EA:24:10:DB:EB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D747018CAB2F6A93561DA7280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/082712f0-0393-3b53-a91f-d56c1529ddbf.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397233
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:18:ca:b2:f6:a9:35:61:da:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=998f5f16-2df3-4230-9b5f-ad31c150e4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:dd:3e:fe:40:ca:b7:3a:1c:7c:98:b5:44:
                    64:ce:11:56:6e:75:04:94:44:eb:76:00:92:fd:c2:
                    bc:9c:48:4c:e2:b0:f3:31:ed:63:7a:78:a1:39:8a:
                    2c:ad:43:8d:90:63:94:45:f5:7a:55:0d:3a:7b:18:
                    d9:87:51:5c:18:85:71:ef:fe:0b:1c:fa:a6:bb:e5:
                    ee:6e:8b:af:ae:56:1f:e4:cc:aa:13:d9:ad:81:b1:
                    77:9e:48:32:62:19:ae:b2:da:fe:81:79:aa:fe:8d:
                    14:68:8f:43:66:55:f0:78:a3:f0:a0:6a:1a:ed:29:
                    a1:85:c5:b2:14:f1:fa:76:28:f5:ff:90:bd:f6:bb:
                    78:c9:45:84:f0:d3:2e:6a:0b:1d:7b:64:7e:1e:11:
                    ec:a8:c5:53:c4:15:c3:d7:a3:36:ce:bd:e5:fa:96:
                    c0:ae:73:9c:58:79:0a:41:84:36:bd:d1:00:ed:56:
                    2c:fc:08:d1:e6:f5:5e:60:80:b5:34:77:b9:98:5b:
                    17:02:5a:3b:2a:79:29:7c:d5:88:0b:84:df:1e:00:
                    96:d8:5f:1e:56:f3:24:cd:f8:24:6e:c5:69:e4:a2:
                    74:5c:35:dc:80:67:40:d8:9e:b7:09:52:de:e2:a9:
                    3a:07:4e:15:72:e8:10:5f:3a:ca:4f:10:c3:a4:d0:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AD:83:54:8F:E7:D0:9A:A5:5A:71:A3:71:99:80:EA:24:10:DB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/082712f0-0393-3b53-a91f-d56c1529ddbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:39:f0:70:ba:ba:f7:d9:26:ed:da:99:16:e5:51:3d:09:8b:
         da:b7:8c:f1:01:3d:a0:4a:7b:22:ae:ab:7f:2b:bc:b9:fd:0d:
         e9:0c:0d:52:e3:c0:04:1d:43:30:79:04:95:6e:7b:e6:e7:de:
         08:78:3b:ee:b1:83:0b:c2:42:76:b7:f3:1e:b7:2c:36:b5:36:
         ff:6d:a0:00:d6:16:12:92:91:63:a7:26:94:27:a4:2b:34:3b:
         4f:2f:1d:28:f6:f7:c8:dc:6f:04:cc:5e:c9:d2:d3:7c:22:8f:
         81:c6:c7:84:6c:30:79:a2:f1:06:21:42:b0:79:ef:c0:2e:24:
         de:67:29:fb:73:f6:b1:5a:93:9b:13:cf:6c:26:d9:97:83:9e:
         76:7a:b2:6b:16:bd:eb:83:e5:f2:a1:f9:c8:e7:0a:16:a7:4a:
         2a:4d:da:1a:f8:2e:e7:90:0b:ab:26:cc:db:9f:83:d9:e2:9e:
         c5:63:6b:85:62:69:17:ee:e3:b8:82:df:1e:a5:82:f2:97:f7:
         ff:32:03:5a:9b:c6:85:32:78:0d:ba:57:ca:14:e7:6c:c2:89:
         d7:32:ca:e6:ef:30:a4:17:10:83:64:e4:08:9c:67:86:16:ef:
         2c:ca:81:9e:aa:e7:95:93:75:58:f2:b3:51:44:4b:df:1f:96:
         68:20:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:54 2026 by rpki-client