Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
File:                     1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa (raw, json)
Hash identifier:          j9LXqOhbv7SKMiP6ynD/irwFxnY+Ey+MPI3slvr5hY8=
Subject key identifier:   E5:51:AE:22:8C:F6:25:70:CE:6F:95:2C:39:D5:AC:93:23:F7:2E:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D747012A6099732577D822F40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397235
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:12:a6:09:97:32:57:7d:82:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=3e775ee0-d94e-44b1-968a-766b3b5dfaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:0f:53:68:a8:29:9e:b1:33:a1:d5:0e:3c:
                    34:25:d9:a4:c8:e3:26:54:8b:2a:eb:87:94:19:f2:
                    ed:f4:81:51:e2:c2:3c:2a:9d:b1:00:08:35:7b:31:
                    03:ce:36:bd:cb:48:8d:7a:03:48:a3:34:1c:59:ea:
                    f0:79:4f:be:bd:31:1d:80:34:ae:87:df:6c:5b:7b:
                    dc:f0:2f:d4:2c:e5:89:cb:2f:68:73:1e:97:a4:43:
                    64:15:58:e8:17:e6:03:4a:48:80:1f:2b:89:af:ce:
                    18:58:bb:d5:4b:7a:1f:21:f7:48:43:9e:02:e1:5b:
                    cf:9e:cc:bd:26:36:4b:ac:cd:d3:3b:d0:5a:80:26:
                    1a:a9:ee:c8:bf:4e:62:b6:c3:cc:40:13:d7:3d:0f:
                    a4:9e:57:bb:8e:8b:cb:fd:75:a8:c8:22:ff:41:80:
                    0e:e2:6b:63:67:9a:92:0b:ac:58:05:fa:ee:97:ac:
                    3d:e9:1a:db:5b:9f:64:33:f0:e6:3f:e5:fb:3d:94:
                    7a:43:e7:35:06:c0:eb:db:f9:ad:a8:9e:48:b4:ca:
                    ef:30:fa:78:ff:db:f5:81:fd:a7:27:7a:d8:50:3b:
                    62:5c:66:8c:74:1c:a1:5f:35:45:89:2d:01:9a:e4:
                    42:9c:74:7f:30:ca:bf:49:77:77:7f:71:ae:45:03:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:51:AE:22:8C:F6:25:70:CE:6F:95:2C:39:D5:AC:93:23:F7:2E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:5f:d3:ed:88:f4:fa:5e:cb:fa:19:c2:3f:2d:63:fd:6b:
         15:88:37:76:ba:f0:8d:c6:ff:81:ec:98:e5:fb:e0:1d:49:b4:
         61:95:4f:c2:33:57:53:fd:59:56:82:bf:b4:cc:37:eb:4d:b9:
         c1:76:7e:ed:f3:c6:5c:fd:82:1f:8b:bc:d6:bb:98:ea:6d:81:
         d8:e5:c6:95:9f:90:83:53:0a:e3:ab:c0:1f:24:92:97:e3:d2:
         18:3b:40:57:75:80:63:b2:f8:55:27:fc:74:a7:c3:2b:d5:7f:
         46:a1:83:ca:51:55:d6:dc:71:ae:4c:cc:68:13:81:f8:07:6d:
         75:c0:62:1d:c1:4f:90:53:64:b6:56:97:53:8b:3b:bb:1f:64:
         61:4f:4c:0c:66:e0:5b:9e:c4:61:18:75:62:b3:91:7b:b8:0f:
         fe:6e:7b:cc:54:83:13:c9:7a:42:1b:24:3d:a4:d0:0b:38:8a:
         2b:bc:69:7a:05:1b:f1:2f:76:1b:2d:c0:fd:72:e9:b6:4b:3c:
         8f:9c:30:32:70:58:dc:34:42:20:2f:e3:9b:ef:12:06:e7:8a:
         24:08:39:00:0e:7c:60:95:e3:d3:9d:a6:96:0b:07:5b:8b:7c:
         f4:bd:54:b9:b3:18:27:38:3f:89:5a:65:ea:d9:03:03:12:ee:
         37:30:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:31 2026 by rpki-client