Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa
File:                     2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa (raw, json)
Hash identifier:          Q/JM9174CGFixPOfgeHLnyhkeQTyv4Oi3ZqTRzQW1AU=
Subject key identifier:   00:B7:BD:52:DB:0A:78:86:2E:EA:99:3C:23:AA:7E:C8:EC:46:61:7F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74701477B0A72916D8DEEDC8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397241
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:14:77:b0:a7:29:16:d8:de:ed:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=fa8aac2d-71fb-44c3-a723-e14361cd228c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b7:af:af:6a:65:d7:cc:46:1d:43:03:d9:fe:
                    bd:c6:ad:79:2c:3d:91:11:55:69:00:f0:14:35:6c:
                    47:8f:d3:f7:c4:a1:00:d7:89:bb:4b:cb:85:cf:3e:
                    10:e3:c3:65:36:a7:9a:64:c4:0b:69:1f:7c:48:77:
                    5b:a2:8e:fe:ad:b9:d6:0c:36:e7:00:d0:d9:95:de:
                    f3:89:3a:57:6a:be:80:f1:64:54:dd:4b:3d:45:69:
                    e0:ab:de:9a:6c:a7:c1:76:78:c0:03:36:34:54:e4:
                    ee:41:0d:50:dd:42:e8:e6:b5:90:f7:3f:9d:a7:b7:
                    ba:34:55:d6:67:aa:64:3a:6c:d4:04:36:23:d1:1d:
                    3e:fe:a1:d2:77:f8:e2:66:c4:a4:7d:7d:63:ee:de:
                    72:c9:ab:ab:9e:06:66:6f:2d:85:27:3f:b8:2e:65:
                    cd:c2:ed:e6:bb:75:8b:be:58:70:3c:c7:ea:32:94:
                    cc:0b:96:0b:c7:3e:41:cb:bd:3e:77:2d:01:92:43:
                    b1:81:89:1f:f4:5a:5a:aa:36:02:b0:6c:0e:f9:85:
                    81:31:23:e7:76:83:fa:9b:8c:53:f2:c5:b1:5e:a9:
                    55:d1:c5:92:79:1b:d6:63:8d:03:62:d5:ba:9d:34:
                    48:d4:fc:22:d9:8b:cb:37:f9:c6:17:29:b2:bc:3c:
                    19:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:BD:52:DB:0A:78:86:2E:EA:99:3C:23:AA:7E:C8:EC:46:61:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2b1f86e9-5349-3a59-9f35-36f0b729f5d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:75:f4:45:28:db:3b:76:bf:81:5b:bf:b2:4a:4b:44:a3:e9:
         68:1e:35:a0:a6:a0:43:04:a5:af:aa:d6:a3:3f:ec:af:51:4a:
         27:53:5c:73:bf:28:b1:6f:07:67:99:c1:be:60:28:b1:4b:ac:
         6b:a4:06:aa:21:f5:8a:3a:a9:5d:57:0b:70:96:d4:f5:d9:a0:
         20:e3:df:52:27:c6:bb:6c:98:20:d7:45:ec:ab:eb:50:0b:b6:
         db:0f:e0:48:c9:77:10:cb:ea:69:48:72:19:42:dc:46:d8:5f:
         ef:77:d6:26:e3:5d:cf:cb:ff:39:73:01:70:a1:aa:6d:0b:e5:
         04:48:19:f4:a4:2a:6c:68:2c:45:47:e8:89:68:05:31:dd:96:
         74:b3:be:e7:12:56:3c:a2:23:84:95:e5:12:0a:d0:0a:16:6b:
         85:74:e7:5f:38:df:69:8d:25:fb:5e:cf:26:bd:f5:bf:df:66:
         c4:65:a5:9b:83:2e:56:e8:48:f6:71:67:09:70:5c:6b:ee:24:
         e4:cd:ea:16:39:17:77:5a:cc:7c:93:14:b0:b3:3d:85:93:9e:
         55:9b:28:5e:00:52:f4:55:5d:58:42:d0:ed:58:db:04:be:ee:
         46:35:10:00:4a:2a:15:4d:c3:90:f8:76:71:3a:3f:7e:35:00:
         d1:df:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:01 2026 by rpki-client