Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
File:                     60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa (raw, json)
Hash identifier:          6HJfUgVuh0xuHMVUSWgAf+vDV/WOYsm6umEnVY6qhvA=
Subject key identifier:   E5:E8:A4:08:92:7B:7C:90:8A:22:30:A4:E1:2D:1C:2A:89:E0:50:55
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74701210FD3E888C2E01A580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397223
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:12:10:fd:3e:88:8c:2e:01:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=4be23691-07af-4165-8e51-fccb302fbbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:20:82:e7:65:c2:22:d2:8f:ed:d2:91:5a:
                    ee:d3:ae:68:bc:e4:7a:62:a6:78:3a:a1:60:c0:e7:
                    2e:b3:9d:d8:53:0e:13:08:d4:ce:cc:dc:d7:ba:e5:
                    b0:83:7b:89:67:b1:db:4a:5a:03:3e:c3:6d:db:b0:
                    1b:89:23:25:4b:3e:ff:32:a5:1d:92:69:a4:b3:ac:
                    ae:5f:50:4e:c9:07:41:da:a5:8e:38:84:1e:a6:69:
                    43:22:70:e3:d8:21:1b:b1:c5:64:af:57:a5:2d:58:
                    51:3f:f2:2b:c7:b3:58:ab:79:eb:e6:09:56:1b:28:
                    1b:aa:81:42:85:95:89:88:a4:09:54:b0:7b:3a:34:
                    57:85:fc:c9:20:a1:73:13:7c:4c:80:19:d5:15:bf:
                    30:03:a4:8d:63:8c:92:33:b2:e4:0c:75:95:54:54:
                    13:51:66:97:ba:a6:06:9e:39:6b:40:a7:40:3e:8b:
                    0a:8b:89:47:46:25:92:74:6a:cd:65:6f:d2:13:54:
                    31:38:01:d4:f5:c6:09:49:a9:c4:e4:61:d0:08:c8:
                    f9:61:73:26:d7:8e:ce:7e:b8:c7:81:8c:e7:37:f0:
                    7d:8d:8e:4e:70:1f:fb:cf:93:2f:28:3a:62:06:f5:
                    d1:c4:ad:44:8a:f3:b8:c0:93:de:76:63:02:ae:4f:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E8:A4:08:92:7B:7C:90:8A:22:30:A4:E1:2D:1C:2A:89:E0:50:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60a4d00f-89e9-370d-9817-ff4f502cfcfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:04:6c:f7:a2:4c:4e:6c:b0:1d:3c:2e:42:0d:1d:43:9e:3e:
         15:d4:d2:4a:88:15:ee:ac:55:f7:8a:a1:d7:55:e9:e0:db:ca:
         7d:c5:3b:30:ca:ac:38:7a:14:30:b1:0d:6a:9c:35:e3:07:f0:
         7f:43:7e:85:06:ec:83:67:52:66:4f:55:d8:62:67:13:46:87:
         ec:e7:55:47:8d:36:98:1e:de:d0:90:43:af:ce:d8:4a:1c:53:
         3a:64:38:28:39:8f:ba:ed:00:e1:1c:6f:a8:b6:09:d6:0b:82:
         74:c5:8f:d1:34:5f:b9:24:4d:25:29:f5:0b:19:7f:c0:ec:76:
         5f:6e:36:98:2a:d8:8e:2d:f9:87:fb:24:1d:52:73:d3:1f:1d:
         43:7e:1f:89:70:71:aa:71:02:5b:48:3b:88:53:c6:97:08:ca:
         22:1c:8a:67:e4:b2:5a:b2:f2:09:0c:99:47:d9:e6:b7:ad:7d:
         db:cf:e8:48:2d:0e:12:39:c6:14:3f:b3:08:ef:9b:58:39:55:
         41:78:c8:e2:b8:59:ce:14:29:d1:c7:69:25:c0:a6:9a:3f:b7:
         94:c1:3c:1a:86:5f:1e:85:e7:52:bd:96:23:7e:83:f8:cb:16:
         cc:18:42:9e:81:d1:d9:72:32:4f:ec:12:1e:ab:f1:47:00:34:
         f5:82:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:36 2026 by rpki-client