Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/790c2b4f-197d-3ff1-9cf9-c92ec41e17c0.roa
File:                     790c2b4f-197d-3ff1-9cf9-c92ec41e17c0.roa (raw, json)
Hash identifier:          wcbaIWFYaZ8+VZDwTrPyRJrHd3rdqmO04KTM7WTQ2Tc=
Subject key identifier:   7D:92:57:E0:49:3E:BA:6C:1F:89:6C:B7:DA:F0:08:02:BE:9D:DE:70
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AD2C9CCC3D1C0899E480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/790c2b4f-197d-3ff1-9cf9-c92ec41e17c0.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397214
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ad:2c:9c:cc:3d:1c:08:99:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=d9ff22ea-3ab8-4492-ab52-c43842e4b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:33:09:af:d9:a3:4e:fc:83:b8:29:a4:27:
                    de:84:ef:e3:37:31:4a:fd:95:45:83:64:9c:ca:35:
                    91:6e:71:45:0b:c8:6a:69:04:b1:f9:0b:76:1c:75:
                    e5:81:31:28:fd:18:11:3e:6d:44:3a:12:93:74:8d:
                    65:3c:4d:6c:cf:fb:59:18:8b:f8:4f:45:e0:f9:66:
                    dd:b4:fd:49:14:19:19:5f:fe:6b:00:5a:de:aa:ef:
                    cd:8b:0f:d2:03:90:33:f3:a6:ed:4a:10:5e:78:62:
                    54:78:a0:b7:4e:90:94:99:2d:cb:ea:77:c2:08:a6:
                    9c:d5:e8:ea:81:93:8d:e4:47:77:35:6d:6a:d3:06:
                    35:fa:5c:1f:c9:04:14:1b:e0:b5:14:c5:34:ba:f6:
                    d6:fd:9e:ce:69:4b:e6:97:21:f6:a5:9a:65:39:0d:
                    c9:99:4e:e9:79:2b:30:78:b6:97:38:39:c0:76:18:
                    af:e5:f5:4e:93:84:ab:72:75:c5:1d:b5:cb:25:a4:
                    30:84:65:99:8a:2c:bf:eb:dd:bc:43:be:d9:aa:18:
                    0b:67:48:6a:a5:20:0c:81:9d:7e:22:02:fa:ab:2e:
                    2f:86:d6:e4:fe:9f:39:04:66:73:8b:d0:e0:68:3b:
                    2b:41:ad:83:76:35:4d:d1:3d:ad:e6:b5:34:f3:ed:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:57:E0:49:3E:BA:6C:1F:89:6C:B7:DA:F0:08:02:BE:9D:DE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/790c2b4f-197d-3ff1-9cf9-c92ec41e17c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b2:2d:28:33:3b:8d:e0:dc:5d:33:a6:c0:02:e5:d8:92:9a:
         3c:a7:51:9a:53:42:1a:b4:64:9c:aa:38:3d:8d:bb:4c:d9:12:
         3a:1e:de:d4:8a:60:4c:c2:37:5b:72:4f:fe:1b:92:7b:c8:12:
         ab:83:3e:1e:16:a1:c2:e2:d0:d4:2f:51:70:62:4d:5b:3b:5f:
         d5:58:ed:30:6c:5a:e8:6a:c5:49:3f:2f:aa:ba:5e:c6:9e:db:
         66:dc:5a:76:33:39:b7:bb:73:77:32:ab:a8:52:58:a3:7d:9e:
         5a:49:9b:51:0d:50:53:3c:93:13:59:7d:73:76:8f:67:17:7f:
         35:c7:22:54:7b:89:88:88:cc:10:27:15:2f:a1:86:27:63:92:
         cf:68:6b:ac:5d:46:ef:b3:fa:ad:20:e2:dd:bc:4b:73:97:a2:
         7d:dd:bc:26:3a:d1:a6:7a:6d:2d:80:05:90:70:58:de:1f:20:
         c7:c4:60:af:fb:c0:da:fe:24:36:fb:66:5d:b6:15:04:80:7f:
         b1:3a:e8:00:c7:6b:76:e2:61:fe:07:93:9c:42:14:bd:72:91:
         51:97:76:cf:f1:90:40:b2:eb:3c:5e:53:f1:57:31:24:05:cb:
         c7:4c:09:6d:dc:c0:f9:99:92:87:0a:53:ae:9b:87:44:19:41:
         54:ba:e0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:26:37 2026 by rpki-client