Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d97964e-99c2-374b-8e87-ffa309523073.roa
File:                     7d97964e-99c2-374b-8e87-ffa309523073.roa (raw, json)
Hash identifier:          0FjHxgX/mghqyi8rdZ0W16cSioHjDaav7DgK8r4PPO0=
Subject key identifier:   1A:DF:FA:59:02:F0:82:BA:FC:CC:6B:00:07:BC:C7:A5:C6:12:A9:1A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700BAD6F0E22D39BEF9940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d97964e-99c2-374b-8e87-ffa309523073.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397223
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0b:ad:6f:0e:22:d3:9b:ef:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=68489b23-93f6-450c-a952-c563dde846db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:3a:46:ef:35:bc:5a:20:65:85:f1:44:80:
                    f1:56:3d:ad:c6:46:a8:62:08:f6:5a:88:63:ce:ed:
                    ae:0d:43:33:cb:7b:e4:1a:15:24:9a:2e:c5:e4:bd:
                    c2:fc:6c:46:38:2e:6c:fc:ea:52:fb:2f:8b:f6:98:
                    51:82:96:6d:49:4d:2c:5e:87:d6:e2:4c:93:19:26:
                    ec:ff:6c:dc:b9:84:59:9a:54:57:af:85:9b:7f:a2:
                    69:68:ca:ca:e4:42:8e:90:35:76:6c:23:c2:4e:85:
                    f3:88:37:c6:b7:8c:96:2d:df:78:8f:2b:c5:4c:3b:
                    c9:1a:91:d3:7f:fe:bb:b5:ce:8f:4b:9a:50:1e:f1:
                    2b:92:3b:03:9e:a9:d2:61:b5:10:7e:b7:0a:db:fd:
                    9a:4d:37:e1:da:d8:04:f2:1c:b1:92:e7:57:61:93:
                    5c:43:f5:91:7a:95:b1:b4:f6:6a:b6:91:8e:d2:93:
                    d5:f0:27:15:c2:de:d9:99:07:fe:1d:47:9a:f2:b8:
                    27:27:84:f8:03:07:0b:b1:d8:14:e6:19:e3:11:73:
                    b2:db:1d:55:f4:1b:f9:0d:fb:4b:90:ec:88:0e:9b:
                    24:37:56:99:d7:9e:e5:a1:62:ef:18:62:61:06:92:
                    06:7b:06:a6:9f:97:fa:d3:55:d2:c7:48:68:8a:2a:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:FA:59:02:F0:82:BA:FC:CC:6B:00:07:BC:C7:A5:C6:12:A9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7d97964e-99c2-374b-8e87-ffa309523073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:dd:f6:c9:64:2d:71:6d:da:04:68:27:1c:f3:e2:7b:fa:
         f5:f6:46:64:a6:8c:9f:0c:0b:cd:f5:0f:ed:3a:e3:24:ee:aa:
         e5:66:e2:31:5d:85:75:63:f1:76:18:cd:6c:19:8e:5a:a3:dc:
         c7:9f:ad:d4:64:9d:99:f4:2c:7e:12:b6:bb:f5:6d:47:d4:3c:
         8f:10:3b:af:35:3b:ea:ec:75:e2:69:c5:98:ec:a5:ec:5a:6e:
         0c:b7:43:84:d8:7f:22:83:62:61:5f:05:5b:39:19:23:b8:25:
         80:c2:86:77:aa:f9:1d:9d:eb:10:6a:33:b4:a9:25:2d:85:aa:
         e9:81:94:04:10:9b:0f:45:47:29:e6:ec:0a:06:a8:fe:cb:a1:
         53:ee:ea:2b:3d:fb:ed:ee:15:65:4b:b2:cb:e7:13:f6:09:aa:
         ed:2b:69:fc:98:59:ea:fd:f5:98:69:d0:2f:03:65:e5:18:a0:
         70:de:95:47:97:8e:ea:c9:ee:ff:eb:64:e3:c6:7e:97:94:7f:
         67:21:1c:c9:b5:61:f9:2d:6f:ef:4b:f5:40:d4:3e:98:54:38:
         1e:23:df:9a:72:cc:63:9d:a4:c9:a5:5b:59:1f:9a:6f:a0:8b:
         20:36:75:e7:64:01:3d:09:3e:e7:3a:11:f3:6e:28:4c:93:5c:
         e1:52:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:28 2026 by rpki-client