Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa
File:                     84e486f1-b11c-3c8b-a635-6a05092c1099.roa (raw, json)
Hash identifier:          e9xnS6GIwCF2M0H4t4/p/0LcU7GoZs5CvR3zQ2iUjPw=
Subject key identifier:   D5:7A:99:64:D0:3A:B1:F5:6F:8C:0A:40:E0:31:52:4E:BA:06:1A:BB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D7470107839D9DE19A0D09040
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397225
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:10:78:39:d9:de:19:a0:d0:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=dce7c5ff-00bf-4526-8b7d-fd0921cc7a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:16:5b:28:aa:ab:e1:ee:76:65:99:c4:ca:d7:
                    ff:b5:da:29:f1:65:77:4c:57:df:2b:dd:e7:bd:44:
                    10:71:1b:34:54:df:c5:2b:b0:7f:4e:5c:5c:8d:df:
                    65:a0:5d:9c:31:35:db:af:67:33:6d:ea:0a:01:97:
                    f0:08:65:df:43:e2:07:b5:7e:da:4c:29:61:c7:ca:
                    e1:99:33:e8:32:42:8f:79:a5:b1:88:0d:33:72:3d:
                    6c:bb:c1:a0:67:31:a6:81:66:b1:3d:c6:3a:62:55:
                    46:54:da:a7:cb:5c:01:3a:33:85:59:fd:5c:61:8a:
                    d5:7a:37:25:5b:e7:be:0f:1b:9d:45:dd:e4:00:52:
                    3a:46:96:a5:32:4f:5b:26:54:88:86:0a:fb:43:70:
                    e6:21:f9:ed:84:72:63:46:04:c2:dc:25:bf:14:09:
                    74:ed:84:e9:b0:ad:ef:9d:df:9b:ca:60:f2:ba:b0:
                    a9:cc:1f:5c:ca:4e:60:91:73:e7:cb:b2:f9:c7:4a:
                    0c:51:49:0b:59:c1:84:a1:3b:6b:3b:cf:9e:80:d6:
                    23:91:d3:0f:82:f8:b3:bc:ea:1a:7b:72:bb:20:7e:
                    d4:90:5b:b0:82:5a:f6:fa:e3:17:7c:c1:0b:58:bb:
                    80:42:f4:9e:b3:63:e9:d1:96:6d:a7:7c:1a:6f:e9:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:99:64:D0:3A:B1:F5:6F:8C:0A:40:E0:31:52:4E:BA:06:1A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/84e486f1-b11c-3c8b-a635-6a05092c1099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4c:e2:c4:41:98:b2:4e:6c:b3:bc:51:01:cb:18:dd:26:27:
         d5:33:76:82:27:e6:68:92:3a:3f:75:13:82:e3:f5:70:29:59:
         ac:ac:9d:36:e1:62:3b:f5:86:fb:8d:1e:7b:87:12:e7:e9:58:
         d9:6a:36:83:f2:f6:3c:92:8c:86:08:fa:18:92:96:76:16:91:
         a4:63:db:54:6e:0f:45:9f:73:fe:9d:38:d3:6c:d3:ca:7e:05:
         d3:8b:fc:8e:46:29:4e:06:b0:fd:f2:9d:38:4f:92:07:ad:23:
         6a:e1:77:5f:66:17:08:6d:37:f2:61:43:97:2a:d7:e2:c4:18:
         44:00:93:04:aa:51:df:35:c5:70:b0:83:39:c0:c2:eb:b4:7d:
         ba:71:c6:73:78:43:1d:96:a4:76:e8:62:ac:98:66:ec:03:72:
         68:42:88:09:87:df:4d:a6:64:9d:da:4e:21:0e:78:ef:a5:64:
         a8:7b:68:36:c7:85:ce:10:af:7a:ae:2a:ff:7f:82:e6:4a:06:
         62:3a:63:37:06:25:95:40:b6:87:f9:46:0c:43:99:0d:6b:00:
         7d:bd:fc:9c:db:d3:a0:00:de:b7:36:26:60:63:0e:27:16:ed:
         bf:bc:9f:63:da:1d:65:82:93:e6:c0:5d:36:c9:7d:a6:fd:d4:
         f5:c9:40:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBB4OdneGaDQkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZGNlN2M1ZmYtMDBiZi00NTI2LThiN2QtZmQwOTIxY2M3YTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBZbKKqr4e52ZZnEytf/tdop8WV3TFffK93n
vUQQcRs0VN/FK7B/Tlxcjd9loF2cMTXbr2czbeoKAZfwCGXfQ+IHtX7aTClhx8rh
mTPoMkKPeaWxiA0zcj1su8GgZzGmgWaxPcY6YlVGVNqny1wBOjOFWf1cYYrVejcl
W+e+DxudRd3kAFI6RpalMk9bJlSIhgr7Q3DmIfnthHJjRgTC3CW/FAl07YTpsK3v
nd+bymDyurCpzB9cyk5gkXPny7L5x0oMUUkLWcGEoTtrO8+egNYjkdMPgvizvOoa
e3K7IH7UkFuwglr2+uMXfMELWLuAQvSes2Pp0ZZtp3wab+lZHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNV6mWTQOrH1b4wKQOAxUk66Bhq7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvODRlNDg2ZjEtYjExYy0z
YzhiLWE2MzUtNmEwNTA5MmMxMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAkYS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABNM4sRBmLJObLO8UQHLGN0mJ9UzdoIn5miSOj91E4Lj9XApWays
nTbhYjv1hvuNHnuHEufpWNlqNoPy9jySjIYI+hiSlnYWkaRj21RuD0Wfc/6dONNs
08p+BdOL/I5GKU4GsP3ynThPkgetI2rhd19mFwhtN/JhQ5cq1+LEGEQAkwSqUd81
xXCwgznAwuu0fbpxxnN4Qx2WpHboYqyYZuwDcmhCiAmH302mZJ3aTiEOeO+lZKh7
aDbHhc4Qr3quKv9/guZKBmI6YzcGJZVAtof5RgxDmQ1rAH29/Jzb06AA3rc2JmBj
DicW7b+8n2PaHWWCk+bAXTbJfab91PXJQMY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:39 2026 by rpki-client