Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa
File:                     8c7cb097-8c6f-3714-91c3-935c909e3e37.roa (raw, json)
Hash identifier:          0AhGFU0rt98CIwXEQS2NW3mLqSjUnp6V/oJVf6asIcM=
Subject key identifier:   8E:E8:8C:9B:AC:10:E5:72:DC:18:E3:AA:BC:E5:7B:D4:AA:42:1C:9F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74701924B1C2C3F2F07A1980
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397241
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:19:24:b1:c2:c3:f2:f0:7a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=e27de344-3005-4e35-bc2f-6e57f6f9f613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:be:a1:18:01:d1:3c:53:16:e3:bc:c5:92:
                    30:88:62:97:88:f6:29:95:10:3e:32:c9:da:2f:8b:
                    c5:1d:ca:4c:0d:5b:36:c6:9c:67:ba:b4:c1:9a:a0:
                    46:60:fd:bb:4f:28:55:e4:3f:d4:87:a6:5a:5d:e7:
                    a4:6b:8f:3e:ed:99:a9:9d:d2:f9:75:5b:06:f8:7a:
                    58:77:98:e2:c0:28:de:68:e6:1f:a8:6e:d3:00:f2:
                    be:4a:23:f4:a5:c4:6f:6a:03:04:ef:2e:d0:5b:d4:
                    30:45:f6:27:38:09:5e:16:86:38:6c:1a:d2:d5:7d:
                    dd:58:57:ba:a7:f6:6e:c0:4e:0a:00:d1:e0:42:1e:
                    1a:12:f4:9c:1a:c1:4f:38:14:b6:48:8e:88:22:c5:
                    b0:86:53:f3:6b:9d:87:47:e5:cd:f2:77:15:f9:81:
                    f9:ac:ea:58:61:20:af:b1:dd:9e:ac:bd:e8:05:7b:
                    e0:f6:1a:e8:f5:76:fa:36:53:56:15:70:10:ce:69:
                    0e:93:46:b8:ec:ca:b4:4a:e4:fc:ae:09:21:65:aa:
                    5b:6b:6c:d6:41:26:d5:09:62:4c:a2:3d:0e:f9:34:
                    dc:2c:3e:8b:4e:9a:4c:3f:75:d4:55:d6:48:82:e3:
                    3f:3c:b2:76:e5:c3:40:74:ea:0a:d7:81:8c:f1:40:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:8C:9B:AC:10:E5:72:DC:18:E3:AA:BC:E5:7B:D4:AA:42:1C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:08:b4:c7:5c:f4:5a:e1:76:70:e2:65:28:86:87:e2:94:
         b4:42:00:3c:2b:d8:a7:21:1e:f3:82:b8:d1:d2:e3:58:06:6d:
         5b:c4:72:e2:3d:e5:7a:0d:a0:e3:ee:9d:b9:f2:0f:9c:22:cb:
         c5:1e:8a:04:31:09:ca:96:02:fb:38:31:79:2e:b8:e0:ef:13:
         9b:46:29:21:bf:51:d5:ea:d0:50:3a:a7:b3:99:31:b5:7a:14:
         73:78:f0:28:86:23:a9:a7:f1:e6:fc:da:02:ac:cf:d7:c3:56:
         eb:00:cb:9a:a5:3a:9d:95:fd:81:2d:8c:ad:d2:b6:f4:6b:49:
         d8:ca:cf:69:7d:78:6c:54:74:cc:94:95:0d:98:88:01:76:68:
         ec:c2:b5:2a:77:b3:88:6c:c9:aa:4e:03:eb:58:5a:58:ca:72:
         33:7c:46:14:a9:0b:b9:da:ee:20:89:48:80:54:5f:a9:1b:aa:
         df:6f:e8:f1:6a:8b:c0:67:35:ad:76:96:11:f9:49:32:37:9a:
         80:76:2f:d0:b7:75:53:39:24:b8:9b:eb:3f:aa:02:b3:90:a9:
         dc:b6:e9:24:60:32:77:b6:4a:a5:1a:75:3a:06:fb:32:47:f9:
         f5:cc:e4:1c:8d:76:08:2e:e5:09:1b:8c:f1:e1:77:e8:c6:99:
         d3:a6:aa:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBkkscLD8vB6GYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTI3ZGUzNDQtMzAwNS00ZTM1LWJjMmYtNmU1N2Y2ZjlmNjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS6+oRgB0TxTFuO8xZIwiGKXiPYplRA+Msna
L4vFHcpMDVs2xpxnurTBmqBGYP27TyhV5D/Uh6ZaXeeka48+7ZmpndL5dVsG+HpY
d5jiwCjeaOYfqG7TAPK+SiP0pcRvagME7y7QW9QwRfYnOAleFoY4bBrS1X3dWFe6
p/ZuwE4KANHgQh4aEvScGsFPOBS2SI6IIsWwhlPza52HR+XN8ncV+YH5rOpYYSCv
sd2erL3oBXvg9hro9Xb6NlNWFXAQzmkOk0a47Mq0SuT8rgkhZapba2zWQSbVCWJM
oj0O+TTcLD6LTppMP3XUVdZIguM/PLJ25cNAdOoK14GM8UA+cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI7ojJusEOVy3Bjjqrzle9SqQhyfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGM3Y2IwOTctOGM2Zi0z
NzE0LTkxYzMtOTM1YzkwOWUzZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABf6CLTHXPRa4XZw4mUohofilLRCADwr2KchHvOCuNHS41gGbVvE
cuI95XoNoOPunbnyD5wiy8UeigQxCcqWAvs4MXkuuODvE5tGKSG/UdXq0FA6p7OZ
MbV6FHN48CiGI6mn8eb82gKsz9fDVusAy5qlOp2V/YEtjK3StvRrSdjKz2l9eGxU
dMyUlQ2YiAF2aOzCtSp3s4hsyapOA+tYWljKcjN8RhSpC7na7iCJSIBUX6kbqt9v
6PFqi8BnNa12lhH5STI3moB2L9C3dVM5JLib6z+qArOQqdy26SRgMne2SqUadToG
+zJH+fXM5ByNdggu5QkbjPHhd+jGmdOmqlM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:15 2026 by rpki-client