Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91ec4a31-ec92-3568-8b3a-0d2dea790b96.roa
File:                     91ec4a31-ec92-3568-8b3a-0d2dea790b96.roa (raw, json)
Hash identifier:          WY21BrXA94jXDmb3yvGDXaXc7a95q2urPITWFV9Kro8=
Subject key identifier:   65:32:BC:2E:05:A6:D8:A6:AB:6C:AD:9D:BB:B4:3E:E5:FD:19:B8:D4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AF0071CB8541C1F34A28
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91ec4a31-ec92-3568-8b3a-0d2dea790b96.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397221
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:af:00:71:cb:85:41:c1:f3:4a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e7333efb-983c-4e67-95ed-33ea056df791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:82:55:9a:47:0f:94:ec:9f:0c:5a:1d:fd:
                    7f:04:eb:a7:75:e4:49:4b:70:e4:9b:44:a4:4a:92:
                    33:d7:53:1a:c2:e1:89:62:e5:63:a8:17:86:54:61:
                    8c:eb:2c:b5:ba:28:37:39:37:5f:4b:79:20:41:c3:
                    fd:e4:47:09:84:c9:1c:61:41:69:7d:77:0e:03:ab:
                    e2:38:dc:62:43:6b:77:26:28:43:50:cd:17:ef:92:
                    3a:20:fd:a9:8d:bc:e5:92:46:6c:45:32:fc:26:9e:
                    43:3b:88:a7:e6:be:35:83:fb:8c:01:58:ed:8e:f9:
                    0f:29:dd:d6:29:c6:5b:2b:bd:50:6d:6a:74:b4:e5:
                    de:8d:55:f6:10:bb:39:01:5f:35:c6:ae:2a:fd:0d:
                    d1:e2:9e:75:e3:2b:91:d4:02:e3:d7:d5:73:33:8a:
                    e8:5b:64:bc:a3:de:67:4b:9d:28:17:a2:06:c1:2f:
                    b5:df:71:a2:a5:98:a1:43:3c:95:3a:58:06:84:85:
                    2d:73:d9:1d:bd:0c:f6:cb:d6:f0:25:71:62:75:86:
                    fa:a4:e3:c5:a9:a1:72:1f:f2:8c:ad:ed:0b:35:97:
                    e2:b9:a9:a1:a2:80:63:84:d6:7a:2f:c2:8d:d9:f0:
                    e0:1e:f2:31:67:ca:c0:5a:e2:35:8e:7c:87:be:b4:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:32:BC:2E:05:A6:D8:A6:AB:6C:AD:9D:BB:B4:3E:E5:FD:19:B8:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/91ec4a31-ec92-3568-8b3a-0d2dea790b96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:1e:ef:1b:c4:e7:cf:9b:5e:ee:19:8f:d7:22:43:3e:81:
         c5:fb:03:7b:b6:04:b2:29:a2:e7:76:46:90:b5:9a:15:ed:6a:
         c3:68:64:9f:df:6f:fc:75:b5:2d:73:db:85:00:b7:6a:72:6e:
         54:37:89:e6:dc:5c:c4:12:58:44:b8:d7:74:83:e6:ba:f1:24:
         4c:da:c5:ec:b3:32:d6:56:84:0d:69:43:52:a5:6a:4a:37:f3:
         99:95:b4:14:09:f5:de:87:b2:e8:1d:1c:ff:d6:dd:6f:da:b6:
         8a:08:3d:31:3d:81:99:7f:cb:c3:8b:a7:d9:da:cf:65:ea:00:
         fe:52:49:29:98:dc:17:73:d0:1e:41:f2:dc:da:df:cf:64:5c:
         7e:c7:cf:7d:ec:e7:83:d8:2e:a2:a3:62:6d:0c:6b:1e:8b:f4:
         a0:23:a9:aa:4e:8b:56:66:33:a3:cb:87:05:a8:7e:2f:fe:aa:
         5d:94:79:b2:f3:45:c5:47:ea:7b:c5:58:99:67:89:91:9d:0a:
         00:04:22:47:90:55:6a:91:5f:a0:6f:a3:44:a8:83:95:46:14:
         d8:a4:39:ec:59:c0:d6:11:5b:7a:d1:2d:27:2a:c0:6a:5c:19:
         d3:08:43:6c:eb:65:60:04:0a:bc:8e:aa:ec:90:d3:08:06:0f:
         3c:a0:8b:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F68AccuFQcHzSigwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTczMzNlZmItOTgzYy00ZTY3LTk1ZWQtMzNlYTA1NmRmNzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9yCVZpHD5TsnwxaHf1/BOundeRJS3Dkm0Sk
SpIz11MawuGJYuVjqBeGVGGM6yy1uig3OTdfS3kgQcP95EcJhMkcYUFpfXcOA6vi
ONxiQ2t3JihDUM0X75I6IP2pjbzlkkZsRTL8Jp5DO4in5r41g/uMAVjtjvkPKd3W
KcZbK71QbWp0tOXejVX2ELs5AV81xq4q/Q3R4p514yuR1ALj19VzM4roW2S8o95n
S50oF6IGwS+133GipZihQzyVOlgGhIUtc9kdvQz2y9bwJXFidYb6pOPFqaFyH/KM
re0LNZfiuamhooBjhNZ6L8KN2fDgHvIxZ8rAWuI1jnyHvrRJtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGUyvC4Fptimq2ytnbu0PuX9GbjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOTFlYzRhMzEtZWM5Mi0z
NTY4LThiM2EtMGQyZGVhNzkwYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAq0J
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8+Hu8bxOfPm17uGY/XIkM+gcX7A3u2BLIpoud2RpC1mhXtasNo
ZJ/fb/x1tS1z24UAt2pyblQ3iebcXMQSWES413SD5rrxJEzaxeyzMtZWhA1pQ1Kl
ako385mVtBQJ9d6HsugdHP/W3W/atooIPTE9gZl/y8OLp9naz2XqAP5SSSmY3Bdz
0B5B8tza389kXH7Hz33s54PYLqKjYm0Max6L9KAjqapOi1ZmM6PLhwWofi/+ql2U
ebLzRcVH6nvFWJlniZGdCgAEIkeQVWqRX6Bvo0Sog5VGFNikOexZwNYRW3rRLScq
wGpcGdMIQ2zrZWAECryOquyQ0wgGDzygi3k=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:46:58 2026 by rpki-client