Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
File:                     9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa (raw, json)
Hash identifier:          tpg8ExahC7jQQ/kVlqTDptm3r3C2K6fO4B7Rs9ZRC7w=
Subject key identifier:   D0:AE:02:B7:3C:7F:58:D9:7C:BA:9D:A6:8D:20:21:7C:C3:F4:6E:F7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700EB4ADAF97164222D100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397221
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0e:b4:ad:af:97:16:42:22:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=1ab89285-1d54-4a1e-99f8-8ae54f747096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cb:bd:a2:c9:ff:92:0e:a2:d1:81:52:c2:9d:
                    a2:9a:c2:28:51:66:3f:52:bb:ab:d1:dc:17:39:53:
                    31:2e:4c:5f:11:6d:b9:a7:71:7d:56:34:06:6e:4e:
                    f9:69:c5:4d:16:17:e4:49:58:84:92:39:42:ee:54:
                    62:cd:51:a2:01:bb:31:59:78:05:29:96:24:81:d2:
                    db:dd:35:41:f4:c4:85:63:b1:41:21:b2:73:9e:70:
                    ee:c1:4e:01:78:20:b6:ca:59:bb:be:b6:b5:e7:37:
                    d1:c7:c2:52:b5:f0:ce:b8:33:85:8a:47:69:be:df:
                    7b:eb:47:0b:e8:97:3e:a9:80:10:6c:05:2d:e1:99:
                    98:14:1b:68:62:64:4e:d5:61:8e:c9:49:12:0b:8c:
                    a9:5a:f0:46:9b:63:da:98:2a:9b:03:ba:7f:ee:90:
                    e8:54:c5:b1:ab:29:b3:17:a7:21:64:d6:ab:f6:68:
                    da:1d:48:23:fc:b3:66:15:0f:31:4e:9e:d4:d8:2b:
                    03:d4:fe:5e:68:37:f3:c0:6f:0e:fe:f3:ab:62:ec:
                    d5:b2:7b:72:4c:18:6f:94:19:b7:38:d2:54:6d:63:
                    75:a9:5e:da:7a:dd:69:00:73:05:0d:e7:d9:03:73:
                    58:e0:4c:ef:24:e9:2a:9f:c0:e8:85:88:b4:ea:6e:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:02:B7:3C:7F:58:D9:7C:BA:9D:A6:8D:20:21:7C:C3:F4:6E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9ffad9b7-e774-3db4-ad67-e0c56d3594e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:86:f5:2d:2c:6c:f9:d2:c6:94:70:85:8b:fc:7d:b7:76:aa:
         a4:c9:ac:32:14:00:ee:43:d9:3e:2d:3a:e3:ef:d5:38:09:01:
         80:e7:46:29:2e:11:9d:1b:49:c9:02:b5:98:30:00:04:4e:0e:
         8a:51:b1:f0:59:e9:48:31:5a:8a:85:d2:a1:c6:3c:5d:98:68:
         de:2a:af:1d:9a:c6:be:72:ad:1a:c0:02:a3:04:d8:70:3a:50:
         c4:02:ff:ae:ce:1b:fe:e1:bc:d9:e4:9c:e9:38:16:a6:17:26:
         11:98:18:04:e2:da:a3:fa:d4:15:ab:0c:fc:4e:00:a3:a2:b2:
         53:8f:8f:60:f6:26:48:e4:7c:36:db:ff:2d:d7:97:92:0b:5d:
         87:2e:4b:9d:45:b8:14:f7:96:de:95:f5:61:72:c7:e5:28:4c:
         de:ca:08:45:d5:aa:58:3a:f7:2b:e0:5b:f1:8c:9f:94:f6:b3:
         f0:07:34:fe:c0:c1:ab:3d:c3:03:16:41:ea:9b:f0:1d:10:d5:
         fc:0f:16:6d:b4:97:7e:b4:5d:a9:aa:41:83:68:3f:e9:39:3f:
         b8:03:df:4f:19:f6:b1:2d:85:96:11:35:75:ee:2d:c7:4e:a8:
         fc:4e:30:dc:87:78:da:75:5f:1d:83:18:26:72:b4:d8:84:d2:
         2a:fa:40:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:39 2026 by rpki-client