Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa
File:                     b28d69dd-ffd8-3970-bec5-e5be78181138.roa (raw, json)
Hash identifier:          DH6UAUgUvyYw5N7bhH298LxhfWooHJewvEXpL9aWVsI=
Subject key identifier:   57:44:E9:8A:59:28:DC:55:22:C0:AB:E5:2D:D7:2D:EC:54:AE:FF:94
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AF2217AC53F4BC319500
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397224
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:af:22:17:ac:53:f4:bc:31:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=ff4ccd5d-8fc1-4dee-ade3-b71c2dcc6e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:34:b4:18:5d:61:22:39:02:25:91:b1:69:
                    ff:07:31:98:d6:1b:0e:e5:34:82:63:19:eb:64:b6:
                    1d:e2:84:2a:9c:b3:8b:fb:91:33:5d:de:f5:b6:0d:
                    31:64:b8:db:ea:e8:d2:73:57:54:5f:44:7e:4c:30:
                    86:8c:b8:94:30:64:83:ea:17:ef:76:bf:59:89:52:
                    39:8d:7c:36:87:91:1c:96:36:cb:02:e9:e3:ce:f9:
                    07:c6:d9:41:36:07:06:5f:04:77:1c:a7:b4:94:c3:
                    e2:6c:0d:13:35:84:4f:83:9c:3d:f0:4d:33:ca:39:
                    b8:09:6d:7d:8b:22:b1:9e:30:47:6c:df:30:3a:03:
                    8f:ce:f8:38:18:a2:8f:b0:f0:ea:24:be:47:30:80:
                    2d:ce:50:47:6e:4a:56:82:0b:45:9e:a1:c5:88:ff:
                    6e:58:fb:40:6f:25:00:a4:91:7f:8b:30:dc:cb:bc:
                    49:52:61:b6:89:60:c9:7d:ba:63:f3:9a:73:8d:64:
                    21:29:98:29:d3:b6:e8:55:57:11:ec:f9:8b:f2:ac:
                    f8:33:0e:3e:25:b5:c0:15:49:b9:fe:ec:20:3e:ec:
                    8f:ea:c4:82:db:1d:99:e2:f3:cb:4e:6e:5b:5e:1c:
                    3e:dc:c6:72:7b:11:0b:8c:94:6b:43:90:3d:f9:25:
                    33:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:E9:8A:59:28:DC:55:22:C0:AB:E5:2D:D7:2D:EC:54:AE:FF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b28d69dd-ffd8-3970-bec5-e5be78181138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:e4:49:63:e9:19:ac:05:c8:f3:73:50:bd:d1:3f:1b:75:71:
         17:66:5e:b1:df:08:37:d2:b5:6e:69:6b:87:4f:fd:b9:f5:6c:
         b3:71:bd:eb:9f:80:f3:44:90:6f:ee:ae:45:46:48:a2:36:74:
         ce:95:d7:7f:27:92:82:d8:e3:ad:72:56:f1:e1:64:13:e9:7a:
         62:36:4b:51:ce:12:24:cc:0f:33:06:7f:4d:4e:e0:10:68:8a:
         45:89:18:f0:33:86:ca:d7:b8:ea:0a:97:4a:16:9e:d2:fa:bb:
         4e:e5:a1:bc:61:cd:b9:b7:41:a6:58:14:b7:7b:dc:d9:9c:8b:
         3e:a0:10:8b:9a:c5:c4:ca:f1:3e:da:eb:d5:21:c6:11:0d:34:
         89:b0:7d:b1:36:ad:b0:1e:f8:5e:2a:71:7f:e0:f4:a0:24:b0:
         7c:a7:c6:84:5e:45:dd:d0:23:07:cb:13:1a:76:24:2f:0a:b4:
         9b:ea:65:38:ef:50:e9:4a:6c:62:55:84:ab:bd:cf:cd:cc:e5:
         05:5d:19:9f:1b:ea:ed:9f:32:76:e5:05:8c:2a:57:59:9c:44:
         9a:7f:87:62:a1:b6:74:cb:42:f5:53:81:d0:50:c0:bc:ae:e0:
         ed:e8:6a:3f:42:4e:c2:58:a2:ca:4d:cb:30:5d:5b:b9:8e:14:
         f9:a8:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:00:32 2026 by rpki-client