Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa
File:                     b30d8df0-1f48-31e1-a05f-8db841a6372c.roa (raw, json)
Hash identifier:          4yQOhNYr1jO1xw8SItuNulPQBSHXsZ/N+3enYDCyX6A=
Subject key identifier:   85:CD:30:D3:5D:27:AE:87:17:50:37:3F:22:A6:3B:0A:1E:D9:9B:EB
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D747014CDED264787B0976480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397215
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:14:cd:ed:26:47:87:b0:97:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=c18928f7-9f86-41dc-979c-6193deb98379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:77:4f:08:1f:4f:2b:81:bf:d7:bb:fa:b3:
                    3e:06:c9:e9:4f:f0:b2:93:13:c9:fe:b5:2f:52:06:
                    39:dc:01:26:e3:fc:66:fc:90:4f:56:ca:5f:f6:50:
                    f1:e1:1c:b3:b2:b3:7b:74:14:dd:06:26:93:a9:d3:
                    51:52:dd:ef:3a:6c:df:9e:03:89:71:3f:e7:d5:87:
                    c0:65:12:e5:79:2e:40:e6:12:c1:b1:d6:71:cc:de:
                    50:67:45:8c:a9:f0:a6:92:ac:be:f3:f8:5b:d0:8b:
                    55:df:e9:de:88:da:a5:a0:91:5c:93:c2:dd:91:b1:
                    35:49:f4:64:b5:51:ab:c5:8f:cd:f9:a2:41:22:92:
                    d1:9a:14:57:41:40:f9:3c:97:e1:67:22:87:7c:28:
                    f2:a0:21:25:fa:fd:e0:3f:df:94:37:99:3b:06:2d:
                    00:ec:f3:ed:a7:de:61:5d:de:13:f5:d0:cf:7f:ae:
                    69:a6:b0:5c:84:c5:d3:1f:28:d8:88:fa:9d:41:0f:
                    84:26:1f:f6:15:3d:b3:b5:45:de:58:66:fe:90:eb:
                    94:e2:b9:e7:1f:9a:f7:ba:90:9f:5a:ef:a3:6c:fd:
                    93:a5:89:90:da:00:db:29:3b:c5:f6:a0:b5:5f:6c:
                    5e:fc:2d:90:f6:b0:50:09:29:a2:73:81:7e:d9:0c:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:CD:30:D3:5D:27:AE:87:17:50:37:3F:22:A6:3B:0A:1E:D9:9B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b30d8df0-1f48-31e1-a05f-8db841a6372c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8d:4a:be:ff:12:5c:83:25:90:1b:a1:16:59:5f:60:32:6d:
         59:b4:b1:df:1f:f3:83:39:5e:b8:b6:ec:37:e7:7d:03:86:b6:
         ad:0f:45:0a:98:f3:dd:ff:e4:c6:17:18:92:02:6c:4f:c2:a1:
         95:b3:92:9e:ab:4c:d2:14:e3:63:d5:33:18:be:58:1a:e2:a2:
         ff:e7:56:d3:48:19:77:db:63:8d:ac:60:71:4d:b1:3d:0d:57:
         5b:a8:c6:0e:94:f4:43:3c:f1:c1:17:46:36:77:3b:bf:90:22:
         5b:08:db:86:82:1f:98:a5:a8:92:2f:f2:5b:32:bc:73:9f:16:
         73:93:fe:9e:de:3f:b0:0e:2d:f7:de:48:95:d2:67:d7:c9:b3:
         8b:82:b1:b4:a8:29:0d:30:f3:90:ac:3d:0a:88:99:7f:40:12:
         3a:1b:bf:4a:38:69:d1:bf:ff:17:fa:d9:2b:61:e0:3f:75:08:
         69:4a:69:dd:0f:87:d5:af:35:e2:80:cf:40:42:b9:7a:da:ff:
         61:c9:96:3b:a0:34:c0:d5:03:6a:1c:0b:22:f4:83:75:2c:fe:
         24:9d:28:7a:22:74:c7:cc:02:a8:38:7c:0b:7c:10:0e:ba:9b:
         92:19:4e:83:30:67:56:53:0b:10:fb:93:07:ad:3a:f5:d0:98:
         98:6a:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:01 2026 by rpki-client