Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c6ed652e-97cc-3100-a609-1304e179ff3a.roa
File:                     c6ed652e-97cc-3100-a609-1304e179ff3a.roa (raw, json)
Hash identifier:          RabomCzUt5dTjhs7GmL+zRstQMwGgFRQpOVGz6oqwCc=
Subject key identifier:   1A:B9:5D:C3:29:30:19:85:D9:3E:49:48:12:D2:E1:E1:4F:F7:3D:8F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717B203551BD138D6201B40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c6ed652e-97cc-3100-a609-1304e179ff3a.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397224
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b2:03:55:1b:d1:38:d6:20:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=b87ee4f2-3b92-4482-a316-1382074a5888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:56:74:e2:a6:26:2a:0b:5a:8a:2a:31:1d:
                    c0:02:7b:da:af:3b:63:50:1f:1d:58:5a:09:c1:b6:
                    91:45:eb:ac:1b:7b:d8:3a:6f:e9:b5:8f:4c:73:4c:
                    5d:78:e3:50:d9:92:02:52:58:cc:2b:55:42:91:c6:
                    b4:10:98:00:0b:e5:6b:27:06:47:af:95:64:f6:e0:
                    1c:ef:2b:31:ed:ee:8f:d2:7c:31:53:34:ba:42:2a:
                    3f:31:91:28:1b:25:31:f4:b5:3c:a3:c0:30:68:c7:
                    e8:f4:9a:8f:bc:6d:fd:40:4c:41:b9:13:9a:e8:28:
                    3f:02:9e:48:9d:d2:29:6f:54:1a:b7:be:c2:e1:ee:
                    f5:f3:fb:fa:82:a2:81:3d:05:15:52:66:d5:e8:a0:
                    7e:dd:f6:b1:82:87:fb:4e:10:a4:5f:c6:28:ae:75:
                    eb:c1:2c:f1:1b:de:51:14:48:14:86:94:f0:20:1b:
                    c6:45:71:09:ce:7b:41:eb:8e:27:b7:5e:01:16:d6:
                    af:5c:c2:dc:f6:40:43:2e:a8:75:4d:de:4a:e0:bb:
                    fa:ae:3b:57:86:d6:31:43:33:ff:b3:a0:9f:1f:84:
                    aa:ef:6e:94:8c:e5:fd:15:97:32:9a:c3:af:2b:72:
                    0c:a6:77:23:c7:62:b4:57:ab:e4:a7:dc:01:5c:fd:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:5D:C3:29:30:19:85:D9:3E:49:48:12:D2:E1:E1:4F:F7:3D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c6ed652e-97cc-3100-a609-1304e179ff3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:58:ad:c3:1c:e7:03:22:3e:d3:3c:4f:9d:49:88:58:bb:1d:
         53:78:ca:c0:07:38:fa:53:86:db:23:db:d7:ce:e6:2b:0b:1d:
         92:44:32:99:47:fe:8a:0d:26:17:9c:7b:0d:a2:2a:5e:7e:44:
         39:8d:35:39:80:f7:cf:18:b8:25:bf:32:0a:f7:e1:f4:a7:db:
         17:1a:ef:aa:f5:f8:f6:e8:42:2a:68:df:ef:45:ec:7e:58:85:
         54:5b:5d:7d:86:44:7f:df:5e:58:ca:b5:41:84:bb:ac:62:b4:
         c7:80:cf:dc:11:8c:db:ce:0b:5c:1c:3e:57:ac:b2:22:10:41:
         c2:7c:1c:ab:b5:eb:a6:e3:cf:14:45:27:89:6d:11:64:ee:cc:
         7e:59:60:28:52:64:dd:d8:da:df:ee:80:6f:03:b9:30:f0:58:
         6b:86:67:e6:6a:a4:de:c7:07:ae:87:eb:7d:f0:33:7d:30:df:
         eb:9f:db:8b:39:43:18:73:57:c2:53:85:65:b2:0d:60:d6:68:
         d7:16:e9:41:50:1f:a6:cd:d8:a2:47:12:f3:a6:f2:1a:16:cd:
         b4:f2:74:65:d9:eb:35:fb:44:5d:6e:77:6b:67:df:14:7d:6a:
         4b:80:be:4b:f7:03:78:86:70:32:85:26:d0:1e:27:42:e2:0d:
         ed:92:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:33:02 2026 by rpki-client