Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0226457-1b2c-3a63-9257-a3257953bdb2.roa
File:                     d0226457-1b2c-3a63-9257-a3257953bdb2.roa (raw, json)
Hash identifier:          hf1ZOLkgziTEPK7wcrj2e6ICscibZX9QXOOglwmVb10=
Subject key identifier:   B9:6F:6B:CD:03:F2:82:1D:DE:19:EC:0F:B0:F9:7F:99:AA:92:4E:D3
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AAB9F8CA308569979300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0226457-1b2c-3a63-9257-a3257953bdb2.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397225
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:aa:b9:f8:ca:30:85:69:97:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=cae8481d-a839-4627-a24f-06d8fff7c405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:b0:41:10:ac:c8:cb:26:81:1a:a8:69:12:
                    a0:11:51:0c:e5:94:cc:b1:9b:af:3b:e2:ae:9d:27:
                    87:2e:53:f2:4b:d7:68:d0:27:2c:58:96:3e:57:56:
                    b1:ff:09:12:b5:92:f8:d5:7a:f4:6c:3e:ea:b6:f9:
                    02:dc:c4:56:e4:12:0e:48:d1:44:65:19:bd:c1:e8:
                    57:7c:07:d8:24:ef:39:99:b3:5d:a3:79:2d:19:8b:
                    f2:c5:18:55:a4:bd:fe:1e:b5:54:49:5d:ad:a3:1f:
                    c8:fd:a8:da:79:d0:32:f1:5b:98:e5:f9:48:49:54:
                    c2:08:4d:78:4b:af:8f:88:97:93:a7:ee:74:93:73:
                    2c:ea:88:5f:92:c0:5d:41:5d:e8:10:e0:3d:06:2f:
                    b5:0a:ad:c2:c5:a4:a2:0c:d0:61:fb:ae:6b:c7:42:
                    9a:29:a7:f8:f8:95:b4:23:bc:8c:1a:b3:e3:56:41:
                    8f:34:d8:83:b9:8d:c6:38:09:96:92:e5:07:c7:4f:
                    97:6c:77:87:ab:5f:fc:26:42:85:a6:d8:d6:54:d9:
                    0b:4e:42:d7:a9:2d:76:0d:93:78:34:88:28:de:3f:
                    a6:31:51:7a:e8:89:45:4b:2d:63:26:3e:44:bd:87:
                    b0:d4:b9:48:f4:1c:64:81:3d:70:5a:b5:c6:a1:19:
                    d8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:6B:CD:03:F2:82:1D:DE:19:EC:0F:B0:F9:7F:99:AA:92:4E:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d0226457-1b2c-3a63-9257-a3257953bdb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:df:a7:08:ce:95:20:cb:ce:d5:3d:ee:2a:e7:cb:50:c3:13:
         7f:3d:89:4f:56:c6:f0:57:1d:32:c3:cc:b4:45:77:cc:4c:ad:
         a6:ef:ad:6a:96:b9:93:9c:af:d1:e2:62:24:29:6f:bd:97:e7:
         52:7a:dd:7f:b6:34:9c:43:aa:5b:fb:50:03:27:f4:5e:c6:91:
         19:c3:55:bc:6d:c6:34:05:0f:36:00:5f:26:cf:ad:32:23:a3:
         b7:59:31:8d:62:cf:9c:66:ed:88:a7:e9:d3:9d:28:5d:cf:d1:
         82:c5:8e:9d:15:a7:0d:78:95:a1:fe:05:77:d6:fd:02:ea:b6:
         d1:4b:ea:2c:e5:cb:1d:5a:83:48:46:28:ce:0c:6f:48:f2:28:
         1c:f6:50:5f:68:c5:16:0e:8f:1f:91:46:ef:bd:9a:74:45:38:
         58:d4:80:9d:d9:17:ca:51:be:21:df:55:d9:16:ff:b5:1b:0e:
         a1:42:cd:f3:52:f2:bd:6f:7e:d7:8f:b0:4d:44:47:8c:2e:a4:
         ed:a3:89:f1:9d:48:46:2c:d9:a6:3b:56:cc:39:0a:3d:57:11:
         b2:dd:3b:64:70:1a:14:07:0b:f9:59:a6:52:cf:81:9a:da:78:
         9d:15:6e:16:50:e1:04:e7:e4:09:bf:f5:c7:1d:b4:e7:f3:55:
         35:83:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:35:39 2026 by rpki-client