Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f265cb25-0477-3225-b417-e4878bd4b073.roa
File:                     f265cb25-0477-3225-b417-e4878bd4b073.roa (raw, json)
Hash identifier:          gAuJfBiFoPBpS18FXSMvglBbCTqWyk3uDAFFpg9qZBA=
Subject key identifier:   6A:98:DF:74:CE:89:EE:95:B7:80:AB:0B:F0:B0:BE:F6:F1:4B:37:89
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700C3C03427806E4EC1120
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f265cb25-0477-3225-b417-e4878bd4b073.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397235
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0c:3c:03:42:78:06:e4:ec:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=a25d85c3-5e39-445c-a627-0da66d70bb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:56:9c:e4:3a:9a:c0:39:bc:36:e9:d2:d3:27:
                    36:48:69:6f:a8:87:4d:cf:8b:f6:ba:a7:f7:00:89:
                    ce:28:8a:44:82:65:a7:5a:b9:08:7b:ac:d9:e9:0d:
                    07:27:42:e5:38:be:1f:64:74:62:48:87:3c:ce:96:
                    25:62:24:ea:97:d9:96:3c:55:48:be:25:d9:79:5d:
                    67:d5:38:d1:cf:7a:b5:9b:3b:2b:b0:73:2c:90:a8:
                    ab:ad:16:20:ab:08:fb:1f:2e:a2:cd:91:76:5b:82:
                    bf:fb:8b:59:c7:9e:0d:fe:18:e2:a7:8c:81:2d:8b:
                    7f:95:e3:bc:ca:97:80:3a:83:10:a1:b1:2e:a4:5c:
                    d4:21:d4:ca:bf:02:85:36:9b:6d:93:71:da:e0:65:
                    25:78:c5:03:3c:17:9e:16:48:70:81:24:67:d1:65:
                    42:17:99:71:ef:68:cd:68:22:cf:1f:c8:4d:8d:9c:
                    a9:da:fe:1e:00:5e:40:d5:a1:d6:76:eb:a4:89:7f:
                    17:2b:1d:f4:e8:f9:2d:d0:88:09:25:99:36:ae:9b:
                    6c:cf:99:4f:38:65:44:c0:83:e6:c6:5b:61:60:76:
                    be:ce:38:a6:e9:95:64:5a:bf:82:f4:40:cd:a3:2a:
                    25:ec:b2:bc:42:1f:12:8c:5d:f7:02:1e:d1:25:82:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:DF:74:CE:89:EE:95:B7:80:AB:0B:F0:B0:BE:F6:F1:4B:37:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f265cb25-0477-3225-b417-e4878bd4b073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:da:92:49:94:5f:7a:13:e6:78:72:44:9c:9c:5c:b8:62:5a:
         dc:91:74:7e:a4:a0:7d:2b:b3:18:0c:8b:fd:bf:d4:b4:ef:e1:
         1f:68:ea:5f:5f:96:9a:bb:1d:c4:0a:2d:67:a9:46:d0:77:d5:
         40:b7:a1:0b:fa:af:2f:5f:9b:5f:71:47:37:4d:20:15:fc:7a:
         d2:ad:e1:3c:5c:28:1a:68:57:fc:65:6d:bf:0d:6d:5b:34:e1:
         95:bb:00:9d:dd:af:55:46:57:1f:70:5e:58:55:58:13:08:66:
         04:55:b2:7b:f6:f2:cb:42:2f:f4:2c:f4:74:33:39:ae:d1:2d:
         95:46:9c:c9:01:5d:4b:02:1c:98:be:2c:e9:a9:c0:94:6e:91:
         a6:cd:8e:00:82:23:27:e8:91:17:ee:57:22:78:7f:b6:2e:25:
         f4:dd:9b:3e:d6:17:45:27:a3:65:8e:4b:85:c9:ac:46:0f:18:
         a1:8b:ca:a0:ef:48:4c:c8:f0:6d:db:cb:d5:85:8d:2d:f3:45:
         b2:13:72:f9:92:89:82:d9:cc:09:55:c8:a4:bd:b8:48:a7:d8:
         d1:43:7c:ef:5f:c6:ad:73:bb:6e:62:81:cc:c5:ee:02:32:0c:
         87:b9:52:d6:ea:a7:cc:b7:70:e4:43:60:fa:32:b4:c8:d5:fe:
         2f:4d:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:20 2026 by rpki-client