Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
File:                     ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa (raw, json)
Hash identifier:          rBbRnmHsL1DUfhgohtMnwyO1w9iLIQusCy/rQLwdSBE=
Subject key identifier:   BF:E3:D3:EF:F0:3F:39:77:9C:9D:7B:CF:86:DC:10:32:22:64:18:74
Certificate issuer:       /CN=8461abaf-8773-4e40-ad91-9135219be7a4
Certificate serial:       010D0C9F4328584D9E501A3A6AC1904625041140
Authority key identifier: 1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     7324
IP address blocks:        2620:c::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:1a:3a:6a:c1:90:46:25:04:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8461abaf-8773-4e40-ad91-9135219be7a4
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=431dad10-3eae-49cc-961b-68dcaf0bbec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:7d:36:0c:77:90:71:71:3a:ec:6c:33:b0:
                    a8:16:8a:3d:bf:14:28:0f:f2:03:5b:05:a3:50:70:
                    b9:b9:cf:ed:b2:06:ce:b9:96:07:5c:6b:71:70:f6:
                    85:e0:3a:ca:8f:45:58:c2:2c:3d:09:97:70:f6:0d:
                    5a:74:8a:33:f4:ac:87:c8:2f:26:48:c8:98:7d:12:
                    c5:db:4e:37:12:54:2d:1c:0e:c4:6d:38:3f:1f:0d:
                    89:b0:c0:30:fd:d0:fc:c5:74:70:6f:48:17:aa:87:
                    a3:45:1e:75:2b:e3:c8:01:17:f9:8b:c6:ef:80:ce:
                    1e:b8:50:46:b4:15:1d:b7:52:57:c3:df:57:c6:0f:
                    87:0a:1c:50:4a:5f:9d:2e:b4:a2:20:b3:5c:6e:15:
                    ef:d9:0e:5e:ca:37:ab:99:6e:63:bb:f9:e2:68:71:
                    5f:87:a0:29:e5:bf:84:ac:d2:48:92:56:c2:fa:98:
                    f9:e6:67:7d:5b:23:f5:6a:38:45:c1:47:c9:32:8d:
                    46:58:78:b0:6c:60:51:83:66:83:94:35:cb:b0:05:
                    98:89:8a:1c:f6:c9:a6:37:39:7b:3d:0d:cd:82:c9:
                    41:06:a5:53:96:2e:5e:55:2b:0b:55:5c:52:8b:d4:
                    1b:58:c4:d3:21:ec:a8:d5:93:c1:b5:c1:0d:2f:3a:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E3:D3:EF:F0:3F:39:77:9C:9D:7B:CF:86:DC:10:32:22:64:18:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/ab4ae19a-1bc3-3ce7-b813-35939fcb77e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4/8461abaf-8773-4e40-ad91-9135219be7a4.crl

            X509v3 Authority Key Identifier:
                keyid:1A:BA:E0:13:0C:54:22:7E:8D:CE:29:E4:73:98:C4:65:1E:5D:DF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8461abaf-8773-4e40-ad91-9135219be7a4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:12:b7:35:e7:55:7e:dd:78:e0:8e:66:d8:e6:99:12:9c:5c:
         5b:f8:27:f5:e4:ce:02:ec:a5:80:c6:e2:c3:69:55:9c:d8:62:
         cb:3d:4c:78:c5:00:b2:c5:9d:f4:fe:35:56:ef:c8:f2:1f:f7:
         b2:c8:e3:8d:d0:8b:95:c2:8d:1d:f7:fa:32:ed:cc:19:88:d3:
         59:b8:20:a7:0e:8a:2d:d4:83:f6:f9:d0:34:73:ee:48:32:b1:
         60:49:91:1f:00:ad:d2:a6:8a:20:0e:ad:b3:b9:6f:32:5a:48:
         6d:50:9c:a6:1e:68:3a:93:32:5f:9a:5f:0a:bc:0f:1d:5e:52:
         ab:72:33:92:23:29:7a:fe:d0:f3:d0:10:ec:21:03:a2:af:b1:
         4c:81:bd:1b:da:25:05:d9:af:d7:dc:24:d5:94:67:5b:f2:1b:
         2d:65:a4:5d:39:17:aa:b5:ab:58:30:17:ca:43:33:fc:a4:72:
         70:33:80:32:9e:cb:f5:1b:b3:86:73:40:46:1f:67:f5:44:6a:
         f8:49:ef:a7:63:df:8e:83:25:9d:de:dc:c7:0b:f5:40:8e:df:
         49:6c:af:e4:ff:8d:ac:44:b8:ed:24:57:ee:43:1e:9f:5e:fa:
         c6:73:80:31:1c:80:c2:2d:6f:44:e9:44:b3:22:c0:9f:fc:86:
         eb:5f:03:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:33 2026 by rpki-client