Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0929ed96-02b1-342f-bd9d-13e0ba2eca00.roa
File:                     0929ed96-02b1-342f-bd9d-13e0ba2eca00.roa (raw, json)
Hash identifier:          Ehh35ZYg0LDUxmZyiXCKl3FTodmTzE841gzQcn892ls=
Subject key identifier:   93:19:90:42:13:34:57:08:E6:3C:37:9F:9F:53:9C:F0:04:F9:71:D0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DEFE8137FA7C480DA800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0929ed96-02b1-342f-bd9d-13e0ba2eca00.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397229
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:de:fe:81:37:fa:7c:48:0d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=64d3c054-d85a-4468-ba2c-39765af3e49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:64:89:6b:cc:1e:62:c7:ca:8a:20:68:b7:
                    aa:80:28:ec:82:84:61:c5:51:7c:67:53:e0:c8:a9:
                    9a:21:69:cc:e9:06:ec:bc:7b:4e:75:c7:58:b6:6f:
                    57:a5:9f:fb:f5:c3:ba:65:a9:60:6a:41:13:5d:21:
                    28:78:23:b9:5c:b7:42:3e:9b:bc:de:01:91:74:96:
                    c2:c4:2d:74:fe:48:8a:9a:4c:b0:5a:d3:98:19:4d:
                    2d:47:95:3c:13:21:84:85:0d:34:70:41:ca:ab:e3:
                    78:b1:63:ab:5d:a7:71:29:e5:fa:e2:91:fa:e6:a9:
                    07:17:21:aa:ea:36:31:0c:6a:29:cb:d1:e9:fe:c0:
                    a7:2a:97:e1:d9:cd:9a:1d:ce:bf:fe:05:ec:75:06:
                    8a:d6:0e:d9:aa:f3:a4:53:be:d1:28:a1:78:a8:46:
                    c4:4e:02:ec:02:1c:37:d8:82:c3:80:59:8c:bc:de:
                    fa:ac:2b:c2:03:03:da:cb:77:69:21:17:f8:dc:15:
                    0b:56:cd:77:40:41:99:c5:a7:e0:f7:15:46:ae:2e:
                    dc:c4:f0:67:e5:93:4a:46:d9:62:10:9e:d9:03:8b:
                    2d:07:a0:1b:6c:f8:27:c0:e0:65:7c:95:ef:b6:b2:
                    4f:35:af:11:02:b9:f9:9d:ae:83:7f:17:f1:b3:95:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:19:90:42:13:34:57:08:E6:3C:37:9F:9F:53:9C:F0:04:F9:71:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/0929ed96-02b1-342f-bd9d-13e0ba2eca00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:54:65:52:26:7e:11:83:f1:36:28:a1:ea:fd:0d:52:9a:
         32:25:06:6c:56:a2:e0:a4:2d:b3:20:79:4a:f9:a5:e5:fb:88:
         06:8d:4b:61:90:c2:5b:f2:b0:fb:a8:ca:83:f3:b7:fa:e5:ea:
         c1:41:c2:cd:d6:37:e7:94:4e:2a:2b:66:1a:c0:64:46:c3:7c:
         32:1f:69:b1:0e:c9:d1:46:bc:f8:49:6a:71:a5:e6:40:b2:03:
         7d:37:f6:9e:fe:b3:76:71:6a:97:6c:d0:46:d2:7d:55:70:3f:
         c9:bd:73:31:ee:a0:b1:69:c1:12:80:ed:1a:35:54:1b:86:82:
         06:9f:7a:06:ab:f6:c5:9c:82:98:95:00:d9:f2:73:69:18:51:
         d5:7c:5f:82:9e:a9:e0:f5:19:d7:b0:30:ab:8f:26:b7:12:45:
         64:a2:35:cf:6c:34:31:85:8b:e2:8f:56:5f:d7:77:c1:15:a0:
         5e:77:78:65:99:a2:d8:46:79:6c:ce:14:69:a6:b7:fc:7f:89:
         c7:e4:ec:3e:d8:a7:88:6d:fb:ea:e3:4a:e1:88:ca:91:11:63:
         b7:b7:c3:09:a7:f5:fd:c4:73:6d:0b:3a:f3:2a:0e:2c:21:bb:
         27:6c:23:62:d9:2a:b3:4f:f8:de:e1:82:22:97:28:e2:53:1c:
         4f:59:03:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UtN7+gTf6fEgNqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
NjRkM2MwNTQtZDg1YS00NDY4LWJhMmMtMzk3NjVhZjNlNDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xkiWvMHmLHyoogaLeqgCjsgoRhxVF8Z1Pg
yKmaIWnM6QbsvHtOdcdYtm9XpZ/79cO6ZalgakETXSEoeCO5XLdCPpu83gGRdJbC
xC10/kiKmkywWtOYGU0tR5U8EyGEhQ00cEHKq+N4sWOrXadxKeX64pH65qkHFyGq
6jYxDGopy9Hp/sCnKpfh2c2aHc6//gXsdQaK1g7ZqvOkU77RKKF4qEbETgLsAhw3
2ILDgFmMvN76rCvCAwPay3dpIRf43BULVs13QEGZxafg9xVGri7cxPBn5ZNKRtli
EJ7ZA4stB6AbbPgnwOBlfJXvtrJPNa8RArn5na6Dfxfxs5U9twIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJMZkEITNFcI5jw3n59TnPAE+XHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMDkyOWVkOTYtMDJiMS0z
NDJmLWJkOWQtMTNlMGJhMmVjYTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmeVGVSJn4Rg/E2KKHq/Q1SmjIlBmxWouCkLbMgeUr5peX7iAaN
S2GQwlvysPuoyoPzt/rl6sFBws3WN+eUTiorZhrAZEbDfDIfabEOydFGvPhJanGl
5kCyA3039p7+s3Zxapds0EbSfVVwP8m9czHuoLFpwRKA7Ro1VBuGggafegar9sWc
gpiVANnyc2kYUdV8X4KeqeD1GdewMKuPJrcSRWSiNc9sNDGFi+KPVl/Xd8EVoF53
eGWZothGeWzOFGmmt/x/icfk7D7Yp4ht++rjSuGIypERY7e3wwmn9f3Ec20LOvMq
DiwhuydsI2LZKrNP+N7hgiKXKOJTHE9ZA4E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:46 2026 by rpki-client