Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1208c968-61ab-31a5-b45d-3b0a6ca9b31d.roa
File:                     1208c968-61ab-31a5-b45d-3b0a6ca9b31d.roa (raw, json)
Hash identifier:          JOL3yHn/B2wV/+oVqIil/Zre3bK/m2JRaoRUfMaVpFE=
Subject key identifier:   1D:BF:A5:0F:02:2D:FB:13:42:31:93:4B:8F:48:1D:DE:D8:E4:52:F0
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E9A656FE6BC7F3391D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1208c968-61ab-31a5-b45d-3b0a6ca9b31d.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397243
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e9:a6:56:fe:6b:c7:f3:39:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=545af906-84c6-450a-8558-6c6296f0f59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:be:6f:e8:1a:4c:f6:6d:22:cb:4f:e5:d8:
                    49:35:ac:c4:5d:96:bb:74:12:c4:06:1e:df:bf:2d:
                    1e:90:3b:56:22:45:d7:9c:b3:48:23:b8:2d:a0:b4:
                    99:1d:c0:91:a2:57:16:55:5c:9f:15:a9:74:75:67:
                    6d:a0:46:7d:8c:e4:7c:fd:5f:6b:39:65:d4:92:58:
                    3f:05:39:88:3d:62:34:aa:41:f7:e2:3a:c6:28:d1:
                    86:20:76:8b:dc:d5:c5:bf:4f:8c:75:ce:b3:2e:4e:
                    07:e4:89:66:87:db:23:35:05:30:a0:c6:a8:bd:13:
                    87:50:9d:d3:8e:44:76:82:7d:4c:a5:cf:4c:0e:b5:
                    16:ce:81:fa:70:2a:5c:a7:83:69:8f:43:1b:45:ba:
                    64:d2:d8:c6:7f:ad:0b:12:5a:fc:56:d8:27:cd:72:
                    b0:a5:01:53:aa:0e:16:3f:9f:70:67:ba:bf:33:f4:
                    a0:59:e3:17:e1:1b:38:f0:65:0a:ab:69:c8:ba:c6:
                    f1:0b:4a:61:95:20:85:ec:71:5d:64:a2:61:74:80:
                    e9:e0:f8:e0:b9:ce:15:d6:2d:e9:ab:9c:58:a2:20:
                    07:54:fd:1d:74:d9:4f:29:c6:7a:20:bf:09:06:eb:
                    41:51:92:e6:61:34:0e:12:41:12:37:68:8a:96:e8:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:A5:0F:02:2D:FB:13:42:31:93:4B:8F:48:1D:DE:D8:E4:52:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1208c968-61ab-31a5-b45d-3b0a6ca9b31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:03:6d:01:22:e0:60:0b:41:1a:be:f0:0e:32:60:40:8c:b7:
         60:55:93:30:fb:26:59:59:cc:53:ce:e1:0f:3b:5a:9b:8d:37:
         50:09:11:5b:aa:64:0e:06:6f:c9:68:f3:d0:f0:62:28:e7:46:
         c2:5b:a8:9d:c8:cd:19:ce:6e:9d:ca:63:03:33:f0:af:f9:c0:
         57:b5:bc:a0:0b:9d:c3:d5:81:74:fc:f2:f2:d3:6c:1c:8a:6c:
         8c:38:e3:df:ee:a9:4c:85:e9:15:88:8c:c8:34:49:57:d7:eb:
         78:cd:7e:6a:5c:cd:d9:da:43:9a:dc:93:37:5f:6c:44:1d:49:
         4a:bc:d8:8c:3e:42:e3:df:19:fd:34:73:d2:b5:23:1f:17:c4:
         86:f4:84:13:54:fd:7b:bb:ad:ab:1d:2e:ed:08:84:6c:32:49:
         37:50:2b:81:0b:4d:9f:7f:57:55:12:a6:87:a1:42:23:40:b9:
         a7:a0:21:6f:0d:ca:e0:71:b7:f9:9b:2c:68:c5:6e:68:54:81:
         49:3d:37:51:64:88:ff:93:d9:9a:80:12:0c:bf:67:08:d8:d4:
         f6:38:db:a5:a7:a7:69:cf:df:e9:bb:10:50:3f:75:d4:4c:b1:
         17:56:a8:8c:54:04:4f:0e:e5:3f:da:bd:10:51:d3:0c:a1:00:
         fd:da:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:23 2026 by rpki-client