Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
File:                     1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa (raw, json)
Hash identifier:          hdWBukPHgSy5dbf7mEa8TQj8gZ668FxAQT1BNOigx94=
Subject key identifier:   58:2F:B4:26:DE:80:99:83:A7:3F:56:6B:58:52:FC:AF:D9:01:92:E9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AF9D227DFB71740DEFC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397235
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:af:9d:22:7d:fb:71:74:0d:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=c7934a8e-1870-4b3e-94f8-7048470281b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:68:97:b7:8d:0e:6c:ab:da:68:82:69:3f:
                    c2:6f:d5:43:c3:0e:87:00:75:95:ef:5f:ca:e3:95:
                    9d:01:6e:50:b9:a8:43:f2:3d:8e:3b:c7:43:1e:f2:
                    a2:2a:e6:bc:26:fb:bf:d6:81:e5:a1:66:2b:c0:9d:
                    65:dd:24:84:b2:ea:02:ce:27:36:fa:ca:88:05:b6:
                    8c:fb:57:c6:cc:1c:89:4b:d6:09:c6:e0:c2:2a:1b:
                    af:53:cb:24:89:18:b6:aa:a4:83:d4:ea:8c:21:9e:
                    80:fd:be:96:4e:12:7a:2b:8d:3e:c9:5a:c0:76:83:
                    e8:69:af:42:09:be:a1:59:11:78:88:03:a5:d8:f7:
                    e0:19:f6:8c:43:b3:03:48:67:10:7a:9b:e1:11:7c:
                    70:10:98:c2:2a:94:e9:6b:f4:3c:07:8a:c1:23:65:
                    87:15:ec:07:68:af:36:5d:22:8b:49:92:9c:10:24:
                    86:83:98:cb:0a:2f:b3:21:64:90:2d:47:ba:aa:9b:
                    83:5e:88:32:d8:b1:02:64:54:61:4a:f5:b2:f2:d1:
                    5c:37:cf:77:75:8b:f8:4d:2c:6f:b1:98:f9:9c:31:
                    72:16:36:7e:d6:0c:b6:46:29:8e:0a:d0:4f:1a:a8:
                    25:0f:a8:4a:d7:ec:be:9a:fb:2b:4d:26:62:99:7a:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:B4:26:DE:80:99:83:A7:3F:56:6B:58:52:FC:AF:D9:01:92:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:70:69:85:db:38:2f:01:a9:f7:14:1e:a8:f5:aa:03:5c:58:
         c2:87:71:72:8b:82:95:f5:ee:be:3a:cf:0d:a6:e7:6a:5d:b4:
         d5:a2:06:77:78:8c:8d:88:c9:07:20:9a:f7:e6:70:60:38:ec:
         52:2b:7f:ab:30:2d:09:cb:0e:9d:d6:38:47:69:93:71:4d:3f:
         4d:6b:78:f4:6f:36:4f:f6:85:d2:dc:92:7f:29:76:55:4d:87:
         d6:8d:3f:a4:67:45:5e:32:5f:bd:d0:7e:42:71:dd:25:3d:61:
         c4:69:95:62:35:af:60:e5:d6:70:2c:57:ca:3a:54:14:f8:d5:
         52:25:34:c1:fa:40:a7:fe:f1:07:ab:2c:cf:29:65:58:bf:1a:
         fa:32:67:92:f6:6a:f4:44:22:17:a8:1c:48:4f:42:3f:c7:3f:
         d9:5a:33:47:ed:ed:45:ed:b7:e0:34:4f:45:21:f9:4b:85:95:
         c3:9e:8b:e9:6e:36:36:ef:bf:ba:85:c8:60:cf:34:b5:8d:29:
         ce:b0:39:f7:55:06:98:bf:10:3d:49:9c:f3:c2:a2:94:68:e9:
         e8:94:8d:67:58:c4:1a:72:8f:84:84:92:56:37:7c:0f:97:1f:
         ce:d1:7b:56:83:da:f2:1c:ab:e0:03:48:42:df:1d:bd:7a:a2:
         eb:d6:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:06:04 2026 by rpki-client