Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
File:                     1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa (raw, json)
Hash identifier:          sgFJOo59MrontVdYnm5shbrliLxW03w6d7BW0hVy8lk=
Subject key identifier:   81:48:2D:13:01:80:F4:4A:18:55:74:C1:6E:D3:02:EC:EF:69:CF:80
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E2249CAFEB25885C6000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397235
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e2:24:9c:af:eb:25:88:5c:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=090ab888-1bf6-44cb-bc5c-38c27eb31786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:c6:48:d8:0a:aa:92:cf:3b:6e:60:09:e3:
                    60:53:b4:dc:0a:14:5e:a7:3a:de:c3:ff:39:6e:ed:
                    38:01:f4:8c:ed:96:67:b0:76:23:5d:bb:d2:bd:f9:
                    66:ea:57:6b:c1:1e:94:6a:ca:d8:98:1e:fb:2e:08:
                    bc:ff:4a:aa:03:0f:a1:7b:f8:3c:50:e1:84:cc:26:
                    fb:89:73:5b:1d:6b:b2:48:4e:62:26:12:59:84:02:
                    a1:fe:7d:f4:b5:34:71:9f:95:a4:e1:27:d2:43:6a:
                    41:78:4c:7f:08:15:a5:38:77:cc:fe:de:69:7c:f3:
                    15:c5:c7:95:cb:36:08:47:80:af:1f:49:5f:5c:ac:
                    54:5a:af:37:50:24:37:d4:3f:5b:60:35:f5:b3:3b:
                    a9:2b:a7:d4:82:9e:9d:75:16:23:c5:6c:f2:96:a0:
                    60:c7:8d:a1:87:31:10:f4:52:03:94:62:26:f3:3e:
                    e6:5c:db:70:7f:a7:65:5f:b3:70:8d:21:c3:7e:4f:
                    d0:1c:9f:b9:73:bc:14:f8:81:f5:b6:8f:4a:c1:72:
                    df:f0:bf:27:a6:31:aa:b4:c3:62:4a:e2:c9:44:9d:
                    1d:09:2c:2d:8b:f4:df:08:9a:49:68:db:13:2b:71:
                    ca:fc:a7:3f:57:9f:bd:1f:d0:f2:c9:66:7c:91:3a:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:48:2D:13:01:80:F4:4A:18:55:74:C1:6E:D3:02:EC:EF:69:CF:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1a026cd8-822a-31f5-9f1b-2d88d9cf8645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b6:5c:8f:7a:c6:17:55:01:a5:4a:fe:9b:a3:52:5f:4c:26:
         29:6c:1f:f9:f0:98:d0:6e:27:29:eb:27:d2:44:30:1f:46:e9:
         0f:35:13:e2:22:b5:7c:bd:49:05:f6:b1:46:59:dc:f8:82:b7:
         fd:52:3d:05:18:98:83:00:97:4b:26:13:21:5f:b3:13:a9:0a:
         d9:f9:de:3c:ed:66:90:ba:4d:a5:30:41:37:f8:6b:f8:db:de:
         da:3e:85:24:69:f4:4f:c9:f6:8b:00:a9:71:72:25:07:87:7c:
         dd:be:c2:57:9b:9d:51:2c:d7:67:dd:67:bc:88:79:a1:6a:09:
         d1:c8:22:ac:f3:d3:0f:c1:2e:52:b6:e8:c1:4a:52:5b:07:f8:
         3f:48:cc:6d:83:36:3c:cb:a6:ef:ce:90:97:be:04:fa:78:07:
         ad:d1:ef:5d:2b:73:20:ee:a6:8c:5b:24:51:e6:b8:65:aa:d2:
         f2:a2:82:49:d1:d9:23:10:27:7c:2e:29:af:47:2a:cf:b2:c9:
         e7:43:0e:03:73:39:6b:a0:90:53:f8:d0:1e:37:fa:12:76:bd:
         70:57:fe:11:a6:e4:25:5c:f4:c5:30:c6:c9:a6:97:50:a0:c5:
         b4:bd:80:a6:3c:f4:fb:00:1e:a5:65:6b:b6:5d:33:53:66:c6:
         36:5e:d2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:09:05 2026 by rpki-client