Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa
File:                     4a96c621-5367-3741-ac63-05f0bad0bca3.roa (raw, json)
Hash identifier:          fucHI0Nnnw5hRATrlu9i7JdxLJj/u/tHTM/ZwKmqZRk=
Subject key identifier:   B4:F4:84:5A:2D:8D:61:90:92:7D:46:AD:50:DC:E3:3F:3B:68:80:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E5A3156096C59AD8A000
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397218
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e5:a3:15:60:96:c5:9a:d8:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=ff27d2b9-9db8-48d8-aa0b-7143d1b4865d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:a8:d3:5c:6c:ba:03:e2:49:2d:cf:17:7c:
                    49:b6:b0:f3:11:02:80:fc:6d:8e:3b:60:84:b2:48:
                    f6:e8:e8:66:93:40:72:17:c3:ca:3f:2d:b8:74:95:
                    01:19:ff:64:14:99:01:1a:25:97:8f:b9:49:f1:61:
                    eb:77:3a:45:f0:b9:46:93:f2:9f:93:45:60:ee:62:
                    4c:73:fb:d3:12:51:6c:ad:96:0f:6e:6c:e2:88:f6:
                    8e:fe:85:26:e4:6c:c1:e7:32:09:7a:a5:e7:c5:89:
                    37:cc:e6:6b:63:f3:6a:94:f9:ac:e3:73:7b:c4:21:
                    81:ac:b7:3b:ed:fd:eb:54:ec:cd:07:55:f9:2a:2e:
                    4d:3e:2b:75:fe:89:fb:a5:a3:37:e5:55:66:7e:2f:
                    9e:5e:18:dc:8e:5b:bb:a7:33:ed:0f:c7:f8:4c:81:
                    95:86:ca:40:b5:01:d6:c7:fe:6f:5a:3c:0a:31:30:
                    04:f9:a1:7c:30:16:ee:c3:76:4a:76:00:19:7a:ee:
                    42:da:a5:1b:d3:ab:c6:fa:86:3b:aa:71:e1:78:7f:
                    c0:b6:5d:29:ef:04:46:9c:e5:37:6e:b2:57:31:fb:
                    d9:57:73:54:52:8e:48:cf:5c:65:e1:83:be:ee:ed:
                    82:df:ed:b0:7e:e8:35:16:e3:f0:c1:78:9a:60:f9:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:84:5A:2D:8D:61:90:92:7D:46:AD:50:DC:E3:3F:3B:68:80:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4a96c621-5367-3741-ac63-05f0bad0bca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:c6:c6:ba:13:66:f7:41:f7:46:88:a9:47:9d:06:21:55:
         52:0d:42:de:66:c6:dd:f2:2a:be:0f:e5:c2:b7:14:42:f0:03:
         fd:79:0f:95:51:4d:a8:07:24:15:b9:41:c8:89:48:94:85:5f:
         b3:0d:09:c4:4d:47:89:38:a4:40:54:7c:a7:ba:1c:51:b9:84:
         58:47:50:a2:1a:b8:fe:0a:09:19:19:00:2e:2d:68:d1:63:fa:
         57:2c:ab:e1:2a:79:a0:6c:cd:89:bd:d4:7d:60:a4:cd:27:29:
         44:7f:ce:05:b6:de:3a:ef:9f:f4:83:cb:10:a8:65:48:5d:09:
         aa:93:ab:f8:ea:26:75:a7:a0:9a:e2:f0:97:24:55:e0:92:76:
         7f:3e:47:99:fb:cf:d5:d6:fd:86:8f:75:58:54:43:54:41:df:
         e4:4a:ec:2b:e1:97:68:84:43:93:22:c3:cf:1f:9c:6c:02:c0:
         04:ea:1e:e9:59:e1:46:50:35:8b:fa:0f:e1:6d:39:ca:6f:b3:
         de:d9:b2:81:17:3c:33:d4:7b:14:83:8d:4b:31:c8:a4:a2:47:
         56:84:5f:d0:88:87:af:72:61:69:ef:66:f1:b1:06:d5:2e:ae:
         f5:fb:29:20:7a:4a:ca:dd:4a:28:9b:62:f0:45:ee:cb:12:21:
         4a:2e:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:44 2026 by rpki-client