Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f0be1db-4b49-3587-816d-53b2a6a4ae99.roa
File:                     6f0be1db-4b49-3587-816d-53b2a6a4ae99.roa (raw, json)
Hash identifier:          KjDHNVb5U181RRh48eKH1mSvcwkjh2xM8BNF0Bo9zCw=
Subject key identifier:   1B:88:D2:3E:F8:32:4A:B9:FD:2A:59:73:61:75:9E:7C:C5:00:6A:CA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E4AD7DEE3A85ACB97DC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f0be1db-4b49-3587-816d-53b2a6a4ae99.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397229
IP address blocks:        2001:502:f3ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e4:ad:7d:ee:3a:85:ac:b9:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=67055241-38f7-4526-9612-76072ff6a232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:3e:18:34:26:2f:46:15:69:92:e6:fc:e9:
                    51:6c:77:f2:da:e1:94:62:6f:02:de:b3:f2:e8:fc:
                    48:80:0c:d1:2d:10:5a:ff:1f:2c:b0:df:de:8f:5d:
                    3c:ec:63:43:f1:85:3b:2f:4a:b8:f3:e4:55:bc:e5:
                    1c:d8:f2:c5:06:4c:21:51:ce:f1:65:4d:8f:7b:1e:
                    09:f6:ab:0f:86:30:ee:b7:7b:dd:a7:25:36:28:2c:
                    7e:e8:36:7d:43:94:9a:9a:e2:27:cd:4f:b6:17:1e:
                    46:89:af:f1:01:36:3c:a1:fa:9a:f6:ba:f9:1f:a9:
                    b8:cd:af:1b:b9:df:2a:90:4e:75:ff:8e:98:ae:11:
                    92:12:ed:0a:0c:ae:35:02:6d:4d:c2:55:6e:5d:64:
                    bd:c5:60:8d:9c:39:62:b3:07:eb:80:64:7f:9d:08:
                    c9:a5:83:29:59:48:ab:b8:02:ed:cb:27:9e:c4:7e:
                    d3:4e:09:6e:1b:e0:37:f7:f2:c5:b7:f3:ae:93:64:
                    dc:c8:0f:4c:52:7b:27:8b:96:80:fb:c9:bc:38:42:
                    b8:aa:09:99:30:4e:24:9d:95:17:be:f8:69:2a:1d:
                    1e:4a:26:1d:95:6c:63:cb:a7:fa:20:d6:01:a1:65:
                    36:80:e6:d4:e7:30:54:5a:cb:45:29:20:8f:c6:44:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:D2:3E:F8:32:4A:B9:FD:2A:59:73:61:75:9E:7C:C5:00:6A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/6f0be1db-4b49-3587-816d-53b2a6a4ae99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:f3ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:e3:4c:6c:8e:29:da:1f:23:3a:e8:b1:af:2b:a1:61:d9:f6:
         6e:6b:db:e1:c5:36:d3:b6:b3:3b:5c:71:1a:18:f7:f5:c7:0d:
         d3:ba:94:d5:26:d5:c7:c2:37:15:02:0e:25:10:4d:a2:c4:a4:
         b7:21:50:9e:98:7e:19:74:81:a9:ae:16:08:a8:c3:8a:9a:9a:
         97:84:e8:44:fd:69:27:b2:e7:20:62:89:e9:fd:d6:84:82:d0:
         50:f3:05:6e:44:19:de:c5:90:ca:70:eb:5d:2a:26:14:53:ab:
         86:66:4c:04:e3:6d:5a:f4:b2:ed:14:38:23:e1:2e:60:e8:d9:
         e7:48:44:f6:9d:7a:38:18:a9:de:43:ae:c8:e9:74:2a:22:43:
         62:e0:48:e3:ef:c9:b2:3c:7a:9a:7c:c2:2a:f3:cb:28:24:83:
         5f:2c:50:13:2b:f6:49:ab:fb:7c:79:56:2e:35:a7:ca:5f:0a:
         4f:4d:ef:fd:30:9d:8c:46:ec:cf:f4:ce:60:27:79:9e:f0:8d:
         5e:e2:f2:cb:ba:c9:ec:f5:7e:b0:37:aa:76:be:0a:e0:42:99:
         7e:0f:09:37:f6:5d:36:04:a2:83:33:26:5f:23:00:85:20:d0:
         18:74:f6:10:99:79:17:21:8c:1c:8d:e7:c6:fe:8a:4f:5e:cb:
         8b:ea:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:16 2026 by rpki-client