Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70438e5a-e6fa-380a-ae79-339f53761ab7.roa
File:                     70438e5a-e6fa-380a-ae79-339f53761ab7.roa (raw, json)
Hash identifier:          gg8Di6QPL3v8v2UBOKJ1abgdsS5CD19kRFMiAU7pnQY=
Subject key identifier:   70:09:B5:20:B3:C9:2D:83:B3:28:9C:B2:E9:22:2A:57:65:0D:7C:E8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717ABF7A6FCACBDCF516100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70438e5a-e6fa-380a-ae79-339f53761ab7.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397220
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ab:f7:a6:fc:ac:bd:cf:51:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e93420ce-69df-4ea3-8c34-30750db0443b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:0e:f8:69:05:60:7f:22:65:30:99:c2:45:
                    8e:25:a3:38:02:06:e8:b8:66:8f:df:f6:e9:67:a7:
                    7c:83:cf:38:09:97:5c:91:bd:d1:d9:bd:7b:1a:e9:
                    b9:3c:2d:b1:ea:fc:2d:a2:82:4d:6c:49:8f:66:86:
                    4c:5c:74:cc:3f:74:ef:9a:11:6c:76:a8:99:f9:69:
                    cb:84:45:d0:45:15:b8:49:f5:2b:a3:37:26:77:2e:
                    e3:da:af:50:be:5c:57:31:11:46:48:d2:0d:85:2a:
                    95:63:dc:08:f0:5c:a0:98:d3:68:af:a8:ca:5f:f6:
                    bc:b3:80:cc:e5:2e:eb:ab:a6:c2:ec:5a:52:90:d3:
                    cb:e9:8b:63:6f:51:45:e5:2a:af:30:89:fb:39:6e:
                    bb:95:dc:99:d1:b1:6c:78:1c:60:6e:3c:71:82:f3:
                    1c:89:94:d5:74:9d:f4:1a:3f:0b:f5:70:14:bf:7f:
                    34:5c:d9:c8:63:b9:07:98:41:2b:59:11:8a:39:e1:
                    6e:1d:79:ce:3f:4c:64:78:fb:eb:e1:0f:0e:6a:5e:
                    19:1f:5a:07:a0:37:6b:58:71:db:5d:b7:7f:d0:14:
                    fd:ca:ea:20:c0:90:64:34:22:44:9f:a9:ae:7b:71:
                    b8:5f:05:57:06:f9:94:8e:e9:38:7b:f0:24:0e:29:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:B5:20:B3:C9:2D:83:B3:28:9C:B2:E9:22:2A:57:65:0D:7C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/70438e5a-e6fa-380a-ae79-339f53761ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:7b:22:1c:9e:bc:9e:4e:ce:01:aa:69:f1:d2:60:7b:a3:6a:
         e6:a1:d6:bc:26:7a:82:a9:25:c7:3e:92:04:b1:30:99:19:db:
         29:a8:44:e4:ed:ed:c5:fa:47:81:9b:e9:77:bc:1e:0e:cd:1a:
         43:8a:f9:b0:68:11:47:f1:f6:1a:89:47:2e:53:46:68:91:62:
         f4:22:2d:54:40:01:47:cd:26:2d:c4:a0:95:b9:2c:55:df:da:
         64:c8:87:bf:dc:89:75:54:69:24:c5:5a:d9:56:98:aa:f1:a6:
         a8:7c:26:d5:13:c7:6d:9c:88:7d:50:a4:5c:f5:e2:7f:bc:d4:
         13:90:db:ab:be:09:e6:7e:01:c9:f1:42:af:a6:84:4d:b3:d6:
         f0:e3:cc:ef:80:6c:c0:09:f0:9f:49:e3:68:34:73:4b:18:0d:
         7e:ca:e3:2a:a1:d2:fa:38:25:07:ee:51:78:9c:56:05:5c:7e:
         57:44:19:c4:3c:6b:24:74:ff:97:77:44:15:8e:50:1b:3a:b7:
         84:58:c7:ab:77:e3:31:cb:f4:81:13:70:b3:9f:5d:cb:ab:46:
         b1:7c:75:df:b0:de:f1:c0:19:2f:d6:39:d0:54:72:11:29:b2:
         00:cd:7b:2d:ba:52:8c:a8:98:4b:ab:b4:70:d3:ae:b4:9d:c6:
         ab:4a:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:03:59 2026 by rpki-client