Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa21ba5-9fb9-36a1-ac8b-4a940086736b.roa
File:                     7fa21ba5-9fb9-36a1-ac8b-4a940086736b.roa (raw, json)
Hash identifier:          GTlaK4kiFtLP1qdT6u6oV6fxTRRKBtWDnWBpujhfrpQ=
Subject key identifier:   7B:F0:F3:01:B4:72:EA:4B:D3:E6:A8:84:8C:0D:A3:81:42:F7:E4:C2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717B64611C816D668487880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa21ba5-9fb9-36a1-ac8b-4a940086736b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397221
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b6:46:11:c8:16:d6:68:48:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6e575799-5ae3-4a4f-a36e-2750f6ecc803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:f8:3c:ab:7c:91:4b:a6:7f:b6:61:86:22:
                    84:82:48:ed:26:d2:09:b9:2c:9e:84:93:1a:e3:76:
                    74:47:5d:ae:fa:a8:31:43:58:20:72:12:4b:30:b1:
                    21:fa:52:75:30:17:bf:9c:f3:46:67:30:67:a6:cc:
                    73:1b:80:d0:f4:89:dc:0f:d3:c5:c8:2c:d3:cc:1e:
                    dc:b4:d1:d3:9e:04:23:da:4c:f9:ec:1a:36:25:f0:
                    a8:9b:95:66:58:4e:a8:50:50:ae:91:ac:f2:f8:03:
                    79:51:70:ea:f7:19:44:58:0e:f6:36:24:0d:e8:d9:
                    55:81:cc:d5:e2:5c:4a:09:c0:ed:5f:e4:e5:aa:ec:
                    12:8b:77:cf:1b:bb:96:0d:34:b3:39:a2:90:cd:6f:
                    86:07:c4:73:cc:a5:e6:fd:a9:b9:6d:c4:be:93:61:
                    e9:d8:2f:bd:e8:cf:b1:f6:d7:49:61:af:45:7c:20:
                    74:55:60:ba:61:63:c3:8e:73:97:75:70:92:1d:25:
                    f1:7a:f2:48:cb:70:a3:a4:71:5d:cf:6b:75:40:70:
                    d3:65:dc:6d:3f:ca:98:48:61:82:91:9c:5b:f4:61:
                    ab:e7:68:76:27:b4:78:34:5b:df:e4:de:64:87:3b:
                    f2:3c:d3:7c:6b:c9:88:52:e3:52:54:84:a4:11:2b:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:F3:01:B4:72:EA:4B:D3:E6:A8:84:8C:0D:A3:81:42:F7:E4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7fa21ba5-9fb9-36a1-ac8b-4a940086736b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:87:55:6e:c3:e0:8d:86:8f:81:40:45:47:37:a6:bf:ff:28:
         c0:60:3f:1b:aa:e3:97:c9:2d:f7:17:9d:54:90:e5:73:dc:dc:
         64:b7:f1:2f:8c:85:b2:d8:df:07:24:f1:40:19:7c:4f:be:49:
         ac:43:78:67:79:fb:a1:d2:e5:49:93:1b:4d:ae:73:60:ba:bc:
         bf:7f:c5:1f:7a:4d:7a:5d:99:e3:11:8b:48:39:2e:8b:bc:89:
         cf:bc:da:f9:49:99:5b:51:84:b6:53:6a:31:fe:7a:da:ec:78:
         bd:a9:a6:85:99:b8:ea:34:e4:e4:a3:fd:00:09:78:a6:09:0b:
         0c:ec:38:49:34:fb:c8:61:e4:eb:9f:71:d4:c6:54:12:6e:82:
         ac:20:27:6c:e3:b4:12:e8:25:62:74:6c:dd:50:39:45:ef:db:
         31:eb:4d:5d:df:97:1f:06:a1:a5:25:4e:74:fd:5a:b2:02:27:
         c9:75:3d:4a:c0:14:c2:52:ae:4d:8c:32:f3:ad:ee:04:1f:ec:
         37:9c:20:5c:b7:1f:f5:11:ea:da:56:f2:d7:ad:1d:fe:e3:a8:
         c7:2e:12:17:1a:16:57:df:1d:47:a8:8b:cd:ea:43:55:7d:14:
         ce:c4:ce:f2:ba:8a:33:75:38:a4:8c:f2:87:68:22:84:35:a7:
         fe:59:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:02:09 2026 by rpki-client