Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/849abab6-142c-395e-94b7-b560937113ff.roa
File:                     849abab6-142c-395e-94b7-b560937113ff.roa (raw, json)
Hash identifier:          ioBa9f7MxcxF/83+gAtboXz9mtQCajSXGtpY5tq9+C8=
Subject key identifier:   2D:76:BE:55:36:46:15:5D:A7:BB:81:81:2F:34:2A:92:C9:42:1C:32
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AC463E3B6B7D9E420B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/849abab6-142c-395e-94b7-b560937113ff.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397227
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ac:46:3e:3b:6b:7d:9e:42:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=5a8d7e4c-8a27-4fb3-9b11-89556b2fe172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:c4:ac:17:6f:ce:c2:2c:62:a3:8f:81:d9:
                    2e:b0:4a:31:0f:e3:4c:ef:f3:54:fb:f2:c9:2a:f4:
                    af:81:d2:ec:9d:f3:ec:ff:78:21:58:cf:59:e9:cd:
                    53:d0:57:9c:26:e8:1a:4f:2e:79:e6:d2:b9:f7:e9:
                    1a:75:e8:d1:fb:06:f3:8e:74:7e:60:35:cc:c3:62:
                    8c:01:1f:93:b5:d0:4c:73:2d:20:a4:fc:60:3e:13:
                    0f:c9:26:ac:91:75:ac:ef:d9:2c:3d:9e:08:6a:0d:
                    85:de:fd:b4:d4:1e:ee:c1:ed:ee:52:e1:a4:2b:87:
                    1f:fb:ac:89:49:d0:8e:aa:4f:23:a4:12:2e:bb:11:
                    cb:27:5d:4e:1f:a7:aa:a7:7a:50:98:08:77:cf:82:
                    a4:93:15:54:99:16:bd:15:62:1c:12:ea:22:aa:4f:
                    68:e3:ac:ff:d2:6a:05:54:81:9b:5f:e9:25:3c:3b:
                    3e:d6:0b:2e:93:15:c5:05:18:46:2d:f7:84:a2:d5:
                    37:47:36:5f:b3:71:a0:d9:05:5c:e2:43:15:f1:b9:
                    73:c4:cd:49:59:db:ef:3d:9c:48:2b:37:24:cf:5b:
                    7f:4f:15:ea:47:56:8b:40:1c:ff:f2:7c:4d:d6:41:
                    47:e7:42:7f:e8:3f:92:c3:6c:84:5b:9d:06:33:5e:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:76:BE:55:36:46:15:5D:A7:BB:81:81:2F:34:2A:92:C9:42:1C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/849abab6-142c-395e-94b7-b560937113ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:91:1f:a4:c0:b4:68:eb:7b:99:80:24:e6:b6:81:5a:23:64:
         ed:da:85:d1:29:21:02:45:76:fe:7f:10:e5:ea:2b:c6:60:d5:
         d8:cd:5a:3f:a9:f2:3d:33:16:74:f2:73:ec:dc:04:e5:6d:94:
         00:a9:0d:01:c8:f3:bb:f4:e3:80:dc:cb:6a:ea:b9:ea:f6:11:
         54:fb:37:55:0f:33:56:79:a9:bd:49:d5:12:dc:e7:e2:5a:5a:
         fd:99:b8:e2:02:52:aa:b0:25:a9:98:f4:9c:c8:fc:3f:c2:77:
         e8:78:be:42:e4:14:3a:51:7c:0f:c0:ae:ab:8b:3d:e1:16:c9:
         5b:85:17:cc:d8:bf:7f:88:ef:c1:8c:fb:5d:11:41:88:89:0d:
         61:50:10:69:81:57:d7:27:67:c5:e8:c7:e2:b0:74:1a:a2:48:
         58:df:3d:a4:bd:50:c1:d5:20:05:14:56:99:2a:c2:5f:91:d1:
         10:9c:51:cb:23:de:77:da:15:8a:15:85:3f:fa:8d:f6:d1:23:
         49:40:52:18:9c:40:b3:17:e8:e8:c6:a1:0b:30:08:d2:70:7b:
         87:be:64:bb:db:c4:11:bb:f9:87:6e:d5:bb:9f:c7:bc:41:c8:
         54:e4:c8:54:d0:40:2d:36:df:2f:94:92:0b:82:67:82:ef:c8:
         28:d0:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:42:20 2026 by rpki-client