Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd5fb4a-4011-32f6-ba1d-8ddb297f4f0c.roa
File:                     abd5fb4a-4011-32f6-ba1d-8ddb297f4f0c.roa (raw, json)
Hash identifier:          o+vLHrnBOrjlL4/b4W0UqvAnHwDnaZAn1JJK1hDnXDo=
Subject key identifier:   ED:5D:CC:BA:18:BC:44:6C:66:17:C7:50:73:ED:63:67:8C:38:8C:87
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717A9FCC7C3AD53B988D880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd5fb4a-4011-32f6-ba1d-8ddb297f4f0c.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397241
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a9:fc:c7:c3:ad:53:b9:88:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=26b90148-08f6-4bd6-bf51-c9aef148f96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:a4:c6:5b:1c:23:37:b4:05:8f:6d:6b:b5:
                    e8:ef:15:26:92:9c:5e:97:13:ee:ef:f2:22:72:26:
                    d9:bd:a4:0f:95:39:13:30:1d:f5:af:82:e2:b0:a7:
                    bb:50:73:f8:bb:4a:78:a2:9c:6e:4f:bb:85:02:bb:
                    a6:b0:d8:b0:f3:b5:54:d9:ec:5c:08:c6:c3:d4:ce:
                    11:6a:dd:fb:a2:6c:4c:0a:74:f3:47:b7:9d:4f:3e:
                    d2:19:4d:6d:89:37:c8:04:56:62:37:b0:2b:de:a4:
                    3a:4a:f7:e7:1a:a3:4e:ad:c7:6f:a6:26:b6:dc:7b:
                    7c:da:d8:6a:85:39:3a:11:33:aa:d8:ad:45:e1:49:
                    9c:6d:05:da:44:36:42:81:5e:f2:75:17:e7:75:c4:
                    98:79:0f:ec:ce:24:c7:52:20:e8:63:aa:4a:a5:e2:
                    c6:4d:f5:7b:f3:b1:91:92:67:df:08:54:e1:cf:6a:
                    b3:79:08:34:4c:ee:0b:c2:ae:2c:1b:e8:67:06:02:
                    dd:f3:b5:29:c5:17:c4:d0:01:7f:b7:2b:69:ba:22:
                    80:c6:b0:83:ae:c2:c1:c4:4a:43:b8:9b:19:af:a1:
                    19:75:cf:c1:80:c5:fc:59:33:3c:a8:88:45:c8:6a:
                    ff:9a:60:f2:ba:df:4a:2d:b5:9c:c1:70:d0:3e:3c:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5D:CC:BA:18:BC:44:6C:66:17:C7:50:73:ED:63:67:8C:38:8C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abd5fb4a-4011-32f6-ba1d-8ddb297f4f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:9a:e8:29:f5:1d:90:77:55:40:90:57:7e:67:a7:04:3e:
         b6:88:8b:9d:b5:ed:80:65:3c:b2:ac:c9:28:f2:08:5d:3d:7d:
         b7:4a:02:88:e7:9c:bd:fa:e1:c2:63:23:9a:6f:b4:cc:0e:af:
         26:5a:f7:b6:dc:44:9b:02:69:3d:d1:9d:8b:44:21:44:9d:98:
         ea:40:87:df:b4:c3:c3:e3:fb:f7:07:45:dd:85:a1:92:1a:6f:
         2f:54:3b:eb:64:9d:0c:b0:18:97:5f:b8:25:6c:e0:e1:58:25:
         9e:3a:6d:3f:32:da:9b:38:88:c1:0f:b8:57:8a:03:97:1b:5a:
         2c:b8:ed:24:c8:f1:8e:24:3f:57:cb:c5:c0:5b:5b:cf:ef:ef:
         3e:93:0d:94:67:01:0c:3f:59:7e:28:47:ec:7d:4f:be:2e:0e:
         dc:80:ad:99:0e:2d:2e:49:0f:b8:e8:bb:27:5e:ba:ad:49:a6:
         ae:7f:96:55:07:6e:eb:f6:0d:1e:9e:d2:07:b4:9b:f0:04:9c:
         0d:fe:de:3f:b6:40:82:e0:39:3a:d6:cf:d6:2e:86:23:95:77:
         dc:88:2e:79:26:bd:f5:b5:ce:be:4e:e5:66:33:63:53:79:85:
         ae:e4:b9:ac:41:4b:79:1c:e2:db:ea:23:27:e5:ef:09:80:25:
         fe:86:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:45:41 2026 by rpki-client