Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afdb2501-9525-3673-881e-27db10c8721c.roa
File:                     afdb2501-9525-3673-881e-27db10c8721c.roa (raw, json)
Hash identifier:          CieH2BLoXZ5kgZtm8UtKdGbxXOgqZvpbKMB2NFs3u/8=
Subject key identifier:   91:02:AF:5D:34:6F:6E:08:2A:AD:45:80:FC:0B:BA:F2:68:6C:F0:0C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DDFB630C6C142C1B9600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afdb2501-9525-3673-881e-27db10c8721c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397239
IP address blocks:        2001:502:100e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:dd:fb:63:0c:6c:14:2c:1b:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=ace8e236-6b0a-4f8d-bb10-62a7e25feb85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:67:61:4f:75:9c:ec:3d:31:c3:57:7f:86:
                    04:4e:42:5c:d0:ad:29:4a:81:09:c1:49:6d:3f:d7:
                    04:3a:b9:32:e6:7e:54:8d:3a:13:f1:18:80:8b:15:
                    f5:31:fb:08:b4:12:b2:a3:10:28:b1:bd:55:ac:be:
                    1c:da:77:ae:39:43:36:09:03:49:60:05:3f:b9:15:
                    68:8b:be:c4:dd:d5:cd:67:a4:26:f2:04:51:b4:b0:
                    26:c5:50:1e:61:aa:7c:30:c1:22:70:b0:cd:ce:b1:
                    af:44:f8:b5:d2:56:74:57:5a:60:2d:b5:a6:91:bb:
                    43:52:ba:32:90:dc:8a:4f:15:5b:da:d6:73:d2:bf:
                    d1:b2:8e:21:0f:0a:52:1b:ee:0d:de:93:e1:6f:34:
                    67:e3:c3:d3:12:1d:29:2e:dc:a2:a1:8c:59:af:6f:
                    20:62:c6:34:7f:4d:43:43:69:df:d7:72:a4:68:26:
                    8c:17:14:a7:06:93:d5:ee:1b:56:37:3c:be:23:5c:
                    71:27:c3:b6:79:52:b9:70:c1:74:c5:29:bf:b4:cd:
                    8b:0c:be:1b:f3:a5:bb:03:77:40:e5:71:11:29:c3:
                    04:54:ba:bb:3e:1d:1a:03:8b:18:98:1e:1a:55:be:
                    38:74:67:27:12:cc:a6:b5:8e:bd:6a:d6:86:7e:86:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:AF:5D:34:6F:6E:08:2A:AD:45:80:FC:0B:BA:F2:68:6C:F0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/afdb2501-9525-3673-881e-27db10c8721c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:100e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:d9:de:3e:33:00:55:3a:ce:9d:98:4f:67:32:a4:22:c9:
         80:67:2c:0b:0c:1f:83:e2:9a:a7:0c:6a:60:05:40:86:21:39:
         96:b1:7a:14:bf:8d:40:84:cf:5f:71:13:63:64:6e:54:ad:42:
         30:a1:cb:dd:6f:2b:c5:64:6e:32:4f:44:99:80:bf:69:ec:57:
         2f:f3:b5:2a:dd:a2:e5:f3:d3:8d:42:bc:78:a4:16:cf:08:17:
         cb:5f:35:5e:f6:9b:09:0f:67:79:47:f3:1d:9e:0d:fc:36:c1:
         7e:d9:9b:68:4f:f4:ab:05:a5:dd:7a:44:94:64:a0:2e:13:81:
         da:a8:03:a2:4a:d4:d9:f2:4f:88:81:3d:5b:1f:ae:02:c4:38:
         cb:1c:0f:50:c3:91:27:56:7b:d2:76:6f:09:be:a8:4a:50:29:
         bb:cd:75:2d:76:80:7f:90:29:cb:6a:b8:92:85:9e:ad:c2:60:
         1b:34:5d:2c:cf:64:a0:e1:a3:b5:88:38:b1:50:e1:4c:0e:0d:
         58:9e:b9:c6:ab:a3:ce:d5:06:d1:8c:45:1c:b9:97:f6:dd:3d:
         7a:20:cf:96:35:ba:d5:4b:66:d2:42:6d:ac:a9:1e:2a:a9:6c:
         e3:1a:69:1a:1e:87:70:7c:83:a6:ac:f6:18:3c:37:8f:9f:96:
         51:a0:63:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:45 2026 by rpki-client