Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ce133c-6153-349d-a8d4-a5e299476078.roa
File:                     c4ce133c-6153-349d-a8d4-a5e299476078.roa (raw, json)
Hash identifier:          6FUl9hpU365UNUfYtkfa0GJpJX5P53MB3XDp7MgM1Do=
Subject key identifier:   FA:5C:FB:33:DA:3D:20:4F:E3:A7:27:94:CE:C7:0A:35:C4:04:CA:06
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DFF40BA49BD9F8A0DEE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ce133c-6153-349d-a8d4-a5e299476078.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397217
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:df:f4:0b:a4:9b:d9:f8:a0:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=77b15f4a-6911-47e1-887c-a1b6225db0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:d0:81:45:04:79:50:7f:80:e1:65:bb:86:
                    bc:ab:f0:4d:83:fb:8b:75:21:3b:75:2e:be:e9:ff:
                    02:fe:d1:fe:67:ee:d1:d9:80:f9:68:bb:8f:92:5b:
                    da:75:3d:46:c1:f6:d3:b2:62:aa:1c:06:07:43:44:
                    e3:7a:fc:9d:bb:32:d6:75:d5:83:ea:ca:19:80:81:
                    df:4e:2d:5c:4d:86:f9:c0:3b:2b:03:bf:2e:bf:03:
                    fb:6a:5d:7c:bb:1b:49:97:42:4e:48:b2:01:50:5f:
                    66:4e:ab:3c:5f:45:b3:a3:c6:6c:76:3d:eb:57:46:
                    98:63:b8:e7:93:90:89:15:89:e7:39:75:0d:f9:fc:
                    8d:d2:37:a4:56:7c:c2:f0:22:a9:20:ca:3f:36:e0:
                    6b:89:25:55:ec:16:15:f2:b9:e9:37:19:37:b2:09:
                    45:dc:af:a6:de:9d:32:a4:a6:ad:5e:4f:5b:b9:02:
                    d1:8b:78:f3:81:03:db:94:6f:bf:b2:e1:e7:9d:64:
                    77:3a:b7:27:51:78:26:60:ac:dd:5f:ea:b9:90:51:
                    73:c7:b9:ae:ea:d7:ed:0c:f0:a9:f4:e9:50:88:44:
                    8f:b5:e0:97:0f:43:83:2f:71:3f:5f:a4:64:c0:0b:
                    d6:1e:3c:8d:31:50:0e:cd:bb:af:28:4f:a4:97:ed:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5C:FB:33:DA:3D:20:4F:E3:A7:27:94:CE:C7:0A:35:C4:04:CA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c4ce133c-6153-349d-a8d4-a5e299476078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:39:da:f0:85:d6:9f:05:2f:be:43:32:01:ed:a1:60:18:b6:
         1c:d4:7a:f8:77:bb:a2:ad:68:e9:4b:d2:da:21:a5:66:d1:c4:
         e1:9c:e4:c0:c4:b0:30:51:b9:d8:9f:aa:e9:d7:27:8d:e5:35:
         76:6b:50:a9:75:98:1b:31:18:06:e8:21:fc:f9:7c:e7:70:91:
         17:7c:29:90:cc:20:02:d0:64:47:8a:d2:ae:12:8e:c2:65:f4:
         51:ef:cc:67:7d:fd:0c:d8:28:42:17:e2:3d:05:07:b3:3a:e7:
         11:2f:cd:ee:be:39:ad:c9:8b:25:4e:af:76:ad:45:84:67:e0:
         b0:1d:88:a3:1a:aa:21:7b:cd:31:7b:76:55:1f:ee:05:ef:c2:
         e5:67:06:ec:96:fb:f7:1c:00:41:1f:f1:3e:fd:79:10:9d:4e:
         0d:8e:50:d1:32:8b:fa:10:d6:7c:31:9d:11:cd:4d:b5:a3:25:
         7b:5b:01:01:61:e7:62:f5:96:03:ff:64:2a:1f:7e:4b:75:47:
         fc:6a:a8:43:51:27:23:00:58:ab:72:a1:a7:7f:03:32:56:ce:
         4c:7d:4c:34:e8:85:36:94:6f:4e:9b:80:18:43:6f:14:24:9f:
         7d:1a:55:dd:ae:76:68:52:1c:65:72:73:c1:cd:76:d6:a2:12:
         90:2a:93:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:21 2026 by rpki-client