Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfec313c-fd30-323e-bfcf-9e0418da2b6f.roa
File:                     cfec313c-fd30-323e-bfcf-9e0418da2b6f.roa (raw, json)
Hash identifier:          IYwnRLkBePH2pcwjlna4SfoiUlD6NfGSEBWtEf6X0dM=
Subject key identifier:   8F:B3:C6:39:28:41:C4:15:D9:CB:8B:AC:F5:DD:93:9F:EC:71:46:41
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DF868F799A8E2D47CF80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfec313c-fd30-323e-bfcf-9e0418da2b6f.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397240
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:df:86:8f:79:9a:8e:2d:47:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=0b8b7813-5959-48ec-b1f7-07ebdefea00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:15:74:79:01:c6:2d:b0:db:f8:7d:ed:df:
                    89:df:d8:28:77:3d:8f:36:ff:33:08:4f:13:c9:f4:
                    39:6f:19:ee:09:34:90:77:bf:1c:76:f5:b1:54:05:
                    df:39:f2:9d:8a:e6:72:65:f0:56:d8:6c:31:66:44:
                    00:c1:69:72:09:4a:28:86:b7:c9:d7:1c:e1:11:56:
                    40:f1:ba:98:f0:81:df:f7:7d:9b:39:32:a2:96:89:
                    39:97:02:0e:66:05:3a:d6:21:16:42:a8:25:18:35:
                    3f:3c:8d:cb:4d:68:f2:8a:d9:d7:d5:08:81:18:fb:
                    ce:33:2e:9b:e2:50:58:7c:89:45:8e:76:0e:cb:17:
                    d6:df:1d:0b:3f:74:a0:ec:3b:73:95:3e:57:7b:70:
                    2b:00:24:92:b0:19:1e:9f:2f:2d:51:db:24:dc:7e:
                    da:89:64:12:34:2b:14:70:78:27:08:e4:70:bb:43:
                    29:0a:94:6a:94:52:d7:9f:16:58:ff:c0:b5:1e:01:
                    87:3d:06:f8:0a:b5:73:e6:80:74:d2:cc:4a:fa:ca:
                    44:62:6c:6d:9b:c9:89:90:f3:48:6c:b6:71:d0:e0:
                    d0:87:fa:53:af:65:e4:cd:7d:36:b6:5f:35:f7:0b:
                    72:fb:e3:ce:eb:93:58:6b:6a:98:4e:01:a2:03:05:
                    57:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B3:C6:39:28:41:C4:15:D9:CB:8B:AC:F5:DD:93:9F:EC:71:46:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfec313c-fd30-323e-bfcf-9e0418da2b6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:22:a1:fb:c5:dd:d7:d6:04:e4:93:66:9f:d1:c7:76:ca:
         5f:2e:12:41:4b:65:d7:5b:35:47:14:40:22:34:a4:fe:30:0d:
         f4:7d:ca:81:98:76:05:20:0b:07:a6:48:79:f9:36:d6:7c:ea:
         f7:17:00:c7:74:a6:2d:30:3d:24:3b:97:c0:70:11:b5:c6:22:
         d5:09:2c:c1:00:45:c3:2c:99:1a:8e:b5:fb:f0:07:42:ec:98:
         bd:05:09:62:b9:94:c0:6f:34:b1:74:e4:d1:27:45:7b:c8:74:
         42:96:e8:4f:eb:a9:6b:29:63:ab:3c:8d:da:33:e0:b4:db:3a:
         a6:56:e5:4c:a4:4f:b9:dc:22:f8:93:48:be:35:77:92:0a:eb:
         45:ff:34:3e:10:e4:6c:a1:f1:9e:4b:e2:06:34:22:a9:38:12:
         41:da:85:f4:67:bc:df:5b:69:a9:d5:a4:d0:d1:71:e6:b2:d5:
         a3:74:89:f0:7b:65:6f:47:32:f2:a6:df:5e:21:7e:06:56:7c:
         b6:32:39:64:9e:64:61:13:12:ce:0f:a8:dc:05:80:e2:ab:86:
         8e:44:39:1f:aa:d8:c9:d4:c7:38:6d:05:60:b4:f9:84:dc:ce:
         b8:ce:59:41:97:b8:5a:a3:f3:8a:b5:36:5b:41:c4:c3:75:73:
         cf:d2:92:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UtN+Gj3maji1Hz4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MGI4Yjc4MTMtNTk1OS00OGVjLWIxZjctMDdlYmRlZmVhMDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeIVdHkBxi2w2/h97d+J39godz2PNv8zCE8T
yfQ5bxnuCTSQd78cdvWxVAXfOfKdiuZyZfBW2GwxZkQAwWlyCUoohrfJ1xzhEVZA
8bqY8IHf932bOTKilok5lwIOZgU61iEWQqglGDU/PI3LTWjyitnX1QiBGPvOMy6b
4lBYfIlFjnYOyxfW3x0LP3Sg7DtzlT5Xe3ArACSSsBkeny8tUdsk3H7aiWQSNCsU
cHgnCORwu0MpCpRqlFLXnxZY/8C1HgGHPQb4CrVz5oB00sxK+spEYmxtm8mJkPNI
bLZx0ODQh/pTr2XkzX02tl819wty++PO65NYa2qYTgGiAwVXDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI+zxjkoQcQV2cuLrPXdk5/scUZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvY2ZlYzMxM2MtZmQzMC0z
MjNlLWJmY2YtOWUwNDE4ZGEyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADCbIqH7xd3X1gTkk2af0cd2yl8uEkFLZddbNUcUQCI0pP4wDfR9
yoGYdgUgCwemSHn5NtZ86vcXAMd0pi0wPSQ7l8BwEbXGItUJLMEARcMsmRqOtfvw
B0LsmL0FCWK5lMBvNLF05NEnRXvIdEKW6E/rqWspY6s8jdoz4LTbOqZW5UykT7nc
IviTSL41d5IK60X/ND4Q5Gyh8Z5L4gY0Iqk4EkHahfRnvN9baanVpNDRceay1aN0
ifB7ZW9HMvKm314hfgZWfLYyOWSeZGETEs4PqNwFgOKrho5EOR+q2MnUxzhtBWC0
+YTczrjOWUGXuFqj84q1NltBxMN1c8/Skiw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:09 2026 by rpki-client