Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa
File:                     f836070d-3c4d-3589-98f1-0a4917c78fe6.roa (raw, json)
Hash identifier:          oB1iER/K/judpidfZuF9l335vScVnd0cIMw/peUSJyw=
Subject key identifier:   75:41:71:44:2F:06:18:E5:41:EE:66:2C:42:BF:54:BE:6E:7B:D3:78
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DCBC0EA46425D3FB4B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397243
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:dc:bc:0e:a4:64:25:d3:fb:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=3447b18b-6fd8-45cf-b256-d10e54850f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:eb:31:fc:50:a6:0b:9b:6c:30:d6:b5:c5:
                    cd:2c:2d:e6:b8:5c:60:4b:72:e1:b3:30:74:af:c8:
                    38:e5:44:3b:5c:32:28:65:b7:c3:32:9c:5a:e1:bf:
                    4d:e5:58:a7:ea:5d:2b:9d:a4:a7:88:fa:8b:24:0a:
                    fa:f7:8e:a8:9f:06:7d:e4:b3:41:27:50:28:24:eb:
                    bf:21:d2:d8:fe:9f:6d:47:4a:d3:68:9c:4f:a4:f6:
                    9e:f2:7f:d8:e1:58:94:06:84:7b:67:d9:9a:fa:fe:
                    36:34:35:5c:22:13:68:b4:c5:9a:d1:28:83:dc:40:
                    a3:ec:b1:20:f6:e9:22:0e:09:24:e3:0e:74:c5:56:
                    a8:75:8c:ed:0d:97:34:f3:4d:14:25:4d:a4:a1:31:
                    0d:71:56:84:83:d3:95:5d:60:db:bf:d5:0e:bc:87:
                    57:42:ad:e4:8b:5d:f6:09:fb:75:2e:cf:cd:96:8f:
                    d2:51:5d:0d:e8:4d:bb:c3:15:f3:3a:a8:6b:d2:8a:
                    ce:6d:60:6e:21:78:9c:59:1d:9b:39:0e:8b:37:60:
                    75:d5:51:ff:51:04:bc:86:7d:43:e3:ac:b1:be:65:
                    e3:91:b7:24:7e:b7:10:bb:e2:a2:34:32:21:e0:9c:
                    74:9a:51:14:db:dc:8d:75:62:70:9a:62:58:20:4b:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:71:44:2F:06:18:E5:41:EE:66:2C:42:BF:54:BE:6E:7B:D3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f836070d-3c4d-3589-98f1-0a4917c78fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:95:b5:11:70:8c:27:b2:e3:58:a1:fe:b2:9e:cb:18:74:78:
         ba:39:48:5b:bf:11:4f:43:6f:ed:ce:57:6c:a2:a2:9e:f8:1b:
         e4:d5:3c:0b:27:56:79:c7:82:78:cb:58:34:4f:7b:92:2d:84:
         19:48:91:c5:f5:58:99:f3:b6:f7:b3:22:ee:cf:71:f9:62:05:
         cc:7a:4a:59:11:75:86:61:a5:53:9a:11:60:24:d0:74:5b:5b:
         dc:63:8c:cc:80:81:fd:c5:e1:6d:32:11:d4:9f:1f:7c:f3:ae:
         dd:2b:20:6f:b7:2a:71:f3:09:c3:db:7d:92:69:d4:ef:07:8e:
         91:7f:d1:9e:ef:22:44:da:21:4f:6c:a8:ef:3c:e8:df:81:7c:
         39:3e:d0:ff:57:f8:a3:0e:21:e1:3a:0f:81:39:36:dd:33:fc:
         c5:cf:52:92:ed:e8:9f:0b:67:67:47:0e:33:cb:b3:5c:47:77:
         18:5c:f8:07:2d:d2:e8:90:10:c6:14:62:90:2f:99:5f:ae:7f:
         fc:07:6a:e9:ae:ac:16:f8:f6:c4:23:62:06:07:31:fa:70:91:
         66:99:7a:62:52:9b:01:1f:37:a3:fd:c5:04:72:af:a6:53:68:
         94:4d:56:dc:1c:ce:1e:97:8a:cb:2c:95:2d:43:70:39:04:fc:
         b0:93:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:32 2026 by rpki-client