Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa
File:                     fd193fed-d25f-36d6-a69a-d4d235c32c99.roa (raw, json)
Hash identifier:          bYZEhEY9yf7VhiYTF67+iajQHBKlF16xzu1XAUccFFY=
Subject key identifier:   E5:C7:7B:F0:54:AB:E5:CD:60:D0:69:E5:A7:66:DD:02:94:A6:C9:C6
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AC51A5521400F7DB5680
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397228
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ac:51:a5:52:14:00:f7:db:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=e98d68e9-4b3c-429c-8834-b7e6413fe056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:47:bc:70:71:b1:35:12:a4:e9:ad:ee:98:
                    59:71:af:16:1f:79:96:89:b0:4d:d9:38:f3:63:3e:
                    e3:93:59:0d:68:a6:ef:9d:b8:70:34:62:7a:3e:ad:
                    9d:8f:70:dd:eb:08:3d:4b:e5:64:de:4f:9d:2f:26:
                    56:e6:c6:f0:9a:1b:75:cc:b6:01:94:24:7e:ad:a4:
                    17:22:ad:2b:3c:a0:ea:aa:3e:17:b6:1d:fc:47:e1:
                    c7:89:66:63:52:30:c6:58:6f:75:f4:37:8c:5e:c7:
                    d7:f6:c6:39:41:b9:44:da:58:76:5a:36:4d:85:45:
                    bd:5d:48:9f:60:da:0f:91:8b:92:5c:43:f6:6c:2a:
                    b9:52:c3:d7:ce:2a:cc:42:0e:b3:60:eb:67:4f:3b:
                    7e:c6:64:96:36:21:71:7c:2a:94:33:57:38:3f:94:
                    f3:4f:99:df:6c:6d:0a:79:f5:a5:c4:01:f7:ff:fc:
                    16:78:98:3c:2e:97:ba:00:4f:2a:bf:1f:3f:ca:29:
                    0d:31:dd:ca:03:2c:a2:59:ba:89:62:07:f9:6f:f6:
                    c4:00:56:ce:1e:0a:ba:5c:3d:ee:17:c4:f3:b9:a6:
                    f2:20:13:b0:31:f8:64:e2:83:b2:5b:48:25:44:50:
                    4f:db:5f:4d:d3:18:86:82:59:fe:9a:4f:ed:20:e7:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:7B:F0:54:AB:E5:CD:60:D0:69:E5:A7:66:DD:02:94:A6:C9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd193fed-d25f-36d6-a69a-d4d235c32c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:bd:dd:92:21:46:c3:b2:13:c1:f4:1d:7a:54:ec:9c:b2:
         ec:88:e2:4b:87:1a:6d:20:cd:60:b2:b2:a2:f4:ef:f9:9f:d3:
         dc:4e:a4:b4:3f:ec:89:77:11:c8:de:02:e2:cb:44:d1:6d:b8:
         ca:25:7f:7f:ed:bc:93:df:f2:8a:43:41:31:76:93:8e:97:95:
         21:10:23:56:5e:d6:54:03:c7:72:47:65:ca:3e:ad:f6:2f:e1:
         9e:fe:21:46:b2:b2:a4:42:36:36:00:ad:2f:d2:24:a8:ce:d6:
         a5:30:a2:24:f4:4d:4a:47:22:96:e0:cd:fa:3f:28:b9:4a:c1:
         cf:05:c8:57:d5:18:70:d8:4e:bc:a7:8e:9b:32:a4:bc:ad:2d:
         a9:c2:5e:bd:e1:1d:6c:95:5a:1e:2a:72:ca:ac:14:4b:ed:a0:
         20:d7:da:b8:f7:96:75:99:f5:0e:94:d6:31:0d:f6:f1:b9:50:
         f0:29:3b:be:ee:e5:00:e1:fe:b7:7d:ea:0d:67:19:40:27:3c:
         75:ce:fd:8c:f0:a2:aa:e9:8b:14:c6:0f:53:e5:74:5e:af:08:
         11:76:e6:64:e9:b5:18:45:a8:a2:9b:4e:fd:36:41:fa:f8:7f:
         31:85:c2:94:56:54:8d:2e:7d:5c:fe:8c:ba:c6:78:5a:38:5d:
         d1:42:b7:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F6xRpVIUAPfbVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
ZTk4ZDY4ZTktNGIzYy00MjljLTg4MzQtYjdlNjQxM2ZlMDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5HvHBxsTUSpOmt7phZca8WH3mWibBN2Tjz
Yz7jk1kNaKbvnbhwNGJ6Pq2dj3Dd6wg9S+Vk3k+dLyZW5sbwmht1zLYBlCR+raQX
Iq0rPKDqqj4Xth38R+HHiWZjUjDGWG919DeMXsfX9sY5QblE2lh2WjZNhUW9XUif
YNoPkYuSXEP2bCq5UsPXzirMQg6zYOtnTzt+xmSWNiFxfCqUM1c4P5TzT5nfbG0K
efWlxAH3//wWeJg8Lpe6AE8qvx8/yikNMd3KAyyiWbqJYgf5b/bEAFbOHgq6XD3u
F8TzuabyIBOwMfhk4oOyW0glRFBP219N0xiGgln+mk/tIOdGVQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOXHe/BUq+XNYNBp5adm3QKUpsnGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZmQxOTNmZWQtZDI1Zi0z
NmQ2LWE2OWEtZDRkMjM1YzMyYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAi7a
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACS4vd2SIUbDshPB9B16VOycsuyI4kuHGm0gzWCysqL07/mf09xO
pLQ/7Il3EcjeAuLLRNFtuMolf3/tvJPf8opDQTF2k46XlSEQI1Ze1lQDx3JHZco+
rfYv4Z7+IUaysqRCNjYArS/SJKjO1qUwoiT0TUpHIpbgzfo/KLlKwc8FyFfVGHDY
TrynjpsypLytLanCXr3hHWyVWh4qcsqsFEvtoCDX2rj3lnWZ9Q6U1jEN9vG5UPAp
O77u5QDh/rd96g1nGUAnPHXO/YzwoqrpixTGD1PldF6vCBF25mTptRhFqKKbTv02
Qfr4fzGFwpRWVI0ufVz+jLrGeFo4XdFCt28=
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:53:27 2026 by rpki-client