Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa
File:                     abbd1e78-c1e1-3450-8643-52bcf78ea077.roa (raw, json)
Hash identifier:          a05gKrpeII4wkA4FGZ/fDncI6PEmrsUhDKe6uvuqAwA=
Subject key identifier:   1B:D2:49:51:61:9A:97:39:7F:5D:93:B5:BE:4E:22:4D:4B:82:BE:80
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584D7CCFD2D34914F090AB6CD100
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     27385
IP address blocks:        2602:fdaa:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:d3:49:14:f0:90:ab:6c:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=c15d5cfd-4d7d-44e2-a113-eef7be6ece09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:0b:30:af:a8:81:c0:10:83:26:c3:f8:f3:
                    e0:b9:fc:97:a2:52:14:2c:cf:fa:ce:a1:1a:b3:2a:
                    0c:2d:47:f9:ef:33:81:ce:8c:63:36:31:9f:3d:67:
                    bf:25:14:90:63:24:c9:b5:fc:90:53:e5:4a:2d:5e:
                    9a:d0:1d:a6:36:5b:46:13:57:a7:84:74:7f:c8:ce:
                    03:a7:3e:d3:b7:96:16:6b:95:10:36:34:30:23:ac:
                    8a:7a:13:9a:4a:dd:6c:24:91:29:ea:7d:0f:14:26:
                    84:0e:2c:59:9d:2d:a4:0e:33:64:5e:36:80:d5:eb:
                    64:b1:22:23:96:2c:0e:30:8c:6a:e6:01:42:bf:0a:
                    3e:96:40:d4:66:e1:1a:8e:a9:53:77:84:31:55:7e:
                    f6:7b:1b:15:67:04:e8:49:a7:50:cb:8c:b2:33:7a:
                    28:09:57:ae:5d:3c:81:b1:31:4d:26:81:94:36:b4:
                    52:bf:27:4c:5c:7a:3f:c7:4d:71:36:78:47:25:04:
                    34:e2:b5:42:44:6f:d0:0a:d3:d8:51:66:5b:a8:af:
                    55:4a:10:cc:71:96:61:0a:b0:94:d8:c4:35:92:bc:
                    cf:61:d4:96:dc:fb:eb:cb:ec:8f:fc:f0:db:94:a4:
                    a8:bc:aa:4e:2a:67:0c:f5:3e:37:7d:9b:5c:01:9f:
                    21:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:49:51:61:9A:97:39:7F:5D:93:B5:BE:4E:22:4D:4B:82:BE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/abbd1e78-c1e1-3450-8643-52bcf78ea077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:40::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:7a:04:5a:dc:b0:a1:bc:3a:d8:37:cf:a4:cd:ee:22:bc:
         9d:33:b5:1a:26:21:01:25:2f:dd:ca:63:96:68:f4:43:19:34:
         de:70:ae:59:d6:3c:9c:d8:ad:bf:cf:2f:5e:be:12:3c:2a:de:
         c4:78:e2:96:cd:80:b2:6f:db:66:d5:88:95:f4:99:ba:34:50:
         66:60:8e:2d:35:bc:5c:b9:4a:01:b2:5e:95:81:57:6c:0e:93:
         2c:d1:a4:bd:ee:28:a3:a7:f1:a7:b9:c5:07:4b:4f:7d:dc:78:
         f4:c9:f2:4c:29:13:af:d5:9b:84:aa:96:5e:1a:02:c8:ac:f6:
         57:ea:8b:fb:f2:89:17:e2:f7:74:e6:e1:f3:26:74:c8:6c:d9:
         ca:8b:88:95:e2:a0:cb:2a:75:85:9c:78:db:f4:c3:ef:25:d0:
         b8:cf:27:3e:4f:d1:83:b0:c7:c8:0a:4d:a6:78:56:f0:aa:b7:
         67:c2:14:51:ce:11:c5:9c:83:32:f0:a2:91:b3:e0:b0:b4:33:
         4e:0c:29:e4:02:57:4e:1a:6a:e3:76:cf:cd:b4:f7:84:c4:2b:
         78:df:be:8d:f7:67:40:76:bc:7b:b5:fb:68:ed:79:45:18:c8:
         1b:8b:cd:e5:9a:16:af:17:6b:20:37:1d:7b:89:6d:e2:84:5d:
         e7:98:e0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:14:23 2026 by rpki-client