Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
File:                     9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa (raw, json)
Hash identifier:          FeoAR5ax0FNrRHSDp2rDW0DHvvucuMhd2nV0mTvhIGI=
Subject key identifier:   82:1E:57:A8:27:07:4A:C0:88:30:01:E2:5A:8C:E9:02:39:9F:22:95
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F4328584DDE85CAA1C7CCF45F00E40600
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2620:98:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:ca:a1:c7:cc:f4:5f:00:e4:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=3920d254-2f16-4fd0-9e69-d9b4fe98258e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:aa:d5:73:e5:28:86:50:9f:d0:1f:49:a8:
                    f2:bf:13:4e:31:1c:ee:dd:7d:2f:6e:d1:d1:fd:1f:
                    72:b3:a5:a1:a4:68:9c:66:f3:88:68:01:19:03:a4:
                    4c:81:e7:69:a7:fc:92:9a:3f:ba:c7:ef:04:97:37:
                    99:81:cf:1a:7f:68:97:d2:c0:7f:df:7c:ea:24:ff:
                    ab:a0:4b:59:b9:d7:82:20:93:98:df:46:5d:88:ff:
                    92:75:5e:e2:da:2d:c2:b4:0c:f7:72:41:19:c7:ad:
                    9b:67:59:eb:06:29:94:cc:54:9b:ad:93:34:16:2e:
                    d2:92:9e:45:5c:29:a8:66:8b:7e:21:dd:ee:61:2f:
                    14:6e:94:eb:2e:c2:5c:85:20:e2:4c:90:d2:6b:08:
                    51:fd:e6:2c:9c:0e:cd:17:ed:43:95:0c:de:20:95:
                    8a:e1:0a:e2:fe:a9:ce:d3:a0:f2:c9:ad:78:e7:03:
                    04:1f:9e:87:37:fd:26:08:38:5a:ad:cf:6a:7f:e4:
                    f3:6f:bc:4c:76:c9:fb:64:85:34:41:7c:2c:ff:d9:
                    6b:26:1a:18:b3:8a:21:3c:59:e9:29:65:65:01:ee:
                    66:02:24:51:3f:7e:1f:07:2d:62:95:52:cb:dc:2f:
                    52:dc:04:8c:ab:4d:73:6f:58:69:ce:2f:1d:58:57:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1E:57:A8:27:07:4A:C0:88:30:01:E2:5A:8C:E9:02:39:9F:22:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/9c21f9af-77b8-3b29-8328-ef83d7dd98e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:cb:7e:16:a9:1c:c3:4d:c1:f5:32:97:fe:fb:95:ee:84:
         51:f6:24:c8:db:99:09:5c:69:41:05:a0:92:94:86:78:7e:22:
         13:d9:aa:3a:6e:ea:ad:5b:f2:c2:e2:d1:48:b7:c7:c8:ec:31:
         8c:04:7a:14:2d:d4:44:c6:b4:89:c4:28:fb:6f:c5:fc:7a:06:
         90:8a:1b:3c:eb:09:08:ab:ac:32:f2:44:5a:0b:40:cc:11:c2:
         1d:b1:1b:6e:c7:63:70:0e:74:75:e7:a9:83:fb:4e:7e:7b:c5:
         0c:1d:56:6f:44:bc:31:bc:e1:24:3d:b4:c0:80:8d:8e:f7:1f:
         b5:97:08:b9:51:db:50:a5:e8:fc:65:92:8c:ee:d2:62:94:6f:
         62:91:10:fd:48:a3:b4:b0:e8:22:76:fb:20:d5:8e:ca:dd:ed:
         be:25:ff:bf:db:d9:34:28:a6:2f:9c:be:f0:8e:7b:d5:1c:cb:
         46:d2:f8:e1:d8:4c:74:7c:c1:78:55:77:e8:7b:33:c3:e5:52:
         cf:1d:5a:2a:4b:a4:9f:87:e7:bf:32:cd:18:89:3b:ee:4d:70:
         53:6d:2a:cc:0d:4d:82:86:c0:9f:61:90:0d:3a:e9:3e:74:bb:
         f9:2c:66:6f:a9:e7:09:bd:e6:58:5d:d5:4e:0d:96:3c:9c:fd:
         0f:f9:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:20:47 2026 by rpki-client