Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa
File:                     02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa (raw, json)
Hash identifier:          edrQjPrXZwNkyylcHFTPXek9VomqUzPW4omXsmiKYOg=
Subject key identifier:   6F:E2:78:ED:42:09:CC:39:FC:A6:4C:51:54:21:59:6A:CC:AA:45:3A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E6EB07B21B1A367E6B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397215
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e6:eb:07:b2:1b:1a:36:7e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=2267deec-504d-47eb-8544-22b9b708f8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:9e:8b:4a:bb:bd:c2:10:8c:04:60:44:a6:
                    91:e9:73:f7:23:f5:a6:db:8d:e3:fd:f7:9c:16:99:
                    4c:ce:56:fc:02:14:8b:9a:04:9d:74:7c:94:44:cc:
                    f7:32:9a:24:2a:21:26:ce:25:69:c0:4d:54:c4:55:
                    9e:4a:4e:61:85:f7:fa:c3:76:81:3e:71:37:fa:14:
                    3e:5c:42:96:db:af:ff:b9:55:f5:8b:57:41:f9:af:
                    9f:5f:dd:60:d6:1b:f4:8e:2d:c7:b7:58:21:7c:c6:
                    24:aa:24:09:48:76:ca:57:af:60:a1:3a:0f:af:53:
                    9c:ee:04:33:39:35:4b:70:0e:5e:4a:b0:a4:cb:c1:
                    73:29:54:15:6d:f0:2a:ac:4f:0b:82:36:f5:27:ff:
                    05:81:2a:07:82:ad:b9:57:03:25:f9:95:4e:97:37:
                    99:b7:e7:63:3c:78:ef:7a:4a:bd:f3:9c:8c:37:79:
                    d5:b5:4c:26:13:ea:db:23:67:fa:8b:a1:f1:5d:bb:
                    49:70:9f:52:0f:30:b0:57:d8:b5:05:9d:d1:e9:be:
                    89:b3:82:0d:ef:41:a8:42:9a:84:9a:99:70:e5:bc:
                    50:3d:6d:8d:fa:45:ec:10:40:72:4f:a5:13:29:08:
                    78:3c:dd:2d:63:0a:71:2c:1a:86:6e:a5:5c:1c:a1:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:78:ED:42:09:CC:39:FC:A6:4C:51:54:21:59:6A:CC:AA:45:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/02a9d747-b0df-3ef8-9d4a-9a67343636a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:01:3c:fa:19:b4:17:83:d2:5e:ab:73:3d:d8:47:cb:d4:
         59:80:6d:7c:af:b3:71:7c:c0:4b:50:0c:a3:63:72:fb:3b:cf:
         cb:63:d2:6f:d6:ea:7d:5a:21:c8:6a:60:06:c5:aa:c0:3d:14:
         25:65:00:4d:d0:e7:26:50:ac:83:df:53:6e:1c:bc:97:5d:43:
         65:21:67:40:52:63:68:92:ad:57:39:08:c6:49:ac:df:87:d0:
         e0:c9:1b:51:31:e5:a7:e0:ad:c4:44:71:ae:fa:6a:a5:5a:29:
         1f:1e:79:78:cd:79:8b:31:a0:ec:ff:84:51:55:e0:30:1f:53:
         c9:96:f0:88:69:e9:19:53:1d:39:33:c3:32:b5:64:80:1e:2a:
         00:6a:35:98:84:98:69:17:7c:17:6e:d3:97:28:99:d8:86:d2:
         b0:f4:c3:4c:d0:37:8d:f4:7b:de:63:e1:ce:05:74:e0:3f:ed:
         6f:98:08:aa:fe:ed:61:0c:70:a6:e9:3d:2e:cf:ba:24:00:e0:
         d9:4c:68:13:f7:4b:51:c0:92:ad:bf:d9:e5:42:fd:36:50:5a:
         f3:f7:14:f8:f1:62:0d:59:e8:a7:ad:04:cb:48:a4:f8:55:6b:
         6b:95:c7:62:cd:0b:aa:14:f3:e7:43:82:04:c0:5c:35:eb:11:
         6e:2b:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:27:51 2026 by rpki-client