Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa
File:                     3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa (raw, json)
Hash identifier:          UIAaZ4H6sedJ79H09in8OW30oa0h3W4d71GJ6vsKIMs=
Subject key identifier:   EB:67:07:E8:C2:B0:AA:1A:C1:98:3E:F6:F7:94:81:42:76:B1:62:36
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AEEA3A791943F7AA8A20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397219
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ae:ea:3a:79:19:43:f7:aa:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a5e0d4fe-fb94-4fdb-9a7b-be4088599bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:94:9c:d4:95:f9:59:01:89:43:e8:19:26:e0:
                    af:54:5f:f8:c2:e6:5f:89:8c:6e:0b:b4:45:3a:3f:
                    17:48:86:f0:5c:00:63:09:40:66:01:14:9d:ee:5c:
                    f7:a6:60:4f:90:e8:30:f3:c5:a3:bd:a8:f4:e8:a3:
                    d8:ea:3f:f2:f0:39:b3:bb:b3:59:1d:32:ab:8b:29:
                    5a:2e:e2:d8:34:7b:24:5a:7b:ec:3f:f8:04:68:00:
                    15:fd:16:08:78:76:c3:da:4d:f2:13:58:0e:bc:ae:
                    1a:1e:b1:25:1b:e1:7b:23:57:57:7b:c8:50:4d:86:
                    e5:26:41:fb:d2:20:60:62:63:a6:89:71:d2:24:e1:
                    07:8d:ec:ff:8b:08:e7:1d:6a:65:72:4c:97:e3:fe:
                    7c:40:c9:b4:34:a6:37:c0:bf:f7:b8:ea:95:3e:3b:
                    49:5e:06:84:91:7b:26:41:93:12:de:98:78:21:26:
                    eb:d2:03:45:34:ba:b5:73:4a:0b:db:3c:e0:66:db:
                    26:9b:08:7f:d9:2a:a7:46:fa:22:f7:8e:d5:c8:98:
                    74:8a:62:be:95:5c:f0:29:36:f3:c8:f1:c5:ef:03:
                    c5:b9:b3:e7:08:83:79:a0:36:b7:1c:71:1a:cd:c0:
                    f8:df:ad:2d:46:0e:b3:61:90:ab:91:06:e5:1e:b9:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:07:E8:C2:B0:AA:1A:C1:98:3E:F6:F7:94:81:42:76:B1:62:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:5f:42:6e:78:3c:e0:13:8a:57:67:37:1b:b3:a0:af:3f:
         6e:b7:2e:57:ba:e6:0a:c0:d2:01:e4:0d:1c:4c:f4:7f:d1:63:
         a4:bf:bc:53:78:a4:cf:b0:0d:e4:11:2d:c0:29:e4:a4:ca:99:
         04:fc:f1:14:c2:1c:08:88:d6:5e:ed:13:9a:02:12:8f:82:fd:
         87:6a:c7:f1:fa:30:92:fa:e2:72:e8:4d:2a:75:23:f7:4e:56:
         47:52:ff:d4:51:09:99:ae:71:3f:77:85:9c:99:02:73:65:22:
         86:3f:92:c2:d3:a3:04:fa:52:60:99:4d:98:75:c2:cc:5e:4c:
         a2:ed:59:1e:89:c1:c4:9c:98:26:ed:27:ce:c4:b4:d0:a4:f2:
         4b:da:a9:19:04:0d:1e:e4:b9:f6:49:74:d9:a4:e5:87:cc:fd:
         20:ad:bf:ff:61:89:22:61:a2:1a:24:83:a0:de:a6:87:c0:7b:
         1e:19:a2:24:1f:10:25:33:d6:28:5c:a2:c9:13:90:9b:98:16:
         73:89:cb:02:a7:4f:36:42:eb:5f:72:32:59:86:63:81:a6:24:
         70:1a:c6:0e:c1:7a:b0:75:b9:eb:e6:37:00:40:22:c3:fa:06:
         49:ae:d3:7c:c1:c1:6d:b8:78:09:da:e7:17:3f:19:9f:54:44:
         df:55:c9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:57:43 2026 by rpki-client