Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa
File:                     63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa (raw, json)
Hash identifier:          hUILcmIMlKLqnZ3C+CjF0dyObNT80UDqkSpLZxPuCTk=
Subject key identifier:   16:22:52:EA:B9:37:DC:46:DA:5F:8F:4D:0D:6A:CA:20:69:86:07:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717B46988608F60BF61A080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b4:69:88:60:8f:60:bf:61:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=6159fcd6-ff8c-498f-b2b6-1b46b6a08221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:5d:b0:a3:0e:ef:45:89:74:c8:e5:a9:62:
                    aa:35:fa:34:e7:bf:87:09:60:9f:06:f4:4d:68:80:
                    a5:c8:ee:e9:03:66:41:d8:ed:5c:f0:ec:ca:c2:cf:
                    7f:ee:e1:25:47:48:ce:62:1e:21:e4:9e:4b:50:c5:
                    33:ea:2a:9d:fe:9f:d9:72:79:ef:f3:41:cc:93:29:
                    25:62:2f:95:21:3c:0a:71:ff:13:e1:fa:31:25:44:
                    e5:51:75:b4:0e:fd:04:93:1a:a7:21:79:88:5a:cc:
                    1c:96:0c:01:0e:96:1c:e2:5b:0a:1e:cf:c0:0b:24:
                    47:8c:69:c9:06:78:b4:ca:90:06:34:a5:08:c6:ab:
                    fa:46:16:8d:35:f8:7a:1f:20:bc:0d:4c:41:14:44:
                    a1:5d:95:ac:18:a5:9b:94:ea:3a:c4:d3:04:ef:97:
                    ee:2f:6d:ea:d2:7a:34:05:6d:6f:e1:ef:ca:a5:48:
                    c4:79:eb:08:63:b0:2b:be:f1:84:7c:c8:a4:11:a6:
                    79:35:7b:05:9c:ab:3d:25:1a:a0:bc:1e:72:8b:47:
                    27:0f:00:d5:eb:d1:a6:e5:d0:0d:8d:9c:2a:92:09:
                    89:a1:ea:84:e9:0a:99:10:34:a3:c6:5c:71:13:ff:
                    bf:45:8b:3e:fa:98:49:45:6b:24:0b:62:26:38:a4:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:52:EA:B9:37:DC:46:DA:5F:8F:4D:0D:6A:CA:20:69:86:07:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/63c2bcbb-58bf-3f62-b55c-e84f8f83a4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:15:27:08:d3:08:c2:b4:fd:02:42:51:6d:19:75:79:2c:dd:
         e8:4f:ee:8d:ff:6f:69:ec:fe:61:00:47:dd:8a:5a:6b:e4:3b:
         27:1e:37:e8:45:cf:4f:c4:5f:1f:f9:c8:b9:f4:d8:fd:ed:75:
         61:5f:aa:2b:c5:12:93:3c:90:53:b3:df:69:9d:f4:89:7a:1f:
         5c:d7:e6:11:a7:72:cb:83:a1:32:63:3c:4e:20:92:f9:e3:e4:
         9d:d1:88:6a:a0:b4:de:56:8c:5b:ec:c7:db:0a:5e:2b:76:81:
         79:fa:fa:24:38:98:51:82:4e:22:a0:24:1b:4c:8d:f5:79:44:
         90:82:d0:9b:0f:43:5c:59:d6:bf:e7:a5:3e:47:c1:b0:f8:12:
         20:bd:3b:a9:68:2e:84:2a:b4:98:c5:31:6b:24:66:28:4a:8c:
         83:05:4e:9d:bd:94:d4:a0:52:3b:bb:f6:9f:97:47:44:9a:db:
         cf:fe:e5:dd:7b:04:d9:27:59:69:dc:e7:61:2e:d2:9f:5f:ed:
         ad:fd:79:76:5c:54:bc:7c:85:1b:df:61:7a:ee:ce:8d:70:16:
         8b:ac:23:2c:14:9c:3d:98:0b:9c:52:8f:59:b1:fc:95:46:d2:
         12:11:84:7f:f0:72:b9:8d:a8:39:28:cd:10:1b:37:97:e3:ac:
         31:2f:94:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 11:46:50 2026 by rpki-client