Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ad82615-52a8-34a1-9e8a-cf587e1360db.roa
File:                     8ad82615-52a8-34a1-9e8a-cf587e1360db.roa (raw, json)
Hash identifier:          myg4FFQ7khZIy1ttdRw87vVGa3HmspjNDH1blV7Een0=
Subject key identifier:   FE:8E:8E:46:9C:B9:B8:9B:0A:DC:BD:8E:A0:76:F9:D9:67:6B:7E:2A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D7470197E225E20773FA91280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ad82615-52a8-34a1-9e8a-cf587e1360db.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397216
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:19:7e:22:5e:20:77:3f:a9:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=34148f4a-f0cb-4563-bcd6-f04d11505df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:30:a1:b1:0e:f6:7d:9d:b2:3b:c7:fc:8b:
                    a5:31:5b:c2:25:a7:35:92:7f:08:da:67:23:c1:74:
                    c9:04:f4:1f:ac:c2:5f:76:85:9a:96:61:5a:99:ab:
                    43:39:53:0a:eb:d6:18:a4:c8:64:07:70:ff:4a:bf:
                    76:6f:1f:61:52:41:89:74:60:53:74:b0:7b:bd:73:
                    66:e6:7d:a5:40:be:26:5d:6d:bd:61:03:8a:d4:b8:
                    e2:56:47:6c:4e:b8:ea:71:28:ca:41:4e:90:6d:c1:
                    56:d7:fd:66:db:13:b4:e0:09:36:9d:4b:b0:59:4d:
                    6a:1b:5d:8c:6a:3a:2f:9d:df:6f:11:b7:a9:9d:2c:
                    75:46:76:3e:30:6f:5a:13:44:03:35:3c:15:95:ef:
                    ed:49:e0:1c:a9:32:37:0c:b2:85:cb:0c:7a:e6:4b:
                    73:ff:4d:e1:98:e1:ce:2b:91:c8:74:34:8a:5b:7b:
                    4c:71:89:7c:aa:96:a1:0e:45:b5:bc:a2:23:44:36:
                    35:6d:29:60:af:93:2c:01:15:49:78:22:75:b3:e9:
                    3d:80:5a:11:25:14:b6:26:5f:ee:7b:19:5a:52:4a:
                    4a:46:1a:c4:3b:86:b0:c2:0e:fc:c5:8d:6a:36:96:
                    d0:c7:fd:e9:a9:32:77:d0:db:e9:e2:4b:1f:e7:b4:
                    3e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:8E:46:9C:B9:B8:9B:0A:DC:BD:8E:A0:76:F9:D9:67:6B:7E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8ad82615-52a8-34a1-9e8a-cf587e1360db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:5b:08:58:25:c2:15:a1:f5:04:00:d6:03:12:12:45:73:
         f4:aa:8c:06:ff:c2:ea:3e:ed:55:15:4a:27:20:5b:c8:17:f1:
         fa:b6:ae:7e:a1:40:7d:7b:11:e4:e6:b4:2b:06:02:cb:9a:1c:
         e0:54:70:fe:90:50:af:b4:20:97:9f:c0:f9:90:6a:5c:2f:f2:
         8a:49:67:a9:c2:96:1b:0b:00:6a:50:ed:1f:5c:55:d1:e7:fd:
         92:8a:45:a4:f4:b8:87:ad:62:9a:01:8e:be:13:ad:dd:c0:5e:
         96:37:63:18:09:69:54:c7:4a:19:34:fd:f3:2f:98:02:65:4c:
         c8:fd:a9:44:65:84:1a:18:db:d5:f1:cc:32:97:9e:5b:8d:18:
         81:4c:56:3a:52:ac:2a:7e:5a:a6:13:9d:46:00:1c:67:b0:67:
         fe:66:b4:7d:bc:05:6b:dd:af:e0:fc:dd:0f:9a:01:16:73:96:
         a2:23:79:37:c1:38:54:ab:74:62:d4:07:7b:3e:fd:71:c9:48:
         34:72:7c:0a:dd:92:94:d3:f4:1d:79:cc:1c:8f:8a:f0:02:a6:
         0c:38:ae:ba:cc:86:de:e2:14:85:3c:74:4b:63:d4:78:b3:cc:
         97:8f:23:33:ee:91:3a:78:f4:bc:94:53:a0:30:d4:37:42:eb:
         e9:45:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:10:15 2026 by rpki-client