Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa
File:                     8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa (raw, json)
Hash identifier:          gxcY1MMRU07PnP3AcFEv4PsVZsBZci4GlyVb1Ld5aIk=
Subject key identifier:   0E:63:21:85:3A:DE:FE:41:06:68:6D:BD:F1:BA:C5:3A:EC:05:EC:42
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74701760900400B2983A7BC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397236
IP address blocks:        2001:503:e239::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:17:60:90:04:00:b2:98:3a:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=f1dc797c-a471-4153-8a8f-6176f1d9a146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:53:b9:b5:fa:a1:31:61:47:91:09:95:b7:
                    3d:61:75:6a:a0:42:ff:96:80:f5:eb:0b:cd:e1:1d:
                    7a:ef:e7:7e:56:54:87:24:ff:33:02:bd:be:55:8b:
                    c3:ae:f5:10:30:23:8a:f1:4b:55:3a:e2:34:b6:9f:
                    17:0a:e0:8b:30:9c:d6:0b:fa:ec:17:20:03:d7:db:
                    7d:db:06:d6:77:70:44:4a:6b:04:5d:ea:0f:9d:cb:
                    51:35:a6:02:93:e6:ef:73:23:68:28:68:7f:f5:59:
                    a3:69:9d:a6:9e:f3:0c:33:9b:6a:cd:23:7b:80:8d:
                    2f:e7:5d:b3:84:79:8e:f4:11:5f:fe:53:eb:46:d8:
                    24:98:39:f8:57:8a:2b:c5:69:13:43:e2:86:9b:b0:
                    35:f3:e3:10:a3:3c:19:8d:65:5c:9a:23:48:e7:ec:
                    20:7a:8b:a0:4b:9f:f5:9f:ca:41:55:ee:63:a0:5a:
                    f2:fc:5d:eb:07:8a:4d:27:78:9f:83:54:de:95:e3:
                    6e:6c:46:fb:b1:fa:e3:c3:c0:3a:a6:16:ab:85:67:
                    db:21:dc:6e:0d:fa:52:c9:5a:73:6f:ab:a3:45:fd:
                    69:4d:fa:ff:7b:34:b4:54:a3:d3:cb:64:fc:fc:33:
                    1e:6a:6f:0f:64:86:b0:f3:06:d8:19:c3:ca:96:b6:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:21:85:3A:DE:FE:41:06:68:6D:BD:F1:BA:C5:3A:EC:05:EC:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c876487-23b1-3cb9-95fd-6dd3d9642db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e239::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:e1:b7:8b:ba:c6:a3:06:fa:b1:1a:94:59:ad:b9:d8:39:
         5d:b5:6b:9d:fd:18:de:ae:9c:f1:72:59:da:39:e0:00:9c:30:
         08:eb:5e:07:33:e0:1c:43:9e:b4:96:11:c0:b0:ab:67:34:33:
         f3:6d:91:b5:5f:78:ef:28:4e:dd:df:f7:6d:4a:23:cb:74:23:
         14:47:08:02:54:8f:bc:f8:21:de:12:42:0a:4c:16:12:84:07:
         73:ab:68:a0:f7:1a:89:d5:e2:19:11:8e:fe:ef:54:5a:ca:a2:
         fd:d7:5c:42:28:d4:cd:d3:f9:42:b1:9f:b5:23:6b:b9:27:e3:
         74:e3:3e:68:ec:2b:c6:f9:94:61:57:dc:78:bf:11:2a:a2:c4:
         e9:57:3a:b7:f7:f9:a2:13:d3:21:9e:72:d1:ef:a7:a2:3d:5e:
         7d:31:1a:c7:2c:4f:b4:af:06:8f:99:bf:e6:b4:74:b7:cb:9a:
         14:88:04:12:71:d9:a8:57:06:f8:68:58:b3:a7:10:7a:7b:22:
         4b:7e:43:d1:5f:67:b4:03:9a:23:cd:f7:fe:6d:3f:63:f7:44:
         dd:8a:0b:41:f3:a4:de:09:af:e5:08:cd:f6:a0:54:96:ed:37:
         a3:68:81:f6:9d:a1:01:c2:35:dd:e9:41:4f:a2:f3:4a:30:0c:
         d8:9a:e2:44
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10cBdgkAQAspg6e8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZjFkYzc5N2MtYTQ3MS00MTUzLThhOGYtNjE3NmYxZDlhMTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPVTubX6oTFhR5EJlbc9YXVqoEL/loD16wvN
4R167+d+VlSHJP8zAr2+VYvDrvUQMCOK8UtVOuI0tp8XCuCLMJzWC/rsFyAD19t9
2wbWd3BESmsEXeoPnctRNaYCk+bvcyNoKGh/9VmjaZ2mnvMMM5tqzSN7gI0v512z
hHmO9BFf/lPrRtgkmDn4V4orxWkTQ+KGm7A18+MQozwZjWVcmiNI5+wgeougS5/1
n8pBVe5joFry/F3rB4pNJ3ifg1TeleNubEb7sfrjw8A6pharhWfbIdxuDfpSyVpz
b6ujRf1pTfr/ezS0VKPTy2T8/DMeam8PZIaw8wbYGcPKlrZRLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5jIYU63v5BBmhtvfG6xTrsBexCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOGM4NzY0ODctMjNiMS0z
Y2I5LTk1ZmQtNmRkM2Q5NjQyZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+I5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGH94beLusajBvqxGpRZrbnYOV21a539GN6unPFyWdo54ACcMAjr
Xgcz4BxDnrSWEcCwq2c0M/NtkbVfeO8oTt3f921KI8t0IxRHCAJUj7z4Id4SQgpM
FhKEB3OraKD3GonV4hkRjv7vVFrKov3XXEIo1M3T+UKxn7Uja7kn43TjPmjsK8b5
lGFX3Hi/ESqixOlXOrf3+aIT0yGectHvp6I9Xn0xGscsT7SvBo+Zv+a0dLfLmhSI
BBJx2ahXBvhoWLOnEHp7Ikt+Q9FfZ7QDmiPN9/5tP2P3RN2KC0HzpN4Jr+UIzfag
VJbtN6NogfadoQHCNd3pQU+i80owDNia4kQ=
-----END CERTIFICATE-----
Generated at Sun Apr 12 08:12:24 2026 by rpki-client