Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa
File:                     98889e34-abca-3032-ab9c-7417548372a2.roa (raw, json)
Hash identifier:          TkyTrRgHYxU7F2Pmk4V7opAlCo/Qs+LBIRNRVbGys20=
Subject key identifier:   63:5E:6E:60:4B:A9:C8:AB:EB:F8:09:29:A6:69:A6:C5:B2:3C:9C:BD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74701492D557F5BA1AFAC600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397243
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:14:92:d5:57:f5:ba:1a:fa:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=04b87661-b9e1-4566-abfa-08591db365da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:c1:fd:46:c0:ee:cb:ad:bb:66:7b:73:2a:
                    60:ac:97:4e:80:ec:6b:c5:87:8c:6b:02:ce:15:9d:
                    65:c2:09:4b:e0:dd:1d:bd:34:8c:90:d7:bd:9c:e4:
                    35:4a:9c:f2:80:5c:08:03:2c:14:9d:32:09:24:92:
                    35:f8:d5:b7:4c:42:0f:a6:58:f3:12:ef:e7:47:77:
                    af:67:0f:4b:e3:48:d2:89:09:fc:b6:c7:1c:9b:05:
                    14:d9:2e:ce:7a:aa:61:14:b7:41:99:67:20:5d:5e:
                    5f:0f:f8:cc:43:7f:df:1d:30:82:9b:6c:57:06:8d:
                    d9:9b:c6:89:42:b0:89:c5:b4:f4:88:50:69:2e:72:
                    95:7b:e8:4e:e1:03:96:8e:6b:25:a9:74:4e:96:7e:
                    69:0e:58:01:f6:2c:12:18:bb:7d:e1:d2:59:be:a2:
                    fb:b6:dc:1a:19:ef:df:01:4a:f0:1f:df:5b:ef:d1:
                    82:73:eb:a3:71:65:e0:bb:89:98:a1:c6:91:8b:bd:
                    2e:2f:4b:1f:92:1d:7f:29:b4:71:aa:aa:14:85:69:
                    dd:7b:53:e2:a9:8d:f1:cd:25:2d:1c:d9:c8:2a:19:
                    3c:f8:d0:8a:f6:78:c5:2a:90:77:c1:ad:46:0b:76:
                    ce:ed:f9:1b:d3:a8:77:2c:8c:84:ae:3f:20:ce:bb:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:6E:60:4B:A9:C8:AB:EB:F8:09:29:A6:69:A6:C5:B2:3C:9C:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/98889e34-abca-3032-ab9c-7417548372a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:18:6b:13:3b:19:bc:b4:27:58:b6:d1:3e:38:a9:c0:75:b0:
         df:5c:0c:42:3c:89:58:bf:7a:e2:9a:75:5e:6d:44:a8:8f:10:
         e7:d8:e2:90:30:3c:0f:bf:c2:61:3a:c7:a8:37:c9:68:09:7e:
         16:50:93:70:c2:87:dd:d1:81:e1:9f:52:1d:83:c2:87:22:53:
         15:f9:cd:e4:90:91:0c:3c:ab:a6:a2:3f:b8:13:89:83:9e:50:
         f4:5d:dc:60:96:10:84:f7:8f:22:75:69:ee:3e:b4:b0:ae:31:
         0c:c7:50:43:4b:78:99:bd:ea:ce:c1:af:0e:31:36:7e:8e:e9:
         50:60:c5:b8:f1:b1:81:34:ec:67:ca:ea:68:b6:ce:e3:45:61:
         b0:2c:55:8c:5a:0e:37:eb:54:d7:ef:41:83:80:4d:27:a4:85:
         b7:d1:a6:17:87:87:c2:35:6f:de:27:72:0e:f3:d3:7c:7e:97:
         22:c7:8d:53:72:10:2d:73:b9:d1:af:55:bc:fb:88:ee:a0:82:
         fb:ef:15:0d:d7:3c:74:a7:9d:6b:9a:5f:8f:23:ad:8f:a9:f2:
         66:79:b1:a5:8a:9a:12:0f:3b:b5:b0:9d:9a:1d:6a:88:99:93:
         64:22:65:40:15:a3:98:11:b3:8c:0c:31:fc:52:10:b1:d1:9c:
         87:eb:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:12:23 2026 by rpki-client