Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa
File:                     9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa (raw, json)
Hash identifier:          7LHt4giIvNajZ8RJDMZvXSTRWYdHHCtfU2eSmVaA6OU=
Subject key identifier:   FE:05:9E:C8:6B:FB:6B:A4:E0:12:81:FD:85:2F:02:2D:18:74:0D:BE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F9A68B97DECB4A504C290AC00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     12008
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:b9:7d:ec:b4:a5:04:c2:90:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=f0213139-014c-4f9c-81db-c8e3f65d2d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:94:42:c0:cc:2a:c2:5c:47:00:4d:bc:0f:
                    84:92:28:ed:8f:92:c5:b2:72:6c:6a:68:a4:37:3e:
                    33:b1:cb:c3:73:40:cb:5f:89:fa:45:72:b7:3b:88:
                    19:ae:2b:55:aa:80:28:ef:48:9d:50:cd:41:d3:ae:
                    89:51:5d:b0:ab:2c:be:f2:5b:2a:f5:97:86:22:4f:
                    e5:4c:a0:4f:76:46:76:83:c0:66:ee:de:91:f4:6a:
                    b8:c6:ed:ee:1a:a6:6f:77:d6:fb:ea:08:b2:f9:05:
                    e1:28:ea:d9:4f:9e:99:ae:91:2d:43:ac:8f:e7:b1:
                    a0:ed:d6:ea:2e:93:bc:8e:df:ec:aa:79:c3:b5:27:
                    79:37:66:88:af:dc:d3:a8:1d:cc:a9:d6:98:bb:69:
                    2a:bc:d0:1e:06:a4:c7:49:75:1f:fd:74:1e:b0:70:
                    25:7e:b1:a1:2e:eb:af:dd:08:1f:4a:bd:b2:b3:49:
                    27:43:42:f4:0e:f9:bf:f5:a4:c9:49:63:7b:45:e2:
                    83:12:84:38:ba:44:c8:30:e5:0f:87:6e:c1:34:48:
                    21:c4:91:70:69:7e:89:2b:94:93:24:c5:ac:f6:f3:
                    e0:a1:5e:b4:0a:cc:10:df:89:f3:4e:34:d2:4d:cd:
                    72:db:da:e9:b4:0f:30:6d:c4:93:1c:1e:b5:36:c2:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:9E:C8:6B:FB:6B:A4:E0:12:81:FD:85:2F:02:2D:18:74:0D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9a0bcf29-1128-3b05-8d12-af227e9ade2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:06:d1:13:f7:0b:d6:18:55:18:24:80:2b:3f:31:b0:b3:92:
         f7:41:17:e4:40:d3:7e:8f:06:c3:4f:95:ed:a2:41:70:52:29:
         3f:be:2e:d8:f3:74:d9:51:40:5c:f8:72:31:ae:a3:a8:56:4f:
         a6:1e:14:64:4f:6e:30:7e:77:dc:91:dc:d0:ce:b3:02:d5:07:
         1f:23:5f:7d:9f:a7:42:77:2d:9d:67:ef:c3:4f:66:50:7d:78:
         c3:66:40:9c:c9:dc:68:41:26:64:5e:3b:b0:eb:03:e1:7b:ca:
         7b:9b:e8:ea:6d:25:09:3c:96:7e:c6:6e:d0:d7:a4:51:7b:f0:
         a3:f7:dc:47:13:05:29:9f:a7:f8:e7:f4:28:98:6b:48:2e:2c:
         97:0d:56:a1:79:4d:06:75:86:c5:12:95:82:52:08:ff:4f:b1:
         e2:4a:eb:58:cc:9a:29:ea:de:d5:54:40:50:73:38:76:ec:65:
         4b:c4:c9:65:8a:56:c3:d9:40:d4:eb:ce:52:cb:a9:aa:84:c5:
         54:50:fa:4f:7d:ea:ad:9e:6e:38:dd:44:f3:87:fc:02:60:09:
         ab:1e:f7:26:5a:49:c2:53:84:87:76:fc:cc:79:a3:72:c1:85:
         c8:4e:32:ad:42:d3:ca:d2:17:48:ab:b4:f9:ff:06:ef:28:db:
         e4:74:08:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+aaLl97LSlBMKQrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZjAyMTMxMzktMDE0Yy00ZjljLTgxZGItYzhlM2Y2NWQyZDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kKUQsDMKsJcRwBNvA+Ekijtj5LFsnJsamik
Nz4zscvDc0DLX4n6RXK3O4gZritVqoAo70idUM1B066JUV2wqyy+8lsq9ZeGIk/l
TKBPdkZ2g8Bm7t6R9Gq4xu3uGqZvd9b76giy+QXhKOrZT56ZrpEtQ6yP57Gg7dbq
LpO8jt/sqnnDtSd5N2aIr9zTqB3MqdaYu2kqvNAeBqTHSXUf/XQesHAlfrGhLuuv
3QgfSr2ys0knQ0L0Dvm/9aTJSWN7ReKDEoQ4ukTIMOUPh27BNEghxJFwaX6JK5ST
JMWs9vPgoV60CswQ34nzTjTSTc1y29rptA8wbcSTHB61NsI5ewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP4Fnshr+2uk4BKB/YUvAi0YdA2+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvOWEwYmNmMjktMTEyOC0z
YjA1LThkMTItYWYyMjdlOWFkZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB4G0RP3C9YYVRgkgCs/MbCzkvdBF+RA036PBsNPle2iQXBSKT++
LtjzdNlRQFz4cjGuo6hWT6YeFGRPbjB+d9yR3NDOswLVBx8jX32fp0J3LZ1n78NP
ZlB9eMNmQJzJ3GhBJmReO7DrA+F7ynub6OptJQk8ln7GbtDXpFF78KP33EcTBSmf
p/jn9CiYa0guLJcNVqF5TQZ1hsUSlYJSCP9PseJK61jMminq3tVUQFBzOHbsZUvE
yWWKVsPZQNTrzlLLqaqExVRQ+k996q2ebjjdRPOH/AJgCase9yZaScJThId2/Mx5
o3LBhchOMq1C08rSF0irtPn/Bu8o2+R0CCg=
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:36 2026 by rpki-client