Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e53e392-59c5-384b-8eae-aff5bc80d39b.roa
File:                     9e53e392-59c5-384b-8eae-aff5bc80d39b.roa (raw, json)
Hash identifier:          IT5W7pec0kGi1iKs2HR+YywD6AvY17qgVpy+TRQS1UQ=
Subject key identifier:   03:2E:46:3A:EC:A6:DC:4B:1C:72:DD:D0:86:8E:E1:9E:C6:48:E2:7D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717AE9BA0AA26A9886FE880
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e53e392-59c5-384b-8eae-aff5bc80d39b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ae:9b:a0:aa:26:a9:88:6f:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=77750471-0638-4e2a-b7c8-da40d3b9c4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:f0:11:20:1a:f0:f2:dd:ad:c2:4e:e1:22:
                    b4:ef:e6:de:90:b4:1e:91:10:c2:cf:fb:76:21:1d:
                    69:7f:02:af:54:ba:78:73:a1:9d:d1:1b:1c:e2:bb:
                    2f:80:b2:71:9d:70:0e:25:86:17:19:29:51:0b:65:
                    b8:7a:01:54:7f:00:2a:f7:a4:75:fa:6a:92:3f:27:
                    5c:87:df:3d:e4:86:8b:b7:23:07:ca:7d:73:32:ac:
                    e6:01:e2:9e:c3:e9:fb:90:ad:e8:c4:21:d1:9f:d1:
                    41:9a:31:0e:44:c3:7b:3c:aa:2d:21:2a:c8:e0:61:
                    da:3b:48:34:4c:fa:8b:8e:0e:f7:9f:ab:fc:96:c0:
                    c5:61:cd:47:51:61:04:c2:ad:7a:c4:6e:54:a8:c4:
                    c3:7c:11:d6:6a:ff:db:16:c7:ab:ed:17:43:1e:4d:
                    32:78:a9:cf:e0:38:9d:d5:06:a3:ce:ed:34:43:c7:
                    22:37:bc:fb:1f:e3:3f:dd:3d:45:e9:2e:a1:e6:02:
                    4f:aa:6f:ba:75:a4:95:54:7e:8f:30:1e:86:ce:12:
                    cd:4f:9a:f4:49:6f:af:cf:99:f2:b3:1a:54:25:98:
                    16:f7:d0:fb:e4:94:dd:69:ec:f3:b0:e4:00:ae:c5:
                    a4:e5:1b:cb:d0:f1:cf:ae:2b:11:7b:fc:75:81:6d:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:46:3A:EC:A6:DC:4B:1C:72:DD:D0:86:8E:E1:9E:C6:48:E2:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9e53e392-59c5-384b-8eae-aff5bc80d39b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:63:67:58:63:83:e1:c8:03:2a:ed:06:2d:07:66:29:10:
         19:8f:13:4e:cf:7e:e2:c3:fc:e0:ac:fd:07:42:cc:19:7d:ec:
         1b:06:17:ea:32:7c:5a:bf:be:0a:ea:2e:1a:fa:ae:3a:71:c3:
         09:45:f8:c4:03:b4:e7:fa:7b:9b:c9:3d:ab:b8:84:62:28:30:
         fe:35:11:0e:f5:70:38:1f:c8:9d:f2:1e:ca:33:ee:95:49:c9:
         d6:cd:2e:67:1c:41:54:78:02:97:a4:82:fc:4f:d4:8d:60:1f:
         76:dd:e0:5f:96:c2:bd:38:a0:38:64:fe:6b:ce:0d:52:65:81:
         f0:12:00:47:de:d4:56:fc:6d:7e:68:18:e8:2a:8f:cc:9d:6e:
         fb:58:43:7d:0e:d1:4f:01:ab:69:74:54:d6:6e:c7:21:67:e0:
         15:12:e8:f4:d6:9c:cc:bd:bb:38:f3:ac:e0:f5:e5:3f:65:d9:
         4c:f9:27:c2:7b:b1:6c:20:08:8e:fa:9d:62:b3:25:30:47:73:
         c6:1e:29:ee:1a:e4:1d:94:b9:11:56:50:24:11:06:28:89:0f:
         5a:2e:57:d0:5a:87:c2:f4:58:74:02:96:8f:33:2d:70:b3:fe:
         38:e0:ce:39:c0:0d:32:1a:4c:82:36:69:b0:2b:8a:4e:5b:3b:
         af:43:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 11:47:10 2026 by rpki-client