Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa
File:                     ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa (raw, json)
Hash identifier:          aGYmx+Qrym9ocyAiXCgEdNJbXlG8f2L2gX28faEOXJw=
Subject key identifier:   34:1B:12:C1:FE:B1:1C:7C:13:58:B5:7D:DB:C6:16:C3:E6:65:E6:0B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D7470133523B9135BA2A00340
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397214
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:13:35:23:b9:13:5b:a2:a0:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=d190b372-4fc5-4830-97db-d1b5f747ec41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:80:dd:32:70:43:b5:ec:ad:4b:39:1f:be:
                    0e:a2:3a:cf:ae:2d:f7:84:36:a7:9b:ce:ee:ef:cb:
                    91:e8:21:59:94:3d:66:06:e4:77:78:49:2a:54:60:
                    c4:27:5c:51:c5:6e:f9:77:f5:3e:2e:30:b1:d3:5f:
                    43:92:f0:da:9c:ae:e7:61:ab:6c:77:e1:5b:d1:c2:
                    bb:9a:97:3c:f1:ab:a8:7a:4d:f1:c5:96:db:a8:74:
                    d0:c0:3c:01:7f:b9:0f:82:97:9e:85:2a:60:65:93:
                    65:27:03:f3:91:f9:4f:7d:fc:07:ea:41:ee:fa:41:
                    91:e5:4a:90:29:09:5d:73:89:7b:9d:77:11:c1:5e:
                    f0:05:cc:e3:fe:5e:f0:8b:49:06:bb:74:5d:25:ac:
                    38:fa:65:48:5e:e1:99:ea:37:2d:48:06:a4:e6:1f:
                    e3:1f:92:65:84:b9:79:d0:6e:fb:8a:79:04:99:38:
                    44:35:66:7e:a0:d0:e8:3a:68:5c:5c:a0:3b:0e:6c:
                    35:06:bd:7b:86:9a:50:a1:ad:d9:2f:ba:b2:ef:f3:
                    07:e9:45:75:f1:e7:f7:bd:d9:1b:03:97:46:9e:02:
                    fa:5b:75:bf:64:85:25:7d:d9:39:31:f0:e7:82:7f:
                    6e:d2:6e:82:fa:f8:1d:29:1c:ab:cd:59:67:94:9c:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:12:C1:FE:B1:1C:7C:13:58:B5:7D:DB:C6:16:C3:E6:65:E6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ab3387bd-a78a-3b1a-93fa-3ed7bc774b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:87:b0:9c:82:f7:a3:0b:b6:f6:d9:9e:f4:ca:f5:ef:5c:52:
         a6:74:12:c2:03:35:85:7f:d4:0c:27:e3:09:04:24:90:84:db:
         26:f4:8a:84:05:69:73:7d:ce:69:ef:88:f3:df:7b:f7:07:d4:
         f6:78:d2:da:d1:38:f5:62:69:49:f1:f5:02:7b:ae:f3:49:19:
         42:47:b0:f6:10:20:b8:53:36:85:27:12:a3:08:02:7f:04:75:
         18:14:4c:32:bc:30:0c:16:64:3e:f0:90:d1:d3:dd:24:fa:fe:
         72:c4:cf:58:b7:06:86:4a:de:ab:b6:0c:3a:3b:c8:44:22:6a:
         b5:73:34:1e:88:35:8a:8f:24:0f:e8:8f:b8:01:37:06:6f:c4:
         d1:4a:4a:6d:79:b4:e9:7f:8f:44:0a:95:71:d4:d9:78:f5:ee:
         3e:48:30:ea:3f:cd:c9:43:15:8f:97:2e:07:2c:d6:25:5f:2d:
         44:ce:fc:5a:0c:c8:43:4f:ce:fb:37:af:c6:5a:4a:04:f1:54:
         6a:34:e1:98:a4:db:4c:c9:dc:46:e1:c5:ca:5e:aa:b5:b3:2c:
         9d:36:3d:cd:a7:68:b0:54:e0:1e:a6:e1:4f:cc:0a:9b:a9:3d:
         f8:d9:0e:2a:91:47:6d:c2:c5:4d:76:40:5f:6d:f2:77:90:57:
         d2:7c:c1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:07:34 2026 by rpki-client