Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe8952c-a957-3b9b-ae35-acfc07e3a833.roa
File:                     abe8952c-a957-3b9b-ae35-acfc07e3a833.roa (raw, json)
Hash identifier:          Vuo9Y2mNl2+8hM0G6cg9GlFPVck5vgN5qig/A6u5QyE=
Subject key identifier:   46:B6:6A:D9:83:7B:E6:67:D9:DA:19:52:7F:75:EC:B2:75:B4:B5:83
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E8C5E80CB6E47F012DA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe8952c-a957-3b9b-ae35-acfc07e3a833.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397224
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e8:c5:e8:0c:b6:e4:7f:01:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=106271dc-4d80-4c83-8c4d-05a5057494ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:3a:02:df:fb:38:62:b9:c7:e6:3b:d7:30:
                    1e:90:45:96:46:5d:47:c5:2f:e7:07:94:49:0a:5b:
                    1b:8a:89:e9:5a:93:20:24:0b:c3:f7:50:17:8a:dd:
                    2b:a4:1d:24:50:44:ae:79:d7:04:e4:24:f2:d1:2b:
                    f5:ab:46:e6:9a:d2:c7:e8:fa:c5:82:aa:04:56:97:
                    31:9c:b5:db:43:44:d5:2f:dc:5d:d7:ba:68:08:9b:
                    85:7f:a2:c8:0f:c1:e7:68:11:3b:7d:4c:ca:00:4d:
                    09:11:bc:25:68:19:d8:9a:42:9e:fc:32:a0:29:bb:
                    ef:eb:22:30:22:18:bf:be:77:55:a6:77:e2:c0:18:
                    59:d5:62:4a:91:a1:0c:f4:4a:3d:fd:50:f5:a3:ca:
                    0b:ac:16:7d:45:64:8d:e8:fd:e6:51:a7:88:3d:a6:
                    39:37:03:f0:9b:69:8b:3e:09:30:e0:72:70:4e:61:
                    fc:5a:91:02:e9:13:39:00:15:29:f2:09:6e:d5:ac:
                    ad:fc:3a:81:be:08:6a:48:7e:23:fe:31:8d:c8:60:
                    6a:15:a0:8f:a3:d7:ce:2f:c7:28:b8:bf:ee:45:10:
                    95:e3:98:41:73:67:51:2a:bc:48:eb:db:a2:1f:12:
                    8c:60:2a:92:1e:b9:3e:49:48:da:df:8a:89:a6:0d:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B6:6A:D9:83:7B:E6:67:D9:DA:19:52:7F:75:EC:B2:75:B4:B5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abe8952c-a957-3b9b-ae35-acfc07e3a833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:36:61:ed:a5:98:a1:f9:bc:2f:60:79:7f:ba:2e:dd:08:
         ff:24:fa:dc:67:6a:c3:d1:9e:8d:cd:08:b0:18:a3:cc:be:b5:
         c9:3f:7e:2a:8a:9d:ae:d5:04:cb:13:fd:a2:13:78:a9:a7:9e:
         1a:e1:2e:84:86:e1:87:a4:10:97:f0:df:cb:d0:b9:01:0c:d1:
         c7:f2:48:a7:fa:17:cf:11:12:d7:c6:76:60:cb:26:00:3d:ee:
         a2:6e:d1:6d:b5:d5:cf:c5:88:a6:31:68:1f:d9:85:ff:1e:4b:
         8b:95:ab:f7:09:fc:f9:47:e4:d7:78:c9:05:3e:48:c0:42:80:
         08:ea:79:d0:37:c0:dd:66:79:9c:1e:a4:54:a7:30:fb:e6:d8:
         f8:d1:78:20:5e:32:5b:51:64:6f:30:27:b2:46:be:1c:36:b8:
         c9:58:1f:a3:9d:6d:1e:c9:a8:41:3a:0d:2f:92:90:3d:e0:06:
         70:3c:aa:d0:f8:69:0f:48:be:ff:c1:77:87:a1:8c:81:d4:95:
         92:13:94:c8:a0:88:c1:d0:20:a4:05:92:58:4e:18:79:02:89:
         40:2a:b8:05:bf:b5:17:51:3c:2f:03:7d:62:5d:49:12:6c:36:
         32:05:39:cd:a0:41:ca:f0:c0:32:8c:46:bd:db:c9:e0:64:9a:
         db:ab:f4:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UtOjF6Ay25H8BLaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MTA2MjcxZGMtNGQ4MC00YzgzLThjNGQtMDVhNTA1NzQ5NGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00w6At/7OGK5x+Y71zAekEWWRl1HxS/nB5RJ
ClsbionpWpMgJAvD91AXit0rpB0kUESuedcE5CTy0Sv1q0bmmtLH6PrFgqoEVpcx
nLXbQ0TVL9xd17poCJuFf6LID8HnaBE7fUzKAE0JEbwlaBnYmkKe/DKgKbvv6yIw
Ihi/vndVpnfiwBhZ1WJKkaEM9Eo9/VD1o8oLrBZ9RWSN6P3mUaeIPaY5NwPwm2mL
Pgkw4HJwTmH8WpEC6RM5ABUp8glu1ayt/DqBvghqSH4j/jGNyGBqFaCPo9fOL8co
uL/uRRCV45hBc2dRKrxI69uiHxKMYCqSHrk+SUja34qJpg1s9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEa2atmDe+Zn2doZUn917LJ1tLWDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYWJlODk1MmMtYTk1Ny0z
YjliLWFlMzUtYWNmYzA3ZTNhODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC5uNmHtpZih+bwvYHl/ui7dCP8k+txnasPRno3NCLAYo8y+tck/
fiqKna7VBMsT/aITeKmnnhrhLoSG4YekEJfw38vQuQEM0cfySKf6F88REtfGdmDL
JgA97qJu0W211c/FiKYxaB/Zhf8eS4uVq/cJ/PlH5Nd4yQU+SMBCgAjqedA3wN1m
eZwepFSnMPvm2PjReCBeMltRZG8wJ7JGvhw2uMlYH6OdbR7JqEE6DS+SkD3gBnA8
qtD4aQ9Ivv/Bd4ehjIHUlZITlMigiMHQIKQFklhOGHkCiUAquAW/tRdRPC8DfWJd
SRJsNjIFOc2gQcrwwDKMRr3byeBkmtur9J8=
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:32:35 2026 by rpki-client