Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc19def8-ac86-307e-9fd0-64027f51a740.roa
File:                     bc19def8-ac86-307e-9fd0-64027f51a740.roa (raw, json)
Hash identifier:          Le2ETgYoetLOE0eEDVAQfCBv2qy5oop0cUUa4af/IWI=
Subject key identifier:   AB:08:16:83:61:81:77:17:78:4D:62:A9:E6:59:78:D5:18:1A:43:62
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4E063365F85847A41A100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc19def8-ac86-307e-9fd0-64027f51a740.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397227
IP address blocks:        2001:502:4612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:e0:63:36:5f:85:84:7a:41:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=e978506f-f264-436d-aad1-01eb7e404a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:23:3a:a7:5f:e4:f5:51:fc:77:d4:2c:47:
                    2f:7f:bd:46:a1:63:f2:b9:b1:37:2f:2d:ac:42:81:
                    14:46:39:a0:75:e4:6d:98:d1:08:a4:96:71:76:dc:
                    81:db:cd:92:2e:bb:50:6f:cc:c6:37:40:6c:3b:54:
                    70:29:5d:dc:07:e5:3b:ff:e2:8a:ec:84:dd:16:b7:
                    b8:fe:88:91:71:8e:6e:1e:9e:61:4c:6e:3d:ea:e9:
                    88:bf:2b:97:93:d3:9e:8b:fb:3c:1d:90:de:b6:b3:
                    6e:37:61:84:08:57:59:48:a2:f3:b4:c5:d0:02:57:
                    d7:f5:6c:f0:e7:49:16:12:ce:fb:19:04:a0:fa:de:
                    2c:45:da:4f:08:cd:8a:9a:34:a6:b8:1e:a2:91:e6:
                    05:4e:e0:95:f2:10:8d:4d:49:14:03:e5:a5:69:93:
                    44:ac:4a:84:39:2c:b2:fe:d0:23:b3:2f:7f:8b:15:
                    0b:89:3c:af:d6:52:c5:4e:10:19:55:bf:f9:71:88:
                    a2:af:f3:31:68:3c:63:47:d1:0f:88:8b:a2:6e:3f:
                    6d:4a:bf:e0:2b:7b:1f:04:fb:55:95:42:3d:c3:ca:
                    c1:23:af:2d:a1:bb:8a:d0:00:ac:a1:2d:32:66:74:
                    05:ff:11:9a:f7:c5:b3:21:d1:b2:f4:96:db:63:8b:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:16:83:61:81:77:17:78:4D:62:A9:E6:59:78:D5:18:1A:43:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/bc19def8-ac86-307e-9fd0-64027f51a740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:4612::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:d4:48:38:5a:81:80:56:7b:67:1c:24:92:bd:43:d3:d6:
         5c:f3:ff:00:4a:44:21:86:07:0c:6d:f3:68:63:b6:f3:b7:e4:
         8a:8d:76:16:f1:b9:de:ba:82:b8:e5:6e:36:e9:00:ec:99:81:
         65:11:4d:8a:2e:8e:1c:85:24:be:fe:1a:2c:c9:ab:b1:1c:e8:
         cf:26:30:b4:7a:80:86:b5:ba:52:68:42:90:f3:45:7f:55:18:
         6c:95:25:f8:f6:43:05:1a:19:db:e5:74:16:27:d8:e1:4d:16:
         2d:5a:f5:2f:cd:48:fe:b2:d4:f8:9d:8c:e2:9e:f2:99:09:a6:
         56:41:e3:5e:10:d5:87:8c:78:f2:58:bd:1b:d4:06:f9:69:4d:
         d0:24:92:3b:87:ac:7b:d4:c0:41:eb:61:6e:a7:ce:6a:5a:f5:
         39:4a:90:1b:10:d7:44:b6:27:6b:bb:6b:59:b9:14:7a:7e:0a:
         f9:2e:56:0c:80:28:e3:12:37:c9:6b:d6:78:c6:8c:7e:e5:e2:
         4a:1c:d5:93:79:a5:42:6d:4a:19:91:79:e4:d7:80:19:b8:6f:
         d1:a2:79:79:2f:54:23:8b:dd:12:12:00:dc:cf:5d:27:9e:10:
         7e:d5:c3:bc:75:2c:64:b7:c1:95:ef:53:6f:c3:a1:90:87:01:
         63:48:0f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:33:00 2026 by rpki-client