Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
File:                     ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa (raw, json)
Hash identifier:          1G039WBYQfAFizRg4PCP/6cvISTJnnzO3EB5qrv3mU0=
Subject key identifier:   B4:25:60:91:91:75:60:EC:86:6A:51:4C:CA:E5:1D:EF:8D:E6:06:02
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717B0C8EAF6971B12672FC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397229
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:b0:c8:ea:f6:97:1b:12:67:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=522519d9-af6f-4f74-a72b-7c5e933bb577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:54:33:ce:8b:2b:97:26:1f:62:18:49:43:
                    b3:12:98:e1:62:9b:f2:81:10:e7:33:97:d0:74:43:
                    16:35:78:4c:4e:1b:04:17:7b:e9:e5:9c:8c:db:59:
                    3f:02:80:86:12:29:e3:b3:a6:72:04:54:f2:84:75:
                    d4:b7:ea:45:1d:92:95:8a:a4:b0:a4:e8:19:b4:da:
                    3d:c5:85:59:9f:1b:53:49:67:c7:66:e8:c5:8c:7b:
                    c1:ca:cd:42:e7:5f:bc:66:5b:4d:5e:ff:1c:1d:d1:
                    b5:07:80:ae:1c:5b:5c:19:9d:b8:4f:bb:9b:de:eb:
                    42:bc:94:19:0e:7a:ff:0c:fd:6e:40:04:6f:d7:b6:
                    e0:27:e7:84:7d:06:4c:17:c8:fe:4c:a6:d8:a8:ab:
                    54:e4:ab:da:4a:c3:27:be:2c:a6:3d:0f:e6:28:07:
                    bb:96:af:4a:7e:92:53:06:e1:07:b8:af:3c:aa:42:
                    e7:b0:3e:8a:20:67:15:d7:a9:e5:28:cb:b8:d6:87:
                    7e:d0:3b:ab:74:4d:72:a5:f4:db:8c:29:b7:0f:07:
                    31:9f:a5:ad:d8:b8:7f:49:e8:d3:71:71:81:91:e1:
                    ee:bf:25:9d:40:69:66:27:aa:59:65:36:2c:92:7d:
                    0b:2a:85:34:be:78:6e:ef:7c:4e:e1:da:94:19:44:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:60:91:91:75:60:EC:86:6A:51:4C:CA:E5:1D:EF:8D:E6:06:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ee1c28f7-1ed9-381d-aa64-c6d176762b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3a:a6:01:bd:e0:80:97:37:36:fa:dd:0f:7f:1d:59:ff:19:
         38:24:20:d2:a0:08:67:18:1e:fc:d2:b1:03:84:18:c5:bb:b3:
         7f:8d:f0:7b:88:b3:61:f9:3d:61:0a:f2:fd:fc:db:7c:02:ee:
         01:b0:4b:c7:8c:d0:7d:d8:34:80:d8:97:d5:c3:88:c1:19:f4:
         ac:b1:27:8f:38:6c:88:fc:e0:b9:80:1d:28:bf:cd:ce:6c:7e:
         8f:2c:64:aa:f0:39:ea:31:a6:f4:2a:ea:20:00:cd:31:0e:e5:
         57:48:4f:89:bd:6d:b8:af:c7:17:d3:7b:93:16:43:a2:ec:25:
         d7:41:85:62:f7:d3:65:4a:a4:03:53:d1:c0:eb:b8:1b:92:1e:
         a1:77:7d:0f:1e:dc:ed:8d:8e:80:ac:c5:7e:46:bd:2b:b2:0d:
         62:40:75:b5:6b:99:7b:27:c0:0c:ed:c5:5f:6f:82:8d:19:52:
         b9:2e:d0:3c:fc:1b:2e:cd:ec:1e:0c:06:1d:32:49:c7:20:ee:
         d6:89:4d:12:41:44:a0:83:1f:e0:c4:5f:51:7b:4c:0c:53:78:
         4b:10:28:12:e3:b7:bd:14:c9:9d:e6:9c:87:ea:b8:90:02:24:
         4b:e6:7a:50:e6:59:9b:e0:68:90:f2:dc:56:94:3a:f8:6e:8f:
         95:2f:cc:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE73F7DI6vaXGxJnL8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
NTIyNTE5ZDktYWY2Zi00Zjc0LWE3MmItN2M1ZTkzM2JiNTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hhUM86LK5cmH2IYSUOzEpjhYpvygRDnM5fQ
dEMWNXhMThsEF3vp5ZyM21k/AoCGEinjs6ZyBFTyhHXUt+pFHZKViqSwpOgZtNo9
xYVZnxtTSWfHZujFjHvBys1C51+8ZltNXv8cHdG1B4CuHFtcGZ24T7ub3utCvJQZ
Dnr/DP1uQARv17bgJ+eEfQZMF8j+TKbYqKtU5KvaSsMnviymPQ/mKAe7lq9KfpJT
BuEHuK88qkLnsD6KIGcV16nlKMu41od+0DurdE1ypfTbjCm3Dwcxn6Wt2Lh/SejT
cXGBkeHuvyWdQGlmJ6pZZTYskn0LKoU0vnhu73xO4dqUGUSIwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLQlYJGRdWDshmpRTMrlHe+N5gYCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZWUxYzI4ZjctMWVkOS0z
ODFkLWFhNjQtYzZkMTc2NzYyYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAtOZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFs6pgG94ICXNzb63Q9/HVn/GTgkINKgCGcYHvzSsQOEGMW7s3+N
8HuIs2H5PWEK8v3823wC7gGwS8eM0H3YNIDYl9XDiMEZ9KyxJ484bIj84LmAHSi/
zc5sfo8sZKrwOeoxpvQq6iAAzTEO5VdIT4m9bbivxxfTe5MWQ6LsJddBhWL302VK
pANT0cDruBuSHqF3fQ8e3O2NjoCsxX5GvSuyDWJAdbVrmXsnwAztxV9vgo0ZUrku
0Dz8Gy7N7B4MBh0ySccg7taJTRJBRKCDH+DEX1F7TAxTeEsQKBLjt70UyZ3mnIfq
uJACJEvmelDmWZvgaJDy3FaUOvhuj5UvzOE=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:17:15 2026 by rpki-client