Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff8aeb72-58e5-3cb9-9993-000229ac80c0.roa
File:                     ff8aeb72-58e5-3cb9-9993-000229ac80c0.roa (raw, json)
Hash identifier:          M7gYJ8z/VrK9GDBcDGk5AiZsTXX/y/cAfPLaKCHQxyg=
Subject key identifier:   D5:40:FC:9C:BF:6B:73:96:6F:2E:6A:87:07:EE:82:15:29:9A:7F:E5
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700E7B388552FADCFDEA00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff8aeb72-58e5-3cb9-9993-000229ac80c0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397216
IP address blocks:        2001:502:2eda::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0e:7b:38:85:52:fa:dc:fd:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=5861c250-293e-4e2b-b38f-f4d137820536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:b3:7c:99:8e:fe:91:44:fe:d3:9b:58:c3:
                    3f:fd:80:b6:46:6a:95:43:fc:d5:93:64:05:24:49:
                    64:db:9a:d7:8c:39:f4:87:0c:6e:81:10:ae:db:bd:
                    7f:16:50:6c:39:0c:7f:58:d6:24:75:29:96:1e:1e:
                    c5:7a:83:6d:9f:84:b7:b8:9f:87:8b:e7:72:78:e9:
                    05:7c:31:2f:45:fb:4e:da:b5:29:4f:0c:f5:42:3c:
                    98:d4:8a:e6:21:f6:d4:5c:73:27:68:7c:18:72:e0:
                    bd:3a:c0:ea:7a:5b:a9:f4:8d:26:1a:63:2b:a2:45:
                    4a:e6:14:fa:ab:77:6a:f2:f0:5a:6c:5b:d6:b2:fc:
                    26:4a:12:fe:33:17:ad:79:f6:f0:da:da:1b:9f:dc:
                    59:b9:33:2a:b2:89:ba:55:95:83:79:fd:d3:db:7f:
                    5c:57:7d:ec:84:55:1c:39:1f:10:bc:16:87:d3:2b:
                    aa:07:62:ff:b8:32:16:c5:3e:e1:a4:6d:62:36:5f:
                    99:35:54:d1:fa:13:8f:1e:b1:78:1e:e0:f0:e3:79:
                    4f:f5:e7:3b:23:3c:5b:a0:17:fa:0e:a7:b8:8b:a2:
                    10:dc:96:12:f8:32:e6:f2:b6:db:b6:46:f7:60:53:
                    fa:82:52:8e:b0:3c:b0:8f:df:f7:40:cf:09:6a:47:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:FC:9C:BF:6B:73:96:6F:2E:6A:87:07:EE:82:15:29:9A:7F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/ff8aeb72-58e5-3cb9-9993-000229ac80c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:2eda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:54:53:15:e2:e7:47:7f:27:16:b1:fe:ab:fc:2a:6a:b6:
         05:c2:72:dc:0e:2e:b8:3e:5d:34:a9:7b:aa:f3:d8:d2:77:78:
         8f:73:40:cf:ae:9a:69:10:95:7b:65:3b:0c:e7:13:11:23:29:
         03:0d:09:68:6a:99:46:da:1b:4a:b3:5c:a1:27:5f:d0:9a:25:
         6c:3a:b8:b6:c7:f0:d9:76:61:21:f3:d9:a5:50:8f:e4:64:5a:
         19:cb:57:ba:28:70:d9:bf:cd:dd:38:81:bb:d2:e6:00:19:be:
         17:18:19:97:19:35:c4:ce:3a:d9:52:0d:69:cc:2f:91:00:46:
         88:51:a8:ff:a4:53:df:81:0c:87:f1:5d:33:75:95:2b:3e:40:
         7a:6b:f7:44:70:0d:c8:c4:73:0d:07:a7:5f:de:29:6c:30:4e:
         22:91:3a:2f:ff:6f:9c:bc:21:8c:4b:b1:b6:1b:28:ca:6d:10:
         9d:61:6d:00:af:d5:90:54:a4:af:cb:5d:c9:0d:0a:f4:77:d4:
         27:c8:a3:07:d4:06:35:9e:60:ad:ad:dd:dd:50:46:8d:58:89:
         0e:ec:83:57:52:71:e5:cd:dd:75:31:1d:c2:72:90:b5:86:da:
         43:db:21:40:0a:70:82:f4:42:13:1d:b1:83:76:c2:39:d2:25:
         8a:6e:11:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:09:16 2026 by rpki-client