Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/d5b4a016-b6f7-323d-9fdb-3cd5ba07c206.roa
File:                     d5b4a016-b6f7-323d-9fdb-3cd5ba07c206.roa (raw, json)
Hash identifier:          fHEotN6oGM7buXxWNUg1J694Ill5u+Z5S0P6ULWHPmI=
Subject key identifier:   8D:B0:12:00:04:C1:05:D4:52:29:3D:5C:62:D1:C6:86:0B:99:4A:C9
Certificate issuer:       /CN=abd79bfe-1e9a-4459-ad7a-dd64446b670b
Certificate serial:       010D0C9F4328584D8BC1A82C795349E49A16FCE0
Authority key identifier: 64:2F:41:1B:83:EC:CD:BB:FB:55:4C:74:D4:DE:99:FD:FA:8F:FA:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/d5b4a016-b6f7-323d-9fdb-3cd5ba07c206.roa
Signing time:             Sat 18 Apr 2026 09:29:08 +0000
ROA not before:           Sat 18 Apr 2026 09:29:08 +0000
ROA not after:            Fri 17 Jul 2026 09:29:08 +0000
asID:                     401615
IP address blocks:        2602:f3f2:c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8b:c1:a8:2c:79:53:49:e4:9a:16:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd79bfe-1e9a-4459-ad7a-dd64446b670b
        Validity
            Not Before: Apr 18 09:29:08 2026 GMT
            Not After : Jul 17 09:29:08 2026 GMT
        Subject: CN=399df937-42a1-4ddc-8c35-edb987388841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:a7:ed:e3:69:c9:fc:e8:c9:82:44:71:08:
                    5e:d7:f5:34:0c:3e:99:03:ef:ba:42:a7:f4:cf:a9:
                    8d:67:95:12:48:4d:81:49:7c:bf:a9:27:27:af:06:
                    e0:28:eb:ba:42:63:9b:85:16:81:f1:1a:eb:1e:19:
                    a2:21:28:72:0d:d4:ad:16:25:ec:23:d4:3b:e6:d6:
                    d9:73:8d:93:9c:1c:27:74:78:cd:25:db:6d:53:ce:
                    28:45:d4:0c:82:e0:cf:a3:cd:cb:42:3e:38:a1:2a:
                    7d:7d:39:ea:4c:51:62:e9:46:3a:8f:5e:02:3d:3e:
                    b7:e2:64:22:ad:59:64:df:df:b7:82:29:b0:40:33:
                    21:bd:02:75:e1:25:a3:8f:8a:9a:f6:f8:d2:1f:23:
                    9c:e7:c9:06:8d:c9:06:f9:93:1f:e4:11:85:f3:ec:
                    e3:46:91:13:17:3d:0b:c0:29:2b:bc:72:b6:08:80:
                    69:a0:3c:62:1e:4f:8e:23:71:8a:7f:71:e7:80:b7:
                    85:4b:22:1b:42:91:70:fb:f2:dd:ea:8d:1b:46:75:
                    29:a2:eb:99:43:55:a0:cb:f8:7a:95:33:17:9e:97:
                    4e:8c:10:59:0a:32:a2:fb:cb:a4:74:8d:2c:cb:7a:
                    30:ce:f1:54:1f:0a:db:73:b6:18:57:28:71:d6:b8:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:12:00:04:C1:05:D4:52:29:3D:5C:62:D1:C6:86:0B:99:4A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/d5b4a016-b6f7-323d-9fdb-3cd5ba07c206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b/abd79bfe-1e9a-4459-ad7a-dd64446b670b.crl

            X509v3 Authority Key Identifier:
                keyid:64:2F:41:1B:83:EC:CD:BB:FB:55:4C:74:D4:DE:99:FD:FA:8F:FA:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/abd79bfe-1e9a-4459-ad7a-dd64446b670b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f3f2:c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a0:75:ed:50:4d:da:3b:d9:5f:7d:50:c0:27:be:3a:9d:df:
         e4:03:b8:f9:76:1f:0e:5a:78:e5:26:01:07:9e:27:68:d1:e9:
         45:38:40:dd:94:66:c3:13:cf:69:f5:b7:c0:f3:84:72:fb:fc:
         63:74:ee:5a:d9:05:72:93:c3:a1:82:b8:b2:93:b2:3d:2e:47:
         f1:05:b2:b4:eb:75:c3:1f:a5:19:eb:1d:b5:14:04:0b:ef:f9:
         cd:d9:48:a4:38:a6:07:f0:fd:0c:d8:fd:7b:31:9b:a7:7b:5d:
         2b:8e:57:4d:ab:2f:f3:d0:d1:be:fc:9b:fb:81:59:d4:0e:8e:
         76:46:73:84:0a:e8:ca:7b:f8:58:37:67:00:81:f2:c6:b6:e2:
         a8:9e:0c:95:94:e4:c6:98:fa:c3:1b:63:36:a7:87:c1:f8:1e:
         2b:cb:cd:7b:9c:27:fa:52:02:20:1e:5f:40:48:b3:d6:db:af:
         3b:9c:34:03:8c:f4:bb:dc:57:14:59:5e:19:ea:8f:cd:68:d0:
         65:c5:1e:e1:58:26:b9:25:42:93:44:3e:75:9e:65:ef:a5:3e:
         35:9a:0f:15:32:58:ca:74:d9:79:53:77:8f:b5:f8:f5:47:56:
         b1:5d:6d:34:9d:8f:ea:2a:64:bf:77:29:29:72:d2:0b:c2:c0:
         4c:b8:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:18:08 2026 by rpki-client