Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00ecc0bf-9f89-33d3-85ac-433b776f5130.roa
File:                     00ecc0bf-9f89-33d3-85ac-433b776f5130.roa (raw, json)
Hash identifier:          pf7hVS1IHk8puGEx9pb+FCo8A90sNezVsZqfqG3u+Ro=
Subject key identifier:   72:6A:58:CC:67:46:D5:47:65:23:3B:30:29:49:AB:B4:9E:3A:83:2C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F093D0AA2B5CBE3D2C6C7BD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00ecc0bf-9f89-33d3-85ac-433b776f5130.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397241
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0a:a2:b5:cb:e3:d2:c6:c7:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=33b10b8d-c2cd-477d-90d1-bd41ab63eefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:d9:7a:d7:4e:5d:d2:fe:aa:09:4a:9f:8d:
                    53:5e:77:29:3e:d8:bb:69:bd:93:91:a6:00:ca:d3:
                    5e:68:2a:90:cd:ad:d6:f1:2c:29:76:83:bb:50:9f:
                    e8:21:cc:22:10:a0:e9:e2:8d:45:d6:32:b0:1a:d9:
                    9a:7f:20:f5:b8:8d:00:4e:1b:3b:db:24:05:5c:2d:
                    56:f2:ec:f1:35:c2:cf:03:17:01:c0:a4:a6:7f:04:
                    21:f8:ac:51:26:ad:5a:77:42:95:57:d2:74:ac:9e:
                    e1:10:f3:d7:30:1b:88:e3:79:4e:c3:b1:c0:d0:fb:
                    1c:7b:9f:d5:75:5f:75:20:9f:59:0a:4e:eb:af:e5:
                    16:35:66:ae:ad:24:db:05:2b:be:27:81:07:a3:1e:
                    cf:0b:93:32:84:f0:bb:ab:b1:9c:37:dc:af:ee:49:
                    2b:c1:ef:db:8e:17:3d:fc:c0:7d:f3:54:06:d0:65:
                    11:04:e3:f5:19:d8:55:7e:30:80:50:45:cc:cd:df:
                    60:2c:3f:20:8a:38:af:b1:0f:bd:75:83:4c:bc:d4:
                    fe:e9:a0:67:7b:d3:50:77:71:59:8e:c8:83:cb:fa:
                    c1:36:aa:59:99:f3:33:a8:db:20:b1:19:1d:30:c6:
                    be:bf:32:5e:3a:36:e2:cc:b8:43:09:47:f3:07:5a:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6A:58:CC:67:46:D5:47:65:23:3B:30:29:49:AB:B4:9E:3A:83:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/00ecc0bf-9f89-33d3-85ac-433b776f5130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:8d:a1:a7:68:d8:db:a3:cb:ef:09:36:b5:05:48:a0:37:
         d6:a4:b1:c2:9f:cf:a6:47:29:85:06:ae:a1:f9:ef:1f:45:bd:
         ee:4b:59:eb:57:7e:bb:ce:92:2b:a0:e4:74:ce:24:19:5b:a0:
         79:d5:d5:4d:06:58:f3:f1:86:c4:27:b1:da:21:76:c4:7e:e9:
         60:d9:bf:73:ad:12:db:f4:a6:fe:f0:9e:8d:10:1d:ea:80:49:
         31:36:b9:9a:60:a0:fe:44:89:b0:da:25:78:8c:74:88:d1:b2:
         16:d0:1f:02:1e:38:f1:82:12:e0:b1:d3:86:c3:23:53:fc:4b:
         41:65:57:f1:69:2a:c2:9e:ec:8a:3f:7b:03:01:e3:33:34:09:
         94:51:38:15:85:47:d4:e5:8b:f1:96:80:8e:56:79:54:71:b1:
         3f:64:a2:02:88:4c:9b:d0:d1:6a:a2:0c:d7:39:19:5c:68:85:
         3e:81:a4:43:1e:8f:11:e2:46:51:93:74:70:22:ec:82:49:64:
         3b:d3:1f:d2:26:1c:c9:23:88:c7:ae:9e:dd:15:59:31:19:35:
         4c:67:45:fe:dd:f3:44:4a:c2:70:67:43:0e:fa:f8:1b:61:31:
         29:f0:5c:ec:eb:c4:92:85:de:38:52:21:9f:72:ee:09:dd:4c:
         8e:6f:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:01:14 2026 by rpki-client