Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
File:                     11d8532d-db3d-3989-b88b-dad5776594a8.roa (raw, json)
Hash identifier:          eogAsFQ5nTlaFC04ayz35Psb/BdkMeiQNgYOT1s0NUA=
Subject key identifier:   A5:7F:BA:8A:B6:32:6E:A1:E6:64:21:DC:D0:C9:9D:6C:D5:D4:A2:CD
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4D92D5654872E8765D800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397226
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d9:2d:56:54:87:2e:87:65:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=6e3775f4-fc36-4d71-a032-f56651459bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:71:e9:c4:77:8b:ed:c7:7a:64:6c:02:8b:
                    a2:b8:fc:d9:ff:b0:4a:4c:be:3b:49:80:40:d5:20:
                    2b:0c:0f:48:46:12:7a:86:f7:4f:b3:43:ef:2a:1a:
                    aa:a9:6b:12:35:30:f0:43:1f:e3:e8:65:01:4f:bd:
                    57:08:c0:25:1e:cb:63:d1:d3:b8:d6:fe:cd:ac:4f:
                    56:ec:01:6d:9b:8d:a7:39:47:72:df:ed:17:c0:f2:
                    d2:15:16:43:a7:0a:c7:8b:90:69:f7:b1:74:ad:37:
                    b4:88:be:21:69:f9:f8:0e:91:be:c4:ab:46:06:4d:
                    95:68:73:b8:84:e6:b0:70:81:fe:49:28:de:e9:6f:
                    7a:32:15:33:d1:3a:d7:cb:dc:21:f4:f8:e8:be:cd:
                    96:f4:fc:d4:ff:b4:30:2c:12:21:18:69:87:a7:8d:
                    f1:02:7f:11:93:bc:1f:c9:b0:f3:39:4b:93:4f:d5:
                    f9:41:0f:2d:9d:75:dd:db:81:b2:07:aa:06:83:02:
                    0c:4e:8d:46:89:49:6b:f0:46:07:8e:a5:c6:7f:f2:
                    8b:9b:b4:fa:d6:b0:ff:72:19:0e:4a:43:10:a7:1f:
                    9b:cf:02:10:12:a0:a8:1f:60:5d:d7:85:34:bc:87:
                    9f:69:fe:2d:c6:46:29:3a:a6:82:16:0e:4c:c7:86:
                    09:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:BA:8A:B6:32:6E:A1:E6:64:21:DC:D0:C9:9D:6C:D5:D4:A2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/11d8532d-db3d-3989-b88b-dad5776594a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:36:fb:19:68:36:4e:0c:b6:c6:6b:b4:9b:fa:2c:2d:f2:b6:
         38:36:05:e1:41:6b:37:d1:4f:3a:b0:60:bc:b0:6a:b9:28:4c:
         00:98:b4:d0:aa:6e:45:76:f3:4e:5d:9f:da:4b:8b:83:cc:d8:
         40:b3:50:ca:af:f7:79:34:9d:25:c7:f1:0e:ba:e5:0a:a4:7c:
         65:0e:1a:3e:ad:62:0d:db:57:1e:72:42:57:58:84:66:6b:a7:
         42:be:70:e0:94:46:84:3d:aa:d7:47:d2:8e:30:48:25:3a:42:
         d4:77:0f:93:a9:38:7f:6f:c2:51:01:46:42:6b:fc:93:6d:09:
         50:ff:ea:6f:39:51:2b:a0:17:8d:93:ae:16:a6:8c:71:84:cf:
         94:31:8a:57:04:07:23:f8:a0:21:30:62:7b:bc:0f:fa:76:ba:
         74:7c:e6:41:d7:1c:cf:9f:c7:da:50:46:02:ee:c1:99:e4:8b:
         d6:c7:48:2b:90:66:e6:17:ac:fd:95:6b:ab:0b:87:a2:5a:c5:
         a1:16:a7:0d:1e:d8:fd:4e:7e:25:8d:41:60:a7:b8:73:b1:61:
         39:06:8e:ea:ff:95:cb:36:5f:3a:17:5c:35:30:59:38:2f:e6:
         10:56:90:3f:da:31:fb:7a:79:7d:32:ce:4b:96:87:c4:9f:bf:
         85:0b:d7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:21 2026 by rpki-client