Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19026db7-ed82-3e8e-90e7-bc391d8b29d8.roa
File:                     19026db7-ed82-3e8e-90e7-bc391d8b29d8.roa (raw, json)
Hash identifier:          zcuaB7FKrpBTsN40wk9OdYpa0m6y7gXTXMIMF7JjE4s=
Subject key identifier:   BA:F8:8A:5B:6C:7C:5C:D6:77:53:D0:B6:82:15:3D:78:D3:58:F6:E1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4D9F44E127D68F231C080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19026db7-ed82-3e8e-90e7-bc391d8b29d8.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     12008
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d9:f4:4e:12:7d:68:f2:31:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=4f0c34dc-dfd0-41cf-81e6-da5d393a1467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:57:05:04:47:fb:64:ec:5b:90:b1:18:66:
                    fd:90:b1:58:b0:b0:96:de:6a:db:f6:da:5a:6c:20:
                    64:3b:3a:f5:e1:82:79:4d:32:4d:7e:d1:bd:cb:01:
                    25:74:21:d9:52:85:9d:38:82:cd:5b:58:a4:47:76:
                    29:08:cc:b0:48:9f:b2:b0:14:af:79:aa:84:7e:b5:
                    51:47:6c:31:d9:0b:d3:03:0d:44:03:5f:9f:79:21:
                    92:70:5c:59:bf:ab:58:ac:81:e7:90:d9:ca:12:5c:
                    e1:f4:01:20:b3:1c:f6:8a:e6:7a:27:e8:20:14:a5:
                    ff:a8:ff:2b:fc:78:f7:1c:f4:27:3c:3d:9c:aa:53:
                    f2:17:5e:9f:88:35:d8:55:86:77:0b:87:b7:45:ef:
                    95:61:2e:9b:d6:f8:58:2e:84:e6:94:d5:f8:27:d4:
                    42:37:fe:65:fd:01:d9:94:f5:85:ef:a4:bd:cc:d4:
                    d1:8a:04:a9:cc:d3:43:ea:7f:4e:56:14:9e:b5:44:
                    9c:a5:75:0d:2e:3d:01:7b:9e:51:45:59:b6:f9:16:
                    a1:ad:ca:86:cb:74:5d:66:ea:8c:7c:bf:ba:07:52:
                    88:41:35:51:57:3b:bb:af:eb:57:7d:25:09:18:cc:
                    14:86:56:d2:5c:6a:a7:5e:47:fe:1d:49:6f:8e:7d:
                    a0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:8A:5B:6C:7C:5C:D6:77:53:D0:B6:82:15:3D:78:D3:58:F6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/19026db7-ed82-3e8e-90e7-bc391d8b29d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:d1:87:5a:c2:8f:d4:75:03:9f:5c:51:16:f7:63:f4:ac:
         c8:d1:c6:1f:83:a2:3a:f2:5d:ba:03:d6:a5:08:ff:c1:2a:ac:
         4a:bf:da:76:93:24:75:f3:d1:4b:00:35:97:7c:e1:d4:8f:fc:
         a3:a9:17:35:f0:04:75:ab:1a:02:da:f9:5f:7a:cd:eb:a0:f8:
         5c:6e:32:62:0d:2e:c4:ce:3b:6d:0b:41:a1:56:06:e3:7e:8e:
         1b:18:e4:a8:01:cb:1e:e9:60:51:f0:13:d7:4e:61:23:a6:04:
         5c:7a:74:a0:c5:29:74:d9:bb:a5:24:f8:54:50:ba:51:95:da:
         33:e2:a4:6b:f1:e2:15:d1:a1:af:d9:b4:f3:13:8e:a8:21:5d:
         aa:3c:8a:1b:f7:34:f9:03:06:db:07:c9:a9:1e:e5:29:06:c8:
         a3:7b:30:e4:40:b8:7c:48:79:e3:35:bc:0c:12:f2:3a:73:d1:
         0c:aa:34:e4:68:51:e1:db:1b:a3:e5:71:6d:a6:5f:c0:1c:1a:
         91:19:6d:f8:44:a2:ea:a6:04:17:80:2a:a0:88:ba:31:4f:1d:
         88:12:78:7f:9d:42:e7:3f:f6:77:b9:8e:57:58:e3:15:46:8c:
         67:b4:3c:dd:60:b5:81:34:e2:10:78:d0:64:fa:23:28:56:94:
         35:ac:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:18 2026 by rpki-client