Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa
File:                     2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa (raw, json)
Hash identifier:          O/dNaERkYYnHCJYvnkQshxj2AittPKdNILKyizSTHxM=
Subject key identifier:   85:B6:0D:DB:5A:A1:E4:36:E8:BD:38:CA:8C:BD:48:2D:B6:41:3F:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717A642222F75980272FDC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397224
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a6:42:22:2f:75:98:02:72:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=61ff3b10-9542-4b84-b1c3-9dd723555ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:3e:ff:94:df:f9:60:30:66:6d:0d:a9:26:
                    bd:39:21:1f:7d:b7:cb:73:a3:8a:eb:f1:44:da:18:
                    89:1c:59:ca:fd:4b:9a:dd:50:9a:11:cf:76:72:9f:
                    a0:47:37:bc:5d:1c:07:c4:0e:e5:ce:32:af:67:65:
                    79:2f:1f:39:79:89:69:c3:b8:8d:c2:48:b0:e3:3c:
                    2e:73:2c:95:e9:6a:6c:ec:ce:cd:c4:53:56:38:3a:
                    45:4a:5e:c1:ca:6e:68:2a:16:49:3b:10:43:cf:e9:
                    13:09:d1:bf:f5:8b:d4:4b:64:90:9d:84:16:6c:d6:
                    b6:8a:0e:d1:22:db:02:e9:e3:13:84:c4:c2:eb:e6:
                    01:3c:41:70:29:6d:0d:7b:b3:4f:d5:1e:3b:97:f8:
                    c9:2c:54:07:a1:e0:6a:d2:1d:59:57:09:da:0f:3d:
                    9d:c2:15:1a:56:3a:0f:72:d9:ad:73:32:01:00:1d:
                    bf:69:88:7d:30:3a:7e:a7:16:e8:80:d6:ad:d6:db:
                    29:b8:9a:4f:42:9a:d3:3a:7f:79:f6:33:28:73:59:
                    49:66:25:4c:dc:21:21:56:3e:8c:1d:7a:ae:df:ee:
                    41:db:f8:2f:a8:42:c4:c8:55:d9:05:d0:e4:da:53:
                    cd:c2:f2:c2:fe:46:d5:a7:40:62:96:41:18:92:93:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B6:0D:DB:5A:A1:E4:36:E8:BD:38:CA:8C:BD:48:2D:B6:41:3F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2488ac8f-6e85-3e9a-9495-52fca2eeb490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:bc:0b:3a:ae:2d:ee:5f:c3:b3:4f:c1:14:e3:66:2e:9f:
         1a:4e:13:2f:98:06:25:53:3f:eb:37:3f:79:bb:0c:cb:14:63:
         43:2f:98:d4:e0:da:94:ae:2a:d3:58:32:79:81:0f:2c:61:ab:
         7f:25:bb:6e:a6:c7:01:0a:0c:90:06:8b:f8:5f:35:35:c4:f8:
         ea:54:5e:d9:21:c0:ea:72:d5:4c:d4:3d:db:02:6d:4c:49:dc:
         38:8d:47:05:75:79:60:65:7f:26:0a:b3:1d:d7:28:8f:6c:71:
         99:74:f8:cb:73:27:9a:b3:a7:de:33:2f:c3:cd:f5:05:5d:c8:
         c8:3a:e3:f0:29:2b:2a:5c:83:95:c9:31:e3:3d:d2:f4:0c:07:
         ee:a4:cc:26:b5:7f:84:29:ea:19:85:8e:6f:bc:98:a6:e5:d8:
         f0:92:96:cf:66:5a:36:58:11:dd:96:7e:8c:de:9b:69:5c:4a:
         45:82:06:a1:f2:23:8a:c2:74:38:3c:58:8c:5f:04:6d:a2:3f:
         b9:94:4f:06:d6:77:3c:e4:52:23:e4:44:5f:4e:ed:49:8c:4b:
         3f:b6:cb:73:0c:50:8a:ef:39:6a:32:80:29:b2:c5:e3:fb:df:
         2c:76:68:5c:80:70:bb:d0:1f:dd:29:28:a6:5f:fd:ce:7c:bf:
         82:e8:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:40 2026 by rpki-client