Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3233c621-941f-39df-9a38-a4319189cba1.roa
File:                     3233c621-941f-39df-9a38-a4319189cba1.roa (raw, json)
Hash identifier:          4vVboG9xZuFD5W7Sqz2ffakHiM6lGwwr1qezGFddq48=
Subject key identifier:   22:07:49:5B:62:20:21:9E:97:95:CB:4E:23:87:48:75:30:54:AB:03
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F093D087EA4032C7845689B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3233c621-941f-39df-9a38-a4319189cba1.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     399154
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:08:7e:a4:03:2c:78:45:68:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=31d6c0c1-e36d-402a-a4f1-cbf93bbfc947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:db:68:7a:5b:38:fa:b1:75:c5:19:28:73:
                    51:c8:71:71:5d:ac:96:71:70:0c:46:65:12:97:53:
                    81:a8:71:b3:bd:b8:c6:9c:e2:e9:7c:fb:72:2b:2a:
                    0b:5a:53:50:7c:7d:79:02:b7:e6:59:85:c2:49:e8:
                    57:a1:cf:61:97:19:44:38:f3:29:e3:4b:3c:27:d5:
                    20:ed:6a:6f:0e:67:63:e1:90:ab:5c:08:d8:cf:ab:
                    5a:d4:ef:8f:a6:59:14:6f:34:23:85:54:fb:1a:1a:
                    27:fa:09:a0:7d:8b:3c:77:a8:60:8f:be:1f:f2:90:
                    9e:2e:93:72:aa:55:70:1f:e8:80:4c:89:b3:70:12:
                    06:df:5a:33:0f:76:e2:88:87:bb:90:3a:7d:8a:56:
                    8e:3f:7a:f4:d2:af:57:96:17:01:2b:90:2d:8c:30:
                    ef:0a:c8:f3:ac:05:15:13:93:62:54:0c:ec:8c:8b:
                    ea:82:73:6b:d9:a0:09:76:05:57:54:59:cf:a0:ae:
                    f2:16:a8:ae:02:9f:38:e9:bd:35:5d:05:aa:18:76:
                    d2:a5:ec:b4:58:fc:1f:e9:23:5e:97:a6:ae:8f:ae:
                    98:6c:c2:cf:a0:00:9a:ed:d5:95:92:4c:e5:1d:27:
                    d2:75:34:01:fb:7a:68:f4:5f:f8:b2:56:35:e0:88:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:07:49:5B:62:20:21:9E:97:95:CB:4E:23:87:48:75:30:54:AB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3233c621-941f-39df-9a38-a4319189cba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:90:43:a8:a0:dd:20:29:e5:02:e1:99:ce:b2:a0:9f:8f:
         90:3e:ca:02:e3:bb:5a:eb:d0:3c:e0:3b:c0:4f:cb:db:45:0d:
         f2:b9:25:84:6f:15:82:55:e9:16:2a:bf:15:3a:18:0e:57:c0:
         b4:d8:c6:21:17:b3:43:96:92:c3:f6:48:f4:3e:4d:5c:a3:c5:
         1e:e4:fa:2c:59:92:6b:94:8c:44:fb:1e:35:db:7d:ab:a5:e1:
         ee:de:8c:24:d5:29:db:3b:2a:b0:81:47:38:e5:c8:e1:27:b2:
         f2:1d:98:3b:a7:e5:ea:b0:f6:44:9b:da:78:35:fd:b4:1d:11:
         96:ab:fe:5f:88:5b:b1:ef:27:c9:51:10:e7:88:d0:10:c6:a0:
         7d:97:39:7b:7c:5a:69:15:1f:04:30:cb:d1:bf:63:46:7e:88:
         c9:05:2b:be:f4:08:b0:57:94:72:97:c6:6e:6b:32:fc:3a:a9:
         72:e2:ae:1d:1c:9b:8f:be:51:49:88:fc:9b:ea:5f:b6:2c:1d:
         32:84:67:85:26:23:d7:7d:b9:77:30:d3:30:95:c9:33:d3:b7:
         ac:75:1c:27:38:7c:73:eb:46:56:bc:a7:57:75:f7:68:90:c1:
         3a:45:df:01:d4:e9:c1:84:f9:12:1c:56:c7:3f:37:41:c0:aa:
         f2:11:ce:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:55:41 2026 by rpki-client