Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/377b60f1-539f-338a-a87c-acd1b7259603.roa
File:                     377b60f1-539f-338a-a87c-acd1b7259603.roa (raw, json)
Hash identifier:          dV37iY/Zo7M8wwmQ+KyTSfgOQQ1mLA3stmBarEtstrY=
Subject key identifier:   54:26:7C:AA:42:EC:2C:2B:FF:93:77:51:30:D4:DE:5F:0F:2B:49:35
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E66DA381C2869937227F3EFC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/377b60f1-539f-338a-a87c-acd1b7259603.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     399156
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:38:1c:28:69:93:72:27:f3:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=d07451af-134b-4505-a01e-1c83171971cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:b3:06:ce:c9:c5:6d:e0:34:d7:58:15:04:
                    b9:3b:16:44:5c:90:7e:e9:4e:df:8b:f0:55:46:30:
                    a8:96:62:1f:0e:a5:bc:1b:eb:51:f8:87:fc:32:8b:
                    77:ac:27:92:d9:7a:62:db:16:43:d3:33:e8:78:34:
                    3e:e1:8b:26:9e:42:89:fe:ce:d4:8e:3c:8f:d9:90:
                    02:7f:e5:1a:2e:4f:46:cb:54:a9:06:24:5b:10:2b:
                    7e:27:9c:9b:3f:3c:ce:5d:3f:d7:96:76:e0:a5:33:
                    b9:ed:68:91:8c:50:9d:03:84:31:fb:c3:2d:80:bb:
                    0a:45:b2:f5:48:60:4e:44:f9:c0:b1:e0:19:e5:e9:
                    da:44:af:9f:e4:08:c0:48:e9:3a:76:34:71:e1:21:
                    3f:94:81:84:06:1f:83:a2:8a:92:ca:a2:c4:f2:bf:
                    c3:ff:8a:a9:ed:5a:3b:52:09:f6:ea:90:72:1d:12:
                    a6:7c:de:7e:fa:44:24:f7:d6:62:84:09:6f:8b:6b:
                    62:d9:d0:52:32:ba:63:f8:48:5a:f1:19:a8:5d:e4:
                    b6:c6:8b:e3:da:6e:e1:a9:60:ce:b0:ad:e8:67:8d:
                    0f:6b:b4:69:c3:e4:82:19:34:1b:41:c2:23:fa:23:
                    d2:dd:79:7c:17:63:2d:c3:ba:87:e5:c8:6b:f6:f6:
                    9b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:7C:AA:42:EC:2C:2B:FF:93:77:51:30:D4:DE:5F:0F:2B:49:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/377b60f1-539f-338a-a87c-acd1b7259603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:83:5c:30:cb:f6:86:e1:c5:32:95:57:f1:39:98:82:97:
         69:26:2e:ed:f7:a5:f3:c0:ed:0b:7b:75:aa:21:ed:ca:fa:66:
         ac:88:bd:b0:b8:bd:65:da:ef:78:00:0d:e3:d8:29:0c:48:39:
         39:cb:2b:45:4a:fa:2e:72:c7:07:a2:98:6d:f1:e6:1c:fe:0f:
         5e:8f:40:43:e3:22:f9:6c:8a:2c:42:18:04:a4:09:ce:1c:49:
         86:43:6d:76:fe:03:80:bd:4b:f0:38:fa:cf:ac:1e:b7:9d:c8:
         3b:f5:4b:dd:f7:a0:ac:9a:1d:c3:75:00:c8:a1:e7:c7:63:7b:
         85:f8:5a:f6:c3:b4:2d:51:07:e4:2f:a8:29:a9:f8:3c:e3:45:
         da:44:df:3e:61:7c:6c:30:63:d6:d9:b6:12:c1:83:a5:43:19:
         29:c6:89:c1:30:cf:a1:66:4a:0d:15:ff:75:83:50:25:32:07:
         dc:87:ee:d6:46:23:63:99:29:2e:94:e8:3d:9f:9b:c3:99:09:
         3d:ce:55:f3:5c:23:ce:90:1f:45:29:74:56:fd:a3:92:10:a0:
         53:7d:a2:22:3f:f2:8b:b9:d1:c9:3e:9f:53:2d:bb:27:9e:25:
         f3:00:88:60:6d:5d:f5:62:67:83:50:8c:ab:8c:7d:8f:b5:e2:
         63:be:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:58 2026 by rpki-client