Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4116796f-ed22-3853-9c48-6aa1f69422d6.roa
File:                     4116796f-ed22-3853-9c48-6aa1f69422d6.roa (raw, json)
Hash identifier:          2LUKWKL41AB20xA9gxz6MXYnFkRv01D2ANktX/vxauA=
Subject key identifier:   2B:C7:1E:FA:1B:3E:87:99:73:ED:C3:27:06:DA:1F:BC:C7:D9:C9:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F093D0B889246631791579580
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4116796f-ed22-3853-9c48-6aa1f69422d6.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     399170
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0b:88:92:46:63:17:91:57:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=0eac6d1e-c10a-42a1-bbac-6bfbd4404f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:5a:17:78:75:07:9f:77:a3:03:20:50:2a:
                    03:3c:78:0c:70:03:31:94:f9:7b:a0:4e:0e:0f:e4:
                    de:c6:12:12:3b:42:e3:ed:5b:cb:11:e1:11:3c:d0:
                    71:de:27:e9:8f:78:92:94:54:aa:dd:f3:99:0f:a7:
                    3a:28:29:ef:7e:d0:42:ee:64:d9:c8:7e:ae:93:09:
                    05:96:8b:9e:ee:1d:7f:7a:2d:58:6e:5e:ee:1c:8f:
                    22:ff:65:6f:30:cc:8a:c7:53:da:c1:75:77:7f:c8:
                    0e:a4:05:40:27:de:af:aa:ff:d1:9c:b6:2a:69:e0:
                    d2:34:72:b1:e7:01:61:98:79:c7:35:de:8b:e5:82:
                    54:5b:33:0d:68:05:79:af:fd:65:a1:45:63:b3:30:
                    1d:d7:69:e5:1d:56:9c:13:66:1d:cc:d2:12:af:39:
                    25:b2:59:66:4a:2d:f4:f9:01:11:23:7e:93:b6:17:
                    bf:bd:1c:74:eb:e9:f0:76:a8:92:52:05:62:e2:bb:
                    49:d0:12:fb:b1:16:5a:af:5c:b0:97:9a:24:05:9b:
                    9e:aa:05:40:5e:f7:55:a7:8f:ff:25:9a:3b:b5:4a:
                    27:be:6e:9b:c7:ad:ca:3c:2a:38:d6:9c:ad:aa:64:
                    57:51:d7:73:12:8a:b0:2d:58:d8:ae:2b:38:26:60:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C7:1E:FA:1B:3E:87:99:73:ED:C3:27:06:DA:1F:BC:C7:D9:C9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4116796f-ed22-3853-9c48-6aa1f69422d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:6d:52:4c:ee:93:4e:c4:e0:4c:bd:71:6e:b2:8d:43:95:
         86:e5:95:07:84:11:4c:e0:fc:da:d4:09:ab:ba:86:d0:d4:99:
         f2:9d:0d:47:16:0c:b8:e7:ab:eb:27:07:d3:d4:58:2d:7e:bb:
         a4:ab:e9:07:e4:8e:ed:86:fa:c1:83:8b:00:cb:f6:7c:fa:b4:
         67:0b:06:0f:e9:46:3d:4f:ac:02:32:fa:bb:9c:1a:82:2d:26:
         9e:9c:6e:76:ee:64:df:01:c9:9f:77:ea:0f:0e:70:32:be:dc:
         20:5d:91:9e:4f:55:93:39:5f:db:2e:f2:3b:f2:ed:66:78:56:
         76:70:53:c7:5f:ca:35:c0:3d:63:87:07:fa:f9:ce:39:70:9e:
         ce:4b:e2:b8:23:53:70:2e:91:f9:58:b8:7a:9e:2d:d3:1f:b6:
         b8:b0:cd:cc:c9:96:fe:d2:ea:62:4c:e0:b3:1d:6f:d4:54:38:
         4a:58:e0:9e:4f:db:13:2d:7d:1f:de:4f:ad:bd:d7:42:a0:12:
         d8:d9:db:26:d5:0d:00:80:7e:76:77:91:f2:82:5d:be:80:46:
         41:aa:c8:9d:a8:d7:c8:fe:8d:ad:0b:af:dd:7c:e8:28:4d:b4:
         3a:2a:9e:d9:77:cf:aa:06:ba:d2:28:74:61:82:29:72:6d:66:
         f9:47:19:52
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPQuIkkZjF5FXlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
MGVhYzZkMWUtYzEwYS00MmExLWJiYWMtNmJmYmQ0NDA0ZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JxaF3h1B593owMgUCoDPHgMcAMxlPl7oE4O
D+TexhISO0Lj7VvLEeERPNBx3ifpj3iSlFSq3fOZD6c6KCnvftBC7mTZyH6ukwkF
loue7h1/ei1Ybl7uHI8i/2VvMMyKx1PawXV3f8gOpAVAJ96vqv/RnLYqaeDSNHKx
5wFhmHnHNd6L5YJUWzMNaAV5r/1loUVjszAd12nlHVacE2YdzNISrzklsllmSi30
+QERI36Tthe/vRx06+nwdqiSUgVi4rtJ0BL7sRZar1ywl5okBZueqgVAXvdVp4//
JZo7tUonvm6bx63KPCo41pytqmRXUddzEoqwLVjYris4JmDTbQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCvHHvobPoeZc+3DJwbaH7zH2cniMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDExNjc5NmYtZWQyMi0z
ODUzLTljNDgtNmFhMWY2OTQyMmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACM5tUkzuk07E4Ey9cW6yjUOVhuWVB4QRTOD82tQJq7qG0NSZ8p0N
RxYMuOer6ycH09RYLX67pKvpB+SO7Yb6wYOLAMv2fPq0ZwsGD+lGPU+sAjL6u5wa
gi0mnpxudu5k3wHJn3fqDw5wMr7cIF2Rnk9Vkzlf2y7yO/LtZnhWdnBTx1/KNcA9
Y4cH+vnOOXCezkviuCNTcC6R+Vi4ep4t0x+2uLDNzMmW/tLqYkzgsx1v1FQ4Sljg
nk/bEy19H95Prb3XQqAS2NnbJtUNAIB+dneR8oJdvoBGQarInajXyP6NrQuv3Xzo
KE20Oiqe2XfPqga60ih0YYIpcm1m+UcZUg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:00:45 2026 by rpki-client