Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57d99c16-1b58-3edc-8c72-24c6bfec7452.roa
File:                     57d99c16-1b58-3edc-8c72-24c6bfec7452.roa (raw, json)
Hash identifier:          h9StiYW7X+d6NnE4WWn/RiMvB/Eac52l56w3uPCFiHk=
Subject key identifier:   F8:57:6A:86:27:AE:4B:D1:49:48:15:AD:68:85:D7:75:D1:8E:A1:BA
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E66DA360CB2D05F0F4B6212C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57d99c16-1b58-3edc-8c72-24c6bfec7452.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     399160
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:36:0c:b2:d0:5f:0f:4b:62:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=91f9bd87-044a-48b0-97ea-23f3f8f432f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:b6:72:73:7e:2e:ed:31:99:ec:3f:45:f6:
                    f5:d3:72:75:38:fc:93:71:da:7b:b4:f7:00:65:7b:
                    af:65:22:82:74:f5:ca:97:f7:fb:bc:d2:17:03:f8:
                    85:03:90:75:6e:88:be:9b:df:11:92:b1:af:00:10:
                    3f:14:b6:c8:d1:a3:65:ce:3e:d2:42:57:3b:00:80:
                    a3:25:f2:c7:ab:a7:4b:f2:a7:11:24:26:85:e4:c3:
                    54:70:e6:12:ba:79:d0:16:f0:f7:15:05:66:1c:40:
                    b3:48:5d:24:92:41:e8:11:63:8f:e0:b9:46:20:ea:
                    73:bd:be:b8:79:cd:cd:d3:88:de:59:f5:fe:39:77:
                    db:06:4b:c7:4e:6b:0c:d3:0f:d4:05:e3:ee:1f:33:
                    a8:79:9b:74:81:80:a9:69:c5:c1:5a:e4:f1:4c:5a:
                    ed:d6:97:59:59:89:59:8f:70:cf:3c:7e:59:07:76:
                    65:99:8f:b5:15:12:7b:1b:06:e4:b3:2f:96:c0:51:
                    21:82:cb:5b:fc:b9:06:bb:a4:2f:fe:93:ec:0b:8e:
                    ec:16:ee:b0:83:0d:b2:77:0d:c4:89:ab:9d:77:16:
                    ab:a6:ab:3f:d0:d4:71:69:e0:ee:3a:7d:29:91:af:
                    e7:d0:1e:c9:de:ca:06:08:2d:0a:04:85:c5:4f:16:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:6A:86:27:AE:4B:D1:49:48:15:AD:68:85:D7:75:D1:8E:A1:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/57d99c16-1b58-3edc-8c72-24c6bfec7452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:fb:6e:ae:a8:38:fd:99:8d:e7:14:24:2d:b8:11:b7:02:
         b9:3c:d4:19:be:77:e6:9a:82:8a:63:cf:88:aa:20:ca:a7:86:
         c1:9c:69:c8:02:4d:63:ba:e5:0f:8e:b0:b5:63:cd:74:46:4a:
         86:9b:c5:36:5e:77:39:a0:03:d8:ee:ab:1d:fa:98:84:dd:90:
         a8:ef:2a:68:b4:10:40:48:d2:0e:44:f2:5a:d9:6f:1e:8a:09:
         03:57:05:b5:84:d3:f6:67:55:3b:6a:1d:b0:ae:b6:da:88:da:
         5f:5e:6e:98:b5:ff:8d:7c:7e:d7:e6:56:52:b2:99:de:3b:64:
         2c:52:9b:a7:fa:62:99:8a:ff:5a:d9:53:77:76:d2:f6:02:d9:
         b8:ba:fa:2f:e4:46:8b:b4:28:ad:61:5a:9b:55:14:f3:4b:34:
         c9:8a:94:ab:68:37:c0:f0:0f:0d:2d:94:00:33:04:31:2e:65:
         da:c8:49:7b:f0:e1:f2:fe:cb:97:a5:38:68:96:26:07:4c:f5:
         06:8f:e3:6c:68:d3:ec:f6:1e:4c:df:a6:65:11:85:be:4d:98:
         bf:e7:56:95:9c:59:75:cc:9e:27:56:23:f0:37:1f:c1:89:16:
         96:ce:4b:1a:01:40:19:d6:30:5f:2d:a9:03:83:41:3a:2b:ed:
         96:32:da:30
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5m2jYMstBfD0tiEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
OTFmOWJkODctMDQ0YS00OGIwLTk3ZWEtMjNmM2Y4ZjQzMmY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsy2cnN+Lu0xmew/Rfb103J1OPyTcdp7tPcA
ZXuvZSKCdPXKl/f7vNIXA/iFA5B1boi+m98RkrGvABA/FLbI0aNlzj7SQlc7AICj
JfLHq6dL8qcRJCaF5MNUcOYSunnQFvD3FQVmHECzSF0kkkHoEWOP4LlGIOpzvb64
ec3N04jeWfX+OXfbBkvHTmsM0w/UBePuHzOoeZt0gYCpacXBWuTxTFrt1pdZWYlZ
j3DPPH5ZB3ZlmY+1FRJ7Gwbksy+WwFEhgstb/LkGu6Qv/pPsC47sFu6wgw2ydw3E
iauddxarpqs/0NRxaeDuOn0pka/n0B7J3soGCC0KBIXFTxYcNwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPhXaoYnrkvRSUgVrWiF13XRjqG6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNTdkOTljMTYtMWI1OC0z
ZWRjLThjNzItMjRjNmJmZWM3NDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEADJv7bq6oOP2ZjecUJC24EbcCuTzUGb535pqCimPPiKogyqeGwZxp
yAJNY7rlD46wtWPNdEZKhpvFNl53OaAD2O6rHfqYhN2QqO8qaLQQQEjSDkTyWtlv
HooJA1cFtYTT9mdVO2odsK622ojaX15umLX/jXx+1+ZWUrKZ3jtkLFKbp/pimYr/
WtlTd3bS9gLZuLr6L+RGi7QorWFam1UU80s0yYqUq2g3wPAPDS2UADMEMS5l2shJ
e/Dh8v7Ll6U4aJYmB0z1Bo/jbGjT7PYeTN+mZRGFvk2Yv+dWlZxZdcyeJ1Yj8Dcf
wYkWls5LGgFAGdYwXy2pA4NBOivtljLaMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:54 2026 by rpki-client