Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60de4490-aa5c-3ae8-a060-18b03a909822.roa
File:                     60de4490-aa5c-3ae8-a060-18b03a909822.roa (raw, json)
Hash identifier:          vtcr1GCkS5/8rIfi2wBKWmeRNMUpBc9cLIQhFrV16hI=
Subject key identifier:   EA:1F:F4:EF:60:4F:6D:AC:EA:3D:52:E9:31:36:50:F2:91:2B:1C:A8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DA4C204CF89A2A3EEE80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60de4490-aa5c-3ae8-a060-18b03a909822.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397219
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:da:4c:20:4c:f8:9a:2a:3e:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=32d1fb4d-abb6-45b3-945f-622e6ddf914f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:90:04:02:3a:6d:3b:74:56:9c:60:82:9d:b1:
                    fe:e9:29:87:67:b5:da:32:f5:08:40:07:0b:d8:6c:
                    9f:80:30:50:34:c1:18:2f:5e:23:63:00:bb:28:11:
                    e7:a2:04:e9:20:71:af:0d:dd:16:8e:e0:92:aa:5b:
                    7f:3f:7d:59:4d:71:bc:0f:46:50:84:ab:df:11:e5:
                    ca:35:81:06:ec:b3:48:46:7f:20:bb:6b:b1:eb:90:
                    36:13:b1:66:19:79:6b:51:db:f6:aa:f1:8f:30:32:
                    23:18:a6:91:b8:fc:38:18:0f:60:b8:0d:b0:41:8f:
                    65:05:71:3d:e3:78:e8:6a:ca:00:73:96:ef:f5:4c:
                    8b:92:7d:6a:b3:3d:95:b3:cf:34:14:8d:1d:a2:83:
                    b7:de:4e:e2:69:58:a2:8c:8b:01:39:6d:0e:63:30:
                    67:b8:9e:df:e4:72:c1:3d:e0:59:c5:57:20:9a:07:
                    59:fe:8f:92:e7:ed:ce:5a:f3:a1:40:b2:c7:8e:16:
                    19:2c:b5:d5:a7:f7:31:47:4c:57:04:d2:67:4a:b9:
                    24:ae:56:51:f1:0b:2c:ea:7c:bb:c8:16:a0:86:f3:
                    be:d4:31:a9:af:2d:db:ad:52:00:e2:a5:9d:b9:d3:
                    39:9d:d4:2a:de:fc:ed:1d:0c:97:d6:2f:de:06:aa:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:F4:EF:60:4F:6D:AC:EA:3D:52:E9:31:36:50:F2:91:2B:1C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/60de4490-aa5c-3ae8-a060-18b03a909822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9f:5a:c8:9e:51:5b:4c:b5:0c:b6:39:a4:d1:2e:89:28:32:
         18:4b:22:36:86:73:ec:6f:b4:d8:b4:a8:8b:20:76:e0:36:51:
         63:27:53:3b:08:07:f4:89:f9:b6:cb:86:f1:fd:a8:56:fb:9b:
         97:35:84:a1:cb:ba:dd:64:c0:19:b0:70:08:f4:df:dc:4b:09:
         3b:6f:08:1f:d3:81:55:ed:db:28:1e:fb:77:15:df:c0:ef:72:
         d4:f3:f0:91:58:ca:9e:31:03:da:9b:ea:33:be:e0:41:c5:0f:
         1e:e0:3a:81:73:0c:da:3d:51:33:bc:79:bc:fa:73:47:b4:af:
         9b:06:37:a9:19:ad:f2:2d:05:a1:57:2c:cf:e6:34:71:0e:bb:
         d4:4c:8b:67:48:fd:a1:14:25:f3:13:d6:cf:c8:fd:d9:d3:29:
         58:1f:03:0c:e4:ec:6b:6e:d5:b3:0c:bc:b1:35:ab:30:0d:84:
         d9:d5:44:24:e6:89:59:c0:39:da:db:d9:d7:f5:c5:8d:0a:5e:
         54:e1:69:28:ff:9c:ba:0c:dd:ae:b9:20:c3:3f:69:23:c4:81:
         b6:57:3c:75:9a:7b:36:0b:46:a3:0f:68:7e:7d:c3:8c:5b:b9:
         76:b7:b8:fc:e0:a1:d7:a1:5e:1b:70:de:1b:7c:1f:78:71:54:
         2a:31:eb:22
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5UtNpMIEz4mio+7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MzJkMWZiNGQtYWJiNi00NWIzLTk0NWYtNjIyZTZkZGY5MTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpAEAjptO3RWnGCCnbH+6SmHZ7XaMvUIQAcL
2GyfgDBQNMEYL14jYwC7KBHnogTpIHGvDd0WjuCSqlt/P31ZTXG8D0ZQhKvfEeXK
NYEG7LNIRn8gu2ux65A2E7FmGXlrUdv2qvGPMDIjGKaRuPw4GA9guA2wQY9lBXE9
43joasoAc5bv9UyLkn1qsz2Vs880FI0dooO33k7iaViijIsBOW0OYzBnuJ7f5HLB
PeBZxVcgmgdZ/o+S5+3OWvOhQLLHjhYZLLXVp/cxR0xXBNJnSrkkrlZR8Qss6ny7
yBaghvO+1DGpry3brVIA4qWdudM5ndQq3vztHQyX1i/eBqrXhwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFOof9O9gT22s6j1S6TE2UPKRKxyoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNjBkZTQ0OTAtYWE1Yy0z
YWU4LWEwNjAtMThiMDNhOTA5ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaJ9ayJ5RW0y1DLY5pNEuiSgyGEsiNoZz7G+02LSoiyB24DZRYydT
OwgH9In5tsuG8f2oVvublzWEocu63WTAGbBwCPTf3EsJO28IH9OBVe3bKB77dxXf
wO9y1PPwkVjKnjED2pvqM77gQcUPHuA6gXMM2j1RM7x5vPpzR7SvmwY3qRmt8i0F
oVcsz+Y0cQ671EyLZ0j9oRQl8xPWz8j92dMpWB8DDOTsa27Vswy8sTWrMA2E2dVE
JOaJWcA52tvZ1/XFjQpeVOFpKP+cugzdrrkgwz9pI8SBtlc8dZp7NgtGow9ofn3D
jFu5dre4/OCh16FeG3DeG3wfeHFUKjHrIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:05:29 2026 by rpki-client