Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa
File:                     b331d400-0d77-3704-a4fb-79e12575def2.roa (raw, json)
Hash identifier:          v0LyPJmywhCSybeGzGZqCmCVHDWbzKGX6zHlLRYNNmk=
Subject key identifier:   5A:D3:F0:CB:D1:FD:44:07:D6:3D:B8:B2:60:9F:21:C4:63:BB:95:02
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4DA35E5A7A4B1DF81DE00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397217
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:da:35:e5:a7:a4:b1:df:81:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=a8534087-8ede-4547-baa1-06b77b1ede48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:16:47:41:ba:c8:41:31:a9:00:11:0a:ee:
                    95:0b:f0:3e:e4:0c:5e:fb:20:c4:d2:71:4d:eb:40:
                    36:1d:ed:c9:3f:de:85:88:14:82:43:6b:68:86:3f:
                    47:df:5e:06:a9:b7:94:31:aa:cd:20:49:01:75:86:
                    43:c1:92:78:10:93:2b:ac:20:27:ac:93:ef:e8:4b:
                    6b:d1:b9:b5:03:c1:a9:e2:1a:24:54:9c:3d:ff:a8:
                    ac:6c:e6:76:3c:a9:1a:a1:0c:be:0c:42:1f:fc:b3:
                    38:ba:12:40:01:a3:06:35:f8:7f:dd:d4:af:e3:0f:
                    b3:58:e9:8f:b3:bf:a5:d1:6c:4b:c9:b1:6c:c0:7e:
                    60:b0:ce:1d:3e:b6:c4:1b:43:72:e8:4a:6a:7e:d2:
                    51:75:2c:66:45:3b:36:1d:f9:f4:b1:fa:0c:7e:c5:
                    e4:5d:10:df:47:d9:f1:28:a3:4d:58:31:d2:1f:9c:
                    cb:80:de:2d:9a:dd:ac:3e:7e:96:1e:71:2f:af:6b:
                    7e:c6:b0:8b:4e:04:8f:66:22:02:e1:74:ca:ea:60:
                    e5:cd:20:04:59:5d:2f:5a:2f:82:94:26:0a:64:11:
                    60:a9:a4:58:79:93:f2:c4:44:f5:25:f2:a8:59:21:
                    2c:70:77:7c:e3:1b:2e:a0:e5:43:aa:76:5a:ec:cf:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:F0:CB:D1:FD:44:07:D6:3D:B8:B2:60:9F:21:C4:63:BB:95:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b331d400-0d77-3704-a4fb-79e12575def2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:d0:a6:30:8f:ae:b5:bc:6f:6b:71:ba:54:80:3d:07:e6:
         95:63:57:ff:c7:73:bd:e9:e9:a9:16:e5:73:25:eb:75:7c:a3:
         88:94:d2:a5:e2:07:8c:77:86:4b:4e:e0:94:8f:77:05:ec:9c:
         8f:d3:64:ae:f7:42:a1:00:28:7b:e3:c1:cc:8b:9e:79:2a:e4:
         2e:7a:94:4b:ce:96:0d:eb:63:b6:bf:fb:01:e6:c6:b9:bd:bd:
         cb:57:a6:17:e1:90:cf:82:c4:a9:4b:e6:2f:88:46:c9:09:f1:
         92:32:69:42:8f:4f:d6:21:61:ad:63:0f:eb:6e:22:c8:81:66:
         3e:57:44:d1:fa:98:d3:aa:08:62:a8:23:71:f3:d5:16:d2:46:
         0d:69:08:ee:c0:0e:b1:f1:b6:c8:ef:9e:57:52:ba:db:36:57:
         a4:98:9c:02:b7:ce:0c:e0:65:56:ec:b2:b3:3f:fd:b9:8f:46:
         14:23:9b:be:e7:e8:ee:4f:3f:60:51:b5:f8:25:37:a2:86:1c:
         7c:59:a8:ad:c1:6e:53:c5:cd:08:0d:67:fd:0f:59:d1:c6:9d:
         71:ba:9d:a0:ba:3d:41:7d:1f:2b:a0:2e:2c:4d:b3:2e:d8:d3:
         d0:86:57:80:8a:d5:e5:59:02:52:3c:ac:66:a7:0a:7e:23:91:
         c6:d2:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:35:45 2026 by rpki-client