Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
File:                     d111a5e9-1922-33ea-a02f-11683a2965fe.roa (raw, json)
Hash identifier:          wvbdI42XX3jLx1kjAGM309O60YhM6Yd36acZm+xRNls=
Subject key identifier:   59:D6:AB:77:14:43:37:5A:46:3F:9C:A0:39:8D:2B:B9:3D:A6:84:20
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E66DA37C2B47B817AEC21B180
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     397239
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:37:c2:b4:7b:81:7a:ec:21:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=afa9cc2f-f43d-4178-a83c-48ee01fe3f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:37:31:c3:b5:7d:8b:f6:5a:d0:65:80:98:
                    15:1f:c5:a9:3f:85:cc:82:33:ca:ca:3c:94:e6:0c:
                    e8:eb:6b:7d:ac:03:21:87:04:4d:68:46:ab:92:0f:
                    f2:c1:f1:08:4a:e1:3d:59:0e:f7:80:00:cf:7a:ae:
                    df:08:11:27:00:ed:d7:9d:6e:29:19:56:4b:41:49:
                    08:98:1e:13:a3:fb:4e:3d:27:84:90:cb:b5:f7:fa:
                    d7:6a:b2:c6:94:ce:31:51:7e:0a:fe:9f:1d:af:69:
                    51:94:0c:b1:b3:e0:ff:98:58:29:b5:76:4e:ee:3c:
                    9f:f7:b0:2d:38:32:b8:d0:67:67:f5:2f:05:51:5a:
                    88:9f:5f:0b:94:f1:61:b4:db:cd:31:c1:34:70:e2:
                    ac:ac:44:6c:ec:59:19:8e:9e:29:f2:e6:8a:91:6b:
                    56:4f:14:aa:ca:95:ec:32:eb:22:1a:19:ce:a3:2f:
                    93:2d:80:42:5e:6b:a7:23:24:e7:65:60:56:75:78:
                    73:c9:92:eb:e4:30:70:7f:8b:7f:7a:b3:87:6a:3d:
                    8f:d2:39:9c:09:6b:53:12:f1:ad:96:ce:a7:0d:4b:
                    cb:3d:de:b0:34:b5:38:0e:ce:e2:4b:5c:0a:62:75:
                    47:88:be:34:cb:45:44:a9:77:41:2f:0b:44:38:c0:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D6:AB:77:14:43:37:5A:46:3F:9C:A0:39:8D:2B:B9:3D:A6:84:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d111a5e9-1922-33ea-a02f-11683a2965fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:41:de:16:41:ae:6e:c7:de:88:7b:48:3d:26:af:b7:af:
         22:48:f7:59:f2:6e:09:37:d8:bc:5e:e6:9e:74:6e:19:01:8a:
         26:32:dd:76:2b:03:70:ec:15:94:71:92:36:17:d3:33:e6:f0:
         e0:73:cb:76:a8:cb:6e:6a:59:e4:51:e2:06:79:93:6b:87:53:
         7e:72:cf:c2:aa:db:00:f5:68:42:38:53:3d:55:f9:ab:04:f6:
         ab:5b:26:a1:d6:61:7f:d0:69:92:e7:51:3d:20:28:96:09:f5:
         50:15:80:c0:5b:18:f6:53:94:f6:9c:ce:44:67:47:9d:9e:df:
         93:67:f3:8b:f5:fb:52:8f:d0:44:ee:86:df:18:73:4c:a2:5d:
         3e:96:a5:07:a1:5f:79:70:8f:7b:f4:ba:b2:b4:1d:cb:48:74:
         48:a7:95:e9:8d:5b:ad:96:3c:21:2a:c0:f2:ea:87:a0:ac:69:
         ab:38:4b:ab:ba:98:11:eb:d3:5a:d3:01:52:22:d3:9e:9f:02:
         df:34:62:9e:7d:1a:48:31:7c:5a:01:6c:f1:1c:3d:4d:fc:d2:
         81:8e:b8:2c:32:31:31:8d:51:48:73:66:90:c2:81:c0:7e:5e:
         bc:2a:d6:b5:72:c1:e7:87:71:80:3d:6c:20:1c:94:5f:40:68:
         d8:10:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:10 2026 by rpki-client