Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa
File:                     d728d115-fca1-3807-938b-c542d636f2d6.roa (raw, json)
Hash identifier:          F17cPxHJU+P7NsYqYF66Kpw7wpmhg59Hz7DKm3NRQGI=
Subject key identifier:   12:2F:62:78:5B:48:11:5A:B1:89:1F:BE:8D:60:1D:87:A1:0A:BE:30
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717A7B11E1A6915F9CC1160
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397223
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a7:b1:1e:1a:69:15:f9:cc:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=45ecc7d9-3f32-443f-ad14-f8e48cdbbfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:92:f3:72:4f:aa:1e:ef:23:03:a5:89:91:
                    db:46:93:ea:4e:2d:43:ee:23:32:a6:ea:47:b1:3b:
                    8b:f8:e3:b6:97:7b:ce:4a:3b:0f:20:8c:8b:07:56:
                    81:ce:42:66:27:9e:ab:a4:7a:39:4b:b2:a3:3d:60:
                    ac:d7:c7:a6:a1:d4:b6:70:4c:08:b5:68:2e:0b:5b:
                    5f:f6:9b:1d:a6:e4:b2:24:d1:d2:bd:e5:00:f9:32:
                    fd:6e:ee:ae:12:13:78:12:eb:d2:71:89:78:4d:cd:
                    e0:18:6a:57:e8:fe:b1:ed:ef:ef:e5:0d:5d:67:52:
                    b6:8d:32:5e:88:34:d8:1a:36:44:68:f7:d3:54:0d:
                    60:8c:72:6d:7d:a1:fc:82:ef:1b:29:db:d6:af:77:
                    e2:07:4f:8e:6f:c8:65:30:1f:6b:e5:1d:55:b0:ff:
                    d2:bb:eb:3d:36:c2:6f:7c:4f:c3:98:29:dc:72:ea:
                    14:84:9a:c5:73:e6:0b:fe:26:b0:d5:58:45:84:10:
                    31:57:0f:bd:8b:f4:68:05:d2:5c:34:ae:22:c5:24:
                    b4:0a:52:6d:c0:cb:d5:0e:c6:17:6c:0a:82:8f:d0:
                    07:b8:85:15:cb:9b:5d:b1:83:6c:78:31:1d:0a:e1:
                    b8:82:17:0c:9a:ed:87:1d:b1:c7:84:8b:aa:f9:a0:
                    fe:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:62:78:5B:48:11:5A:B1:89:1F:BE:8D:60:1D:87:A1:0A:BE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d728d115-fca1-3807-938b-c542d636f2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:16:8e:9c:22:f5:3a:eb:55:dc:ea:e3:d1:04:72:9a:f8:ea:
         20:63:f4:81:54:82:87:14:92:ad:96:28:f1:5e:f1:f9:3c:c7:
         0a:19:1d:da:05:88:bc:48:df:fb:e3:3c:31:d3:2e:aa:ee:d2:
         ff:b3:d1:04:f1:11:33:f7:98:95:50:ff:14:25:a1:81:e2:d5:
         a5:8c:5b:d2:06:7a:02:1f:40:f0:ea:f7:5a:77:d7:4d:65:30:
         fb:78:ca:09:5d:1e:64:b2:e4:1e:33:88:a2:dc:24:3b:ec:42:
         10:c5:8c:f8:f2:9f:8e:3c:9c:e9:83:45:03:58:e1:73:f1:d8:
         e7:8f:0a:5f:15:79:d9:11:bc:ed:bb:52:72:6c:b6:f2:14:c8:
         f9:8c:df:7b:ad:d7:51:fd:10:d6:0d:07:27:9f:f5:37:c4:e2:
         b1:b8:e6:81:9e:b8:04:96:23:c8:a0:6b:31:03:0d:7a:34:c1:
         b5:93:ff:7e:3a:8e:5a:4a:72:b8:5c:de:be:68:74:95:51:59:
         1e:79:9f:3c:32:df:25:38:f6:2b:50:f7:71:d0:5e:c1:60:c2:
         65:ce:fe:7f:a9:d5:4e:62:92:a9:07:78:f6:4c:a0:1e:f6:78:
         42:c3:17:46:d0:b4:04:59:7e:d2:15:c2:ee:89:0c:f3:97:de:
         0c:51:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:55:23 2026 by rpki-client