Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dac1f0fb-40de-3e1c-910c-f62c58817f4f.roa
File:                     dac1f0fb-40de-3e1c-910c-f62c58817f4f.roa (raw, json)
Hash identifier:          H43JSp28oFuhAKMeNG6dolfYMt+X9KqVMuXmaGpu8ho=
Subject key identifier:   AF:AF:B9:17:15:2D:52:D2:3C:06:A1:C6:F7:DE:A5:F9:CE:4B:A8:AC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4D9C7D987B42F94DFDB80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dac1f0fb-40de-3e1c-910c-f62c58817f4f.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397240
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d9:c7:d9:87:b4:2f:94:df:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=2a077cea-2c5f-4056-821f-e5a5edad4580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:b4:33:1b:45:23:ea:d9:9e:43:5c:3f:69:
                    59:a8:82:04:a8:53:fa:12:07:9d:14:37:76:0d:81:
                    52:06:cf:1d:87:3d:f6:d9:23:3f:ae:1f:89:8e:89:
                    64:fb:cd:a6:ec:35:00:0a:88:0a:78:a8:bc:61:f3:
                    7f:43:0d:81:e7:a0:8c:c2:0d:6d:53:db:32:56:60:
                    5e:ab:c1:22:c9:20:15:95:9c:49:d6:f6:64:36:90:
                    e0:3b:94:03:4d:21:f3:a4:75:5f:39:36:98:8c:43:
                    01:70:d3:22:38:3f:51:f6:de:64:6f:14:62:5b:8e:
                    bf:6a:c5:e3:f1:a6:5a:2c:0f:6e:d1:b3:59:62:74:
                    37:1d:de:4b:33:12:7e:29:dd:58:9e:9e:fd:82:92:
                    da:11:76:73:29:72:24:c6:7a:77:50:8e:8f:f6:22:
                    4b:c4:b8:5e:b7:39:22:9d:c9:64:de:92:96:c4:b5:
                    e8:dd:42:a7:24:d6:96:9b:90:66:30:16:9c:24:e5:
                    9d:51:67:df:0a:30:5a:5a:44:0a:51:24:41:0f:a8:
                    e7:c3:04:d2:ff:ed:78:27:15:ad:68:47:92:7a:d6:
                    c6:89:da:40:b1:bc:27:fc:df:25:04:c6:3a:55:09:
                    e1:68:d8:2c:b6:d8:be:d3:4e:34:da:2b:88:c0:3c:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AF:B9:17:15:2D:52:D2:3C:06:A1:C6:F7:DE:A5:F9:CE:4B:A8:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dac1f0fb-40de-3e1c-910c-f62c58817f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:00:2f:26:ba:94:5f:67:5c:f0:6a:aa:29:6b:07:5f:bb:
         c0:21:d7:71:b6:86:99:a2:8f:b4:2c:be:61:f7:14:6a:4d:b4:
         98:f8:f1:2e:2e:a1:75:a1:e9:31:34:7c:11:c9:0b:ce:2b:dd:
         21:45:09:f6:41:94:ca:0a:f6:fb:9b:68:35:9b:7e:3e:1e:5c:
         fe:90:78:eb:fe:2a:72:59:f8:2d:28:03:b5:7b:08:f0:ef:2d:
         8f:38:b8:7c:b8:c2:5b:72:15:ec:49:dd:7d:b3:e2:e6:21:9b:
         af:67:5e:fc:2b:40:27:70:30:c7:b8:8b:4c:ab:c7:f8:4a:8f:
         0c:25:1b:97:61:7b:aa:f8:de:19:01:19:d3:4c:8a:3f:72:05:
         ae:ad:e0:e7:c1:a7:6f:14:53:fd:e6:b8:06:0b:81:0a:3d:40:
         9a:7d:0e:85:e0:67:06:b0:a6:5c:c3:32:4a:e5:8c:14:4d:43:
         4a:a5:55:ca:ec:63:68:34:e7:88:15:f8:f4:ba:77:29:0b:28:
         44:55:e8:29:e2:00:bb:a4:e9:dd:01:e1:ad:a5:1e:1d:64:d7:
         a8:99:c7:d8:12:38:6a:5f:82:e4:6a:b4:fc:3f:6c:0f:3a:1f:
         34:80:93:d2:b9:d0:8c:09:c7:3b:83:68:14:6c:fe:ce:31:35:
         6a:c2:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:15 2026 by rpki-client