Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ed8e2ef-106a-321a-839c-d87f3015a5ba.roa
File:                     1ed8e2ef-106a-321a-839c-d87f3015a5ba.roa (raw, json)
Hash identifier:          pRaghIYQGM1y7agRIDuqMUiZshZcNv5CBww9/j9Ej0A=
Subject key identifier:   BF:EB:85:55:88:0D:CA:16:33:CB:92:6F:0C:8B:16:D6:9B:AF:C6:EF
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D869577DBA5CBD45ECAA8F2C0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ed8e2ef-106a-321a-839c-d87f3015a5ba.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     397233
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:77:db:a5:cb:d4:5e:ca:a8:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=70a40254-68bf-49b2-bcbf-643189db8c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:05:86:5f:b2:d2:04:8a:3d:f3:02:7d:6a:
                    5c:14:c6:44:b2:dc:02:24:50:3e:d0:a0:a2:39:05:
                    fa:8a:24:e6:f6:6b:5f:fc:bd:5d:b7:98:fc:b9:ef:
                    f1:b8:de:8a:2d:d9:00:04:ed:bb:08:fd:24:b1:cf:
                    75:87:5d:a8:41:f8:5f:34:79:6a:c7:fb:1e:8e:61:
                    c0:19:00:84:1b:91:a2:3a:7d:a9:4b:0b:01:e2:f2:
                    38:cc:e9:0c:59:70:e6:38:37:6e:81:c9:a7:72:2a:
                    9b:15:74:00:9f:c8:6e:13:c1:66:79:90:50:18:60:
                    db:b8:fe:43:8b:9e:5b:fa:ab:1d:bd:38:af:bf:3c:
                    5a:38:71:f9:3f:2b:16:56:b5:72:13:5b:a2:52:db:
                    c4:23:b1:e3:63:5f:70:48:6c:07:d7:8a:a1:aa:e9:
                    53:79:8f:06:09:b2:46:c5:7f:fa:4e:d5:50:32:a2:
                    7b:40:63:dc:a3:08:7b:b7:7a:d1:2d:14:bc:a3:51:
                    1f:52:7f:b7:16:61:8d:f3:d8:42:de:5a:52:be:15:
                    1a:e4:07:a2:2c:10:29:3e:f5:f8:2a:11:7e:3e:63:
                    ec:3c:9b:8c:e8:85:9a:d0:ed:a6:70:d1:58:4a:17:
                    03:24:28:9f:55:bb:38:53:97:24:ca:cb:32:1a:9a:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EB:85:55:88:0D:CA:16:33:CB:92:6F:0C:8B:16:D6:9B:AF:C6:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1ed8e2ef-106a-321a-839c-d87f3015a5ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:de:30:db:1f:ce:e6:4b:00:f6:5d:ff:e6:c4:65:64:fa:
         84:42:c2:0f:e9:ae:d1:3b:cc:6a:74:5e:e2:8e:cd:3e:37:15:
         12:ee:26:01:96:c4:2a:38:d5:68:40:30:1b:b6:bd:e8:27:e7:
         ad:31:4c:79:af:9e:db:ac:c7:f0:45:6c:9d:1e:81:c0:4b:a8:
         a2:cf:cd:ac:a7:0b:de:46:95:72:06:59:00:22:1b:ba:7d:3a:
         56:37:53:07:68:8f:17:c5:c2:40:f4:61:d0:63:17:3f:25:50:
         51:80:5d:73:d6:9b:e3:e1:46:09:cf:e2:93:da:54:2c:cc:e9:
         f1:e7:73:21:a1:7e:6e:c0:25:04:60:de:6e:39:36:53:ba:8a:
         8f:db:de:b5:eb:51:97:84:44:7e:47:de:40:21:8f:13:67:26:
         ca:c1:1d:39:6e:5e:54:6b:dd:ec:3a:a6:79:46:c9:fe:9b:03:
         75:c9:81:6e:d4:fb:d1:6e:d2:f4:ed:00:14:44:64:f9:f7:2e:
         02:24:c8:55:90:c1:20:97:a0:3b:0a:07:95:75:10:8b:5b:57:
         98:0e:e8:6b:2e:5c:98:b4:17:78:2e:b5:cf:51:ec:0a:72:b2:
         7e:86:13:27:93:90:c2:d8:e4:52:b2:70:80:92:61:68:8b:eb:
         01:33:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:17 2026 by rpki-client