Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4375ac1a-abf7-3f0d-9acc-21e99382be14.roa
File:                     4375ac1a-abf7-3f0d-9acc-21e99382be14.roa (raw, json)
Hash identifier:          Rij3IImtI37RXpTx4UkcyPRcBPMEbtQz1I/s3b7K7vk=
Subject key identifier:   3A:D7:BB:B8:BC:4E:FA:B9:CE:4E:01:D2:A0:2A:F6:BA:65:D8:32:25
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F093D09C1B4752B7FC1776C40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4375ac1a-abf7-3f0d-9acc-21e99382be14.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397221
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:09:c1:b4:75:2b:7f:c1:77:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=a090a520-2395-47ad-8d15-5a1d0e728550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:fa:bd:5f:26:23:c5:af:8f:85:37:ef:72:
                    4b:73:16:cd:fd:0f:45:23:00:1b:40:01:59:44:0a:
                    e8:02:83:07:ca:d4:ec:9d:c2:39:c1:4e:6c:58:33:
                    27:35:be:64:75:7b:2a:a5:b7:e2:3a:a7:8d:36:6b:
                    da:b7:59:91:1f:d0:0f:50:83:e0:5c:77:7e:af:e7:
                    a0:5c:33:eb:a9:0a:9a:7b:be:e0:59:7e:48:d8:f8:
                    9d:e7:65:45:83:ee:d8:17:e3:f9:55:73:d0:36:18:
                    62:2d:0a:39:a7:53:7a:c9:a9:e9:ee:29:82:50:13:
                    a5:9f:c0:47:05:61:dc:50:6e:a4:af:92:24:54:04:
                    83:3a:9d:1f:81:ee:e6:9e:72:87:94:21:3a:09:dc:
                    2f:0a:1c:10:8e:d3:e9:d1:9d:2b:f2:38:cd:73:58:
                    c2:44:f2:9d:5b:f6:ce:eb:55:1f:4e:87:88:ed:cf:
                    3b:62:c2:2b:e6:de:c9:42:d1:df:e6:5c:fd:c6:ea:
                    00:5b:1c:1a:5b:8b:64:87:13:3f:e4:0a:34:26:93:
                    1b:e4:7d:51:29:c7:33:00:2e:8d:28:49:ec:28:34:
                    a6:ee:54:0d:6d:a1:b7:3b:53:73:90:60:e3:71:9a:
                    bc:ff:24:8e:02:5b:e2:57:ba:46:d3:ef:d8:27:62:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D7:BB:B8:BC:4E:FA:B9:CE:4E:01:D2:A0:2A:F6:BA:65:D8:32:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4375ac1a-abf7-3f0d-9acc-21e99382be14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:99:63:3a:f5:1a:13:27:dc:25:fa:be:9f:b1:0c:90:8c:
         4e:99:1b:85:e2:cd:e2:30:6f:ad:6c:ba:f8:f2:02:c6:ab:47:
         f3:0b:51:c1:f2:fd:c7:dd:f9:6b:c7:63:13:9a:65:67:38:17:
         ac:61:33:29:56:a7:a2:f7:f4:fb:a0:7c:b0:68:d4:ff:a3:fd:
         09:50:d0:cb:14:e5:42:1f:22:ee:39:da:a7:51:d6:79:87:86:
         d3:64:ff:00:92:64:8d:75:d6:28:91:7e:e5:0c:e7:82:48:42:
         21:63:73:6b:12:89:1c:58:77:ed:c0:86:70:33:f3:32:4d:94:
         18:ee:f8:a5:44:30:f9:60:6f:b2:04:b4:cf:84:4c:1b:c1:32:
         9a:3e:88:8e:52:e8:c1:63:3a:35:11:03:75:8f:b1:cc:0e:ea:
         15:3a:26:28:5e:d1:23:31:13:3e:e6:43:2e:6d:75:cb:28:bf:
         c9:ba:f9:fb:e8:d3:f9:81:9d:d8:8e:27:5d:11:e4:c1:77:24:
         b3:90:8a:04:1b:aa:86:78:9c:62:db:e3:39:92:ef:7c:4d:64:
         1f:a7:8c:22:d2:43:0e:b8:06:d1:bb:92:29:d6:3c:4d:1d:44:
         8e:53:19:f7:f4:1a:a7:37:7d:47:89:5c:d9:31:6e:65:52:cd:
         45:36:f3:5b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8JPQnBtHUrf8F3bEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
YTA5MGE1MjAtMjM5NS00N2FkLThkMTUtNWExZDBlNzI4NTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGv6vV8mI8Wvj4U373JLcxbN/Q9FIwAbQAFZ
RAroAoMHytTsncI5wU5sWDMnNb5kdXsqpbfiOqeNNmvat1mRH9APUIPgXHd+r+eg
XDPrqQqae77gWX5I2Pid52VFg+7YF+P5VXPQNhhiLQo5p1N6yanp7imCUBOln8BH
BWHcUG6kr5IkVASDOp0fge7mnnKHlCE6CdwvChwQjtPp0Z0r8jjNc1jCRPKdW/bO
61UfToeI7c87YsIr5t7JQtHf5lz9xuoAWxwaW4tkhxM/5Ao0JpMb5H1RKcczAC6N
KEnsKDSm7lQNbaG3O1NzkGDjcZq8/ySOAlviV7pG0+/YJ2LO5wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDrXu7i8Tvq5zk4B0qAq9rpl2DIlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDM3NWFjMWEtYWJmNy0z
ZjBkLTlhY2MtMjFlOTkzODJiZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAObqZYzr1GhMn3CX6vp+xDJCMTpkbheLN4jBvrWy6+PICxqtH8wtR
wfL9x935a8djE5plZzgXrGEzKVanovf0+6B8sGjU/6P9CVDQyxTlQh8i7jnap1HW
eYeG02T/AJJkjXXWKJF+5QzngkhCIWNzaxKJHFh37cCGcDPzMk2UGO74pUQw+WBv
sgS0z4RMG8Eymj6IjlLowWM6NREDdY+xzA7qFTomKF7RIzETPuZDLm11yyi/ybr5
++jT+YGd2I4nXRHkwXcks5CKBBuqhnicYtvjOZLvfE1kH6eMItJDDrgG0buSKdY8
TR1EjlMZ9/Qapzd9R4lc2TFuZVLNRTbzWw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:21:50 2026 by rpki-client