Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa
File:                     65dce463-d48b-35e6-bea0-bc2b720eb569.roa (raw, json)
Hash identifier:          7sM7vO+0gWwvQ8ZcqfehcjY9EzxcXlSvz4EsIRkYtEg=
Subject key identifier:   F8:39:38:4A:9B:07:76:CD:08:35:3D:1F:6D:69:6B:DB:65:6B:EB:0D
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D8695783033E3B71E308AE5B0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     397240
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:78:30:33:e3:b7:1e:30:8a:e5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=982cb8f1-fc1f-4699-ad9b-c9b27d8549fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:4b:34:24:2b:27:b5:23:62:d8:68:ad:74:
                    ab:ce:d2:5a:18:8a:e0:cb:67:67:73:75:be:c6:90:
                    52:29:a7:ee:06:31:45:f1:b5:41:06:eb:0c:da:b0:
                    dc:85:9c:97:20:eb:f4:9d:43:ee:83:59:5d:47:51:
                    85:62:8c:58:2e:fe:d9:bb:d2:a9:b7:09:40:a9:08:
                    b3:99:a0:d5:71:49:d6:f0:cf:3b:f3:15:d9:9c:9d:
                    07:59:53:12:43:bf:89:92:23:3d:08:6b:74:64:61:
                    18:5a:87:a3:80:e7:48:6e:54:ba:cd:56:98:23:4f:
                    22:dd:9e:7f:f4:cf:dc:2e:6d:d2:2f:71:d5:2d:3c:
                    33:0c:69:a9:02:43:fb:5c:ea:1e:63:86:c9:94:41:
                    22:9e:02:4f:4b:0f:0c:d6:52:dc:7e:6a:62:50:f2:
                    7a:ac:5e:8e:a1:22:d6:3c:b8:c3:11:06:be:96:36:
                    f1:9f:88:ef:89:9c:34:db:8e:27:f9:01:29:58:04:
                    51:a2:bc:9e:aa:91:31:53:39:cb:9a:e1:4e:9f:2c:
                    78:bc:70:0e:f1:71:70:9c:7f:93:eb:5d:09:51:dc:
                    6b:b3:32:d3:b6:3e:9e:4b:bd:07:99:fe:a5:20:5e:
                    bd:1b:04:e2:65:d3:0f:85:c7:24:04:0e:40:61:1a:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:38:4A:9B:07:76:CD:08:35:3D:1F:6D:69:6B:DB:65:6B:EB:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/65dce463-d48b-35e6-bea0-bc2b720eb569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:f1:a5:cd:a9:4f:96:38:d5:4b:8b:08:b5:29:0d:38:e9:
         8a:79:2b:ba:17:0b:47:1c:41:ef:75:29:6f:5a:d8:73:3d:75:
         ec:31:61:5d:dd:2f:8e:e6:eb:97:3b:95:66:c3:98:96:b7:00:
         b0:cd:e3:49:a3:4d:2e:20:4f:19:17:6a:f4:8d:e9:5a:99:4f:
         2c:91:eb:48:5e:80:10:4f:d9:86:67:56:d3:0f:4a:ad:12:ce:
         01:b8:4d:74:47:53:03:dc:df:24:2e:04:ed:ca:e3:7a:7a:2d:
         70:a5:7a:57:d1:f4:71:92:93:0e:d2:72:1c:7c:f0:74:78:18:
         b9:ed:e8:4a:e8:db:a6:ae:f9:40:f3:88:5b:88:78:74:d3:4c:
         85:ef:c0:51:91:93:75:d9:97:b7:ee:cd:a5:12:2c:b4:8e:4c:
         9e:c4:75:25:43:74:e8:fa:88:35:e6:9c:d5:8a:44:0c:17:f3:
         02:66:1e:99:bf:5b:06:6f:63:31:55:60:b6:36:d6:67:d3:a2:
         18:4f:23:36:09:c3:02:89:e4:29:b2:d2:e4:14:11:73:f4:1e:
         e4:0e:72:6d:f6:f5:e2:b3:ac:af:a7:81:51:b7:fa:73:ae:93:
         91:21:fd:0e:57:63:a4:00:bb:ba:80:aa:06:3b:16:78:f2:53:
         fb:87:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:43 2026 by rpki-client