Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d660aa4-2865-3b13-ac5b-3e921b7f82eb.roa
File:                     9d660aa4-2865-3b13-ac5b-3e921b7f82eb.roa (raw, json)
Hash identifier:          8A1HvBLeKa3BwmSelFXNCGCaAw4dBy1841geprM6OKM=
Subject key identifier:   9A:7E:42:3D:DF:3B:49:37:E4:FF:19:82:5E:AC:75:78:37:58:9B:2A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D8695770474D1C2897E8F4700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d660aa4-2865-3b13-ac5b-3e921b7f82eb.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     397215
IP address blocks:        2610:a1:3300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:77:04:74:d1:c2:89:7e:8f:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=d69ce546-26ff-4782-9c9b-0640be7e87b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:86:18:60:69:ca:c8:07:d5:e4:c3:0f:b5:
                    f5:e4:2f:e0:e8:d7:ac:15:c1:74:e2:2c:ba:ab:39:
                    a4:17:3d:98:ca:0c:aa:fd:dc:18:cb:03:ea:9b:18:
                    38:ed:0b:a3:67:9a:dc:a4:cb:ae:fe:31:92:50:a1:
                    d4:ba:45:02:28:59:41:3c:21:33:58:15:dc:23:f8:
                    13:af:73:c2:ac:eb:4b:f5:e7:a6:0f:0c:86:cb:47:
                    ad:c3:b9:8f:ac:b9:0a:0c:3e:99:23:29:af:52:ab:
                    97:f3:1a:54:72:2a:59:f7:63:15:de:c6:ef:5f:1e:
                    b1:2b:5d:d3:85:5c:de:98:e4:8e:3c:ee:db:d3:ec:
                    a0:4c:c0:bd:f3:cd:ba:c5:ef:69:bc:c2:c4:b1:18:
                    f6:a1:df:cb:d6:34:71:8c:03:3f:f8:e5:ac:8c:ed:
                    3f:a2:1d:03:83:8a:f9:2c:4e:ff:3d:0f:52:51:02:
                    88:25:85:a4:42:b2:b1:e6:1e:c1:9a:f3:95:23:30:
                    e6:01:cd:ae:30:7c:44:30:bd:7f:d2:00:9e:83:e0:
                    9c:5d:15:2d:a6:6c:94:cd:30:8c:89:e0:6e:53:1f:
                    b9:10:c8:c9:29:e4:9f:2e:65:e1:25:43:f2:ea:5d:
                    6f:ad:05:ba:68:1b:b5:22:39:13:2d:75:0c:17:98:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7E:42:3D:DF:3B:49:37:E4:FF:19:82:5E:AC:75:78:37:58:9B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/9d660aa4-2865-3b13-ac5b-3e921b7f82eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:03:21:1e:3a:df:28:9b:2a:fd:47:bc:a0:49:71:b1:5e:
         1b:f6:50:f8:13:70:0a:57:82:c7:73:64:b0:bc:fa:91:63:fc:
         80:8b:85:bf:9e:37:fa:fb:70:48:02:52:9f:2a:05:db:cb:34:
         b9:f7:7f:1b:d5:c0:89:1b:23:2a:1c:97:98:f2:04:a3:9f:2d:
         ab:3d:76:7c:62:2d:71:88:09:60:57:56:92:9f:1f:53:ee:db:
         a1:18:49:b8:4e:e0:ea:c7:62:aa:21:6f:68:95:10:0f:34:95:
         b4:b9:7e:6a:8c:29:ad:ff:39:bc:08:0f:5c:ca:aa:71:30:23:
         4c:5d:93:b8:5f:c0:31:4f:d9:32:71:44:dc:6c:aa:9b:3b:73:
         3b:73:0b:bf:d6:6b:10:9f:af:eb:37:ff:76:5e:f8:6c:82:c5:
         b2:4f:98:d4:84:de:95:88:41:44:4c:42:1b:89:27:9c:c4:17:
         a0:ad:ca:2b:3e:21:2a:a0:f5:04:81:40:53:be:3a:ae:6f:e8:
         1c:23:b0:85:42:03:be:c4:6d:a8:a9:93:54:83:4d:56:28:3c:
         3a:94:dc:62:d0:91:b9:6f:fd:5a:a9:ad:25:73:db:f1:e3:18:
         ef:90:ee:f3:87:98:f6:54:cc:6e:ff:4f:c1:4d:33:7c:a9:01:
         86:85:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:41:45 2026 by rpki-client