Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a47fba6d-6e08-3614-bb57-a07cb41f6f34.roa
File:                     a47fba6d-6e08-3614-bb57-a07cb41f6f34.roa (raw, json)
Hash identifier:          p6vHpkz6CpK7di4OgdtOaRwjCthyqSczxWkYqCwoLzQ=
Subject key identifier:   F2:A7:BB:4A:AD:21:8E:6C:D0:17:3B:7A:B4:28:86:D2:15:C9:FB:7A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D869574FDA14D96D3FABE5DA0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a47fba6d-6e08-3614-bb57-a07cb41f6f34.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     399154
IP address blocks:        2610:a1:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:74:fd:a1:4d:96:d3:fa:be:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=ead03269-d6df-4484-873b-7f39122a9c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:76:d5:57:ec:12:11:4d:77:8a:82:ee:98:
                    1e:b1:9a:a8:2b:af:88:48:fd:f9:d9:4a:e0:85:b1:
                    0c:77:d1:2b:75:4f:74:63:16:dc:b3:02:dd:1f:c3:
                    0f:c8:9d:dd:a3:d0:33:89:5a:4c:34:d0:86:a4:51:
                    70:0f:4f:ab:82:d2:08:32:f8:9a:f1:61:98:94:81:
                    d1:36:5d:80:bf:f5:ed:e7:6f:52:11:40:a6:91:10:
                    5f:38:b4:52:76:6e:0f:25:1d:4d:ea:76:4f:04:6f:
                    8e:d3:8a:7b:98:6c:24:26:4b:2f:22:77:8c:98:c9:
                    5d:f5:b8:a3:6e:8a:22:67:6b:b3:24:87:89:9b:eb:
                    52:5b:0c:24:b7:65:58:a7:d9:a2:ff:ef:02:1e:20:
                    4f:9c:50:8f:19:a2:ab:37:96:34:cd:60:5a:6f:b9:
                    55:0e:df:b2:22:be:58:49:30:1d:7f:72:9e:9a:b9:
                    49:3f:42:67:0e:2c:a5:cb:0b:98:01:d8:51:1b:cd:
                    60:97:73:64:c5:c0:6d:03:e8:0b:7e:47:33:6d:74:
                    e4:b4:4e:47:c9:c9:62:e3:ac:af:44:a1:fc:91:3f:
                    2b:37:39:78:95:ee:b9:08:e8:00:a2:bf:b3:d4:94:
                    3f:9a:a7:59:f5:ca:6c:a8:fe:3c:22:af:a4:29:f8:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A7:BB:4A:AD:21:8E:6C:D0:17:3B:7A:B4:28:86:D2:15:C9:FB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a47fba6d-6e08-3614-bb57-a07cb41f6f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:9d:82:8b:0b:cb:90:bb:66:ed:34:f3:bf:c5:d7:02:d8:
         36:0d:9b:cd:ec:13:75:07:9b:f2:5c:d0:f0:67:27:4e:51:8f:
         53:f9:4d:4c:89:28:08:ce:61:65:9b:ca:d3:7b:33:5a:69:3d:
         f9:d0:19:9c:01:3c:20:d5:be:f0:66:13:bc:78:f3:e8:13:ac:
         4a:ff:52:2a:f6:c3:b4:cb:78:8e:6d:31:a4:48:8c:46:a7:61:
         19:94:a3:fd:86:8a:07:d1:4d:28:25:fa:22:a8:ff:47:56:16:
         b5:8b:93:9a:ea:2e:f7:ae:37:5d:6d:89:87:43:39:2d:b7:6b:
         d4:42:96:f7:10:50:8e:52:fd:17:5d:8a:77:e8:d7:6b:59:e6:
         7a:1d:ad:10:5e:49:b8:dd:d4:e7:c0:15:ce:22:e0:67:e0:18:
         37:de:3c:64:71:ba:b9:5e:65:b5:31:92:05:3c:65:44:ee:bf:
         0f:67:52:98:28:54:49:15:0b:dd:92:ad:69:09:93:73:e9:df:
         95:e5:a6:9a:72:96:d6:a5:37:a2:a2:f0:96:9a:31:5c:3a:f1:
         9f:a0:02:8b:94:14:eb:23:6b:39:8a:53:dc:1e:35:3b:4f:82:
         1d:d5:c1:f6:de:f9:00:d0:4f:97:80:c8:82:70:88:82:0f:bd:
         d7:7c:5f:04
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2GlXT9oU2W0/q+XaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
ZWFkMDMyNjktZDZkZi00NDg0LTg3M2ItN2YzOTEyMmE5YzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHp21VfsEhFNd4qC7pgesZqoK6+ISP352Urg
hbEMd9ErdU90YxbcswLdH8MPyJ3do9AziVpMNNCGpFFwD0+rgtIIMvia8WGYlIHR
Nl2Av/Xt529SEUCmkRBfOLRSdm4PJR1N6nZPBG+O04p7mGwkJksvIneMmMld9bij
booiZ2uzJIeJm+tSWwwkt2VYp9mi/+8CHiBPnFCPGaKrN5Y0zWBab7lVDt+yIr5Y
STAdf3KemrlJP0JnDiylywuYAdhRG81gl3NkxcBtA+gLfkczbXTktE5Hycli46yv
RKH8kT8rNzl4le65COgAor+z1JQ/mqdZ9cpsqP48Iq+kKfieFQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPKnu0qtIY5s0Bc7erQohtIVyft6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYTQ3ZmJhNmQtNmUwOC0z
NjE0LWJiNTctYTA3Y2I0MWY2ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWiKdgosLy5C7Zu0087/F1wLYNg2bzewTdQeb8lzQ8GcnTlGPU/lN
TIkoCM5hZZvK03szWmk9+dAZnAE8INW+8GYTvHjz6BOsSv9SKvbDtMt4jm0xpEiM
RqdhGZSj/YaKB9FNKCX6Iqj/R1YWtYuTmuou9643XW2Jh0M5Lbdr1EKW9xBQjlL9
F12Kd+jXa1nmeh2tEF5JuN3U58AVziLgZ+AYN948ZHG6uV5ltTGSBTxlRO6/D2dS
mChUSRUL3ZKtaQmTc+nfleWmmnKW1qU3oqLwlpoxXDrxn6ACi5QU6yNrOYpT3B41
O0+CHdXB9t75ANBPl4DIgnCIgg+913xfBA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:49:13 2026 by rpki-client