Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa
File:                     a5851ac4-2221-385e-9e3a-3d7789702b10.roa (raw, json)
Hash identifier:          RkkU2Wmt82RQqKRt8IcbjAS40kNPdWsfevHo2oD/2mI=
Subject key identifier:   32:CD:E0:5E:A1:4F:57:81:2F:F9:7F:3F:9A:1E:8A:39:DA:F5:FA:8C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700A55BCBC92DB51771A98
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397228
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0a:55:bc:bc:92:db:51:77:1a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=dc8f5a52-7a94-4a40-9bed-997beaa513b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:17:57:47:6f:1d:3c:bd:c5:8d:25:07:67:
                    6d:21:29:75:31:56:6e:90:b9:37:64:04:ba:e3:e8:
                    a5:60:f8:73:f0:19:bf:82:58:4d:8e:f5:04:e7:17:
                    6b:ac:18:76:bd:13:09:0b:3f:e5:c3:48:e6:36:a9:
                    16:04:4f:21:9f:41:f3:55:74:c2:74:1c:0f:6f:2a:
                    c3:a1:0f:47:8d:e2:99:91:91:be:82:9d:89:34:31:
                    ae:61:28:cc:92:e8:7c:e7:d2:a0:55:bc:51:7c:03:
                    30:dd:bc:ac:ab:2e:be:77:37:3b:35:a8:28:58:f6:
                    c1:30:ff:2c:13:59:c1:66:46:76:ed:e4:5c:57:44:
                    7c:6d:c0:20:04:69:b5:b1:a3:51:cf:a6:7f:22:5a:
                    0a:b4:ff:56:cf:5a:0b:b8:3b:8d:86:28:d8:92:a2:
                    d0:9c:5c:67:8f:b0:c0:1b:d7:9d:0d:7a:c7:01:02:
                    10:ad:a9:4a:27:2b:5a:e4:5b:87:2d:5a:c7:48:15:
                    40:e6:ac:0b:fe:00:c3:42:ad:05:28:a0:1f:92:b4:
                    a5:b6:36:db:e0:d0:fe:6f:6a:ec:11:e6:d1:1b:fb:
                    a3:12:4c:87:b7:9e:2a:23:b5:f6:73:59:1a:78:20:
                    91:03:f6:e8:2e:f3:87:3a:2f:fb:11:52:b1:fc:4a:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CD:E0:5E:A1:4F:57:81:2F:F9:7F:3F:9A:1E:8A:39:DA:F5:FA:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5851ac4-2221-385e-9e3a-3d7789702b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:06:9f:13:74:54:e9:8a:f3:12:73:9a:95:7b:22:40:fe:06:
         a8:27:43:28:79:67:8d:27:6b:ac:21:41:65:5c:93:8c:a2:4a:
         78:cb:1f:9b:6c:df:5c:15:24:e6:db:50:bf:51:f4:51:1e:a4:
         1c:e8:35:89:ad:ff:5e:66:00:64:9b:92:9a:75:10:c3:f1:02:
         b6:53:68:1c:73:5a:57:ee:a4:03:d3:ae:1d:e7:4f:9f:ca:67:
         67:52:1b:64:66:87:c4:92:5e:bb:fb:39:21:14:5a:bd:ef:10:
         40:87:3e:3a:23:55:78:89:cb:37:62:9d:fe:4d:58:da:1a:7f:
         c6:28:75:ed:58:54:db:69:c2:d3:a6:7f:87:84:7a:12:70:2b:
         5e:bb:32:62:8d:78:80:d0:5f:10:d5:65:80:13:f9:cd:ef:7d:
         b5:e8:e0:4e:bc:02:84:a6:44:f1:97:d1:da:4c:7e:d5:0f:37:
         b5:a8:99:01:f4:84:12:c2:6e:12:31:04:57:d0:f1:59:b1:6c:
         71:8d:5a:f5:5b:cc:80:2e:ac:23:c7:a7:d8:12:d0:4c:c1:9e:
         2b:85:eb:fc:05:50:ee:29:ff:71:3f:cf:5e:15:ab:bc:d0:50:
         83:e3:03:ad:9e:2d:5e:0a:e3:4f:88:e9:74:51:2e:4d:ca:a8:
         fd:47:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:14:17 2026 by rpki-client