Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a9d57c-ad71-32fb-b9f5-e89aed5545c0.roa
File:                     b4a9d57c-ad71-32fb-b9f5-e89aed5545c0.roa (raw, json)
Hash identifier:          5oZ7lwaUNyrsXV8qG74dYnCMnaAvvthF15Rc1p/7yns=
Subject key identifier:   42:91:57:D7:D7:93:D4:71:FE:0C:14:57:E0:35:F3:A3:58:8E:82:9C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D74700A9F791CFB53FC98EB00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a9d57c-ad71-32fb-b9f5-e89aed5545c0.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397234
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:0a:9f:79:1c:fb:53:fc:98:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=14aade27-09c3-4efb-8c71-dd56b7be6a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f1:94:0b:ee:95:9e:4c:e2:50:a0:c4:ce:f6:
                    91:3b:a4:05:ab:82:ac:3f:48:80:e4:39:4d:01:69:
                    f0:a9:69:d3:37:61:bc:39:ac:69:93:a1:73:79:f6:
                    dd:86:a2:a7:cf:b1:07:08:06:a3:af:67:38:5b:b0:
                    5a:4c:a2:70:a5:9e:ab:68:9c:83:83:19:c8:3c:35:
                    79:79:81:fb:97:7f:46:af:0b:d9:8c:99:88:4c:95:
                    39:07:b8:28:2e:ec:4a:17:e2:ec:19:66:ef:c1:78:
                    ad:e8:f1:24:32:cc:fe:c3:dc:67:b4:0e:60:de:75:
                    e6:b1:c1:bd:5e:5e:96:d1:8d:87:82:c9:e8:db:7d:
                    12:e8:76:f8:61:6d:24:01:e4:0f:8b:ed:6a:3a:e2:
                    7f:5d:f3:73:66:a2:41:a1:26:47:9a:33:6f:e4:7d:
                    4e:b4:ce:a5:fb:2a:3b:e7:b2:62:24:3d:20:ae:d2:
                    9b:74:8b:25:59:ce:33:0a:c7:29:80:82:1e:18:dd:
                    12:ea:bf:84:c8:23:b8:48:3b:b0:d6:e8:a6:77:dc:
                    ad:99:b5:ba:69:c9:32:12:4a:a3:a4:f4:d2:b2:6c:
                    c0:15:2e:74:83:df:2f:8a:e4:79:7a:ed:fc:31:82:
                    9b:50:84:b1:e0:b3:52:d3:e7:88:55:ed:3b:4c:5b:
                    7e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:91:57:D7:D7:93:D4:71:FE:0C:14:57:E0:35:F3:A3:58:8E:82:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b4a9d57c-ad71-32fb-b9f5-e89aed5545c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:13:0f:ac:6b:21:eb:38:98:aa:e9:42:1e:f8:32:ef:4a:4e:
         5a:6a:1c:a9:a8:44:b2:62:74:4e:b4:bb:8c:58:9c:51:f4:ed:
         db:f2:19:7e:b5:4d:04:23:89:4c:8e:05:d6:33:ff:88:83:e2:
         ac:e1:de:6c:2f:05:5b:b0:87:d0:f9:01:a9:f0:55:d5:80:79:
         0b:75:f8:9d:0c:fb:2e:47:1e:45:ba:80:ff:86:af:2c:67:be:
         a1:67:08:4d:71:c7:d6:de:4c:0f:a1:e4:7c:6c:59:33:1b:62:
         d9:89:52:f1:6e:01:74:2f:26:9e:a7:43:8e:ce:af:db:0a:2e:
         22:e3:f9:10:b2:b4:27:c0:7a:93:23:d3:af:85:46:97:47:8e:
         81:30:64:df:98:0e:16:50:c9:cd:0c:7c:42:3b:f0:4d:f7:6a:
         ef:b4:ae:ee:90:8a:50:a3:64:60:af:0d:9f:d5:ad:42:f4:e8:
         cf:72:e7:a4:da:4c:7e:0a:01:57:ba:3f:08:6a:c8:79:6b:e6:
         31:84:81:82:d7:f0:64:35:c9:39:05:9b:1a:6d:ed:23:ad:0a:
         49:af:26:ed:44:99:5d:44:58:69:f0:e3:0c:60:41:c5:91:72:
         87:3a:8d:8f:70:e0:16:39:3b:04:34:2a:0b:36:5b:55:a5:31:
         ae:a3:c2:ac
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE10cAqfeRz7U/yY6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
MTRhYWRlMjctMDljMy00ZWZiLThjNzEtZGQ1NmI3YmU2YTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPGUC+6VnkziUKDEzvaRO6QFq4KsP0iA5DlN
AWnwqWnTN2G8Oaxpk6FzefbdhqKnz7EHCAajr2c4W7BaTKJwpZ6raJyDgxnIPDV5
eYH7l39GrwvZjJmITJU5B7goLuxKF+LsGWbvwXit6PEkMsz+w9xntA5g3nXmscG9
Xl6W0Y2Hgsno230S6Hb4YW0kAeQPi+1qOuJ/XfNzZqJBoSZHmjNv5H1OtM6l+yo7
57JiJD0grtKbdIslWc4zCscpgIIeGN0S6r+EyCO4SDuw1uimd9ytmbW6ackyEkqj
pPTSsmzAFS50g98viuR5eu38MYKbUISx4LNS0+eIVe07TFt+gwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEKRV9fXk9Rx/gwUV+A186NYjoKcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjRhOWQ1N2MtYWQ3MS0z
MmZiLWI5ZjUtZTg5YWVkNTU0NWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoTAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhxMPrGsh6ziYqulCHvgy70pOWmocqahEsmJ0TrS7jFicUfTt2/IZ
frVNBCOJTI4F1jP/iIPirOHebC8FW7CH0PkBqfBV1YB5C3X4nQz7LkceRbqA/4av
LGe+oWcITXHH1t5MD6HkfGxZMxti2YlS8W4BdC8mnqdDjs6v2wouIuP5ELK0J8B6
kyPTr4VGl0eOgTBk35gOFlDJzQx8QjvwTfdq77Su7pCKUKNkYK8Nn9WtQvToz3Ln
pNpMfgoBV7o/CGrIeWvmMYSBgtfwZDXJOQWbGm3tI60KSa8m7USZXURYafDjDGBB
xZFyhzqNj3DgFjk7BDQqCzZbVaUxrqPCrA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:58:25 2026 by rpki-client