Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa
File:                     c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa (raw, json)
Hash identifier:          cwCmDsITWXQ+hiodHsmbgKjep2cHkLVURgcm7aLeAK0=
Subject key identifier:   9F:5C:05:42:19:80:BC:C5:50:B7:A9:21:5B:A4:3D:2A:41:85:FA:A2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584EF717A5C578FBBDC3974EB480
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     397213
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:a5:c5:78:fb:bd:c3:97:4e:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=7d64a2e5-1edb-4aae-ad3f-c8bbc1b50325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:92:c8:51:69:0e:de:d1:7a:d3:c2:36:19:
                    08:68:b0:e3:b6:b0:2c:ce:42:a5:34:bf:ed:c9:cd:
                    3e:bb:55:bd:70:58:c4:b6:62:c2:f4:27:af:c1:50:
                    77:15:76:1e:b3:7c:e5:28:3b:d4:6a:90:79:5b:af:
                    a9:f8:ec:f9:c9:e2:f3:19:e8:6c:34:bc:fb:00:0d:
                    45:44:13:7e:ef:05:e5:e5:c2:68:a1:17:39:65:89:
                    93:29:84:20:bb:5a:8d:c6:b3:b7:c6:53:9f:68:c5:
                    30:ef:68:ed:0a:ac:75:53:fc:1c:de:ca:0f:4d:06:
                    2c:19:54:b4:3b:3d:80:af:2e:49:c2:f2:60:d2:a5:
                    01:c4:7f:87:39:9e:48:65:54:9a:27:51:4e:52:12:
                    84:dc:3b:8d:cb:35:82:90:a6:25:3b:27:2d:8c:15:
                    c6:6c:54:31:fc:4d:63:1c:20:af:f8:31:b9:8e:15:
                    31:0f:4b:de:51:a9:e2:b9:1c:53:ab:a4:71:4d:ee:
                    c7:83:c9:7c:59:09:99:6a:74:14:50:6d:16:d4:ed:
                    17:94:e8:8a:c1:5f:a4:dc:99:be:25:bb:04:40:6e:
                    1c:b6:90:b2:a8:51:1a:cd:a2:ee:2b:48:0d:1d:2d:
                    ba:30:74:4d:34:54:04:87:8c:d6:f7:4c:31:df:ed:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5C:05:42:19:80:BC:C5:50:B7:A9:21:5B:A4:3D:2A:41:85:FA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:a7:d6:e5:01:9c:a7:7f:91:7e:0b:dc:c1:0b:21:86:6d:
         3a:d6:3e:e5:c6:e9:3a:fe:3a:e2:60:97:d7:9b:51:ae:cc:c4:
         dd:ad:3e:46:5d:ad:07:df:52:20:b2:20:32:91:c4:f5:f7:7d:
         09:07:2e:5b:c6:1f:6a:ea:b3:aa:61:0f:6c:ee:67:be:fc:ec:
         11:ab:ab:4a:ff:30:3c:b4:84:ab:63:5c:66:75:60:4d:2f:aa:
         7d:a9:b1:b7:e4:f2:9b:5a:fb:57:8f:ae:00:e6:b9:a4:18:65:
         35:68:24:33:b5:00:61:05:d9:8f:49:76:fc:08:5e:3d:3a:93:
         b8:fc:2c:5e:d8:2d:53:37:34:1c:12:e5:c7:24:3c:c6:c7:9e:
         ee:21:5c:9f:f0:26:31:31:3c:b5:e1:35:d0:13:43:f7:f6:46:
         0d:af:f9:5f:26:91:f9:4e:d6:0a:65:01:62:e0:2b:c2:8d:60:
         76:43:b1:28:70:f2:f7:98:1d:6b:c9:c4:61:f2:9e:a2:f5:17:
         86:9f:ba:f2:50:ab:96:43:5a:9a:e8:5b:99:bb:af:83:78:13:
         75:3e:ee:31:1b:b8:f8:77:ce:66:e1:ce:52:e3:fe:04:41:1a:
         24:6d:42:7d:0e:e1:f2:dd:ba:3a:a0:02:28:0d:3c:46:ec:20:
         0d:67:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:55:39 2026 by rpki-client