Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a29e3157-cf6a-3ed6-a248-11880545bcb8.roa
File:                     a29e3157-cf6a-3ed6-a248-11880545bcb8.roa (raw, json)
Hash identifier:          tp7q81P/lns2klNcNm2lWJ47QQlRpGBejTz3mOavjmw=
Subject key identifier:   2E:F1:3F:85:E8:78:86:49:08:B7:C7:24:44:28:0E:2F:FE:2E:D5:88
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584F093D09213DA68D9987A3B760
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a29e3157-cf6a-3ed6-a248-11880545bcb8.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     399168
IP address blocks:        2610:a1:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:09:21:3d:a6:8d:99:87:a3:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=a9cadc81-f86a-4828-9d13-5d429bca3edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0d:40:e9:2e:17:6c:08:48:99:7b:bd:d7:b8:
                    32:f0:cc:0b:9e:40:4f:d6:2f:53:5f:45:de:3b:e9:
                    bb:d6:d8:9f:dc:0a:0a:85:e9:8c:e1:db:1b:22:fd:
                    ba:64:f5:0b:38:5f:db:26:b1:66:fe:f8:f9:59:71:
                    fd:cc:cf:8d:83:17:bd:9b:90:d7:76:8f:3b:09:b3:
                    e3:61:dc:6f:74:04:14:3c:28:dc:5b:aa:a9:9a:81:
                    14:6e:1a:6f:12:7c:49:12:2f:f9:34:1f:ab:80:18:
                    95:0b:03:4a:d8:56:5a:a8:3b:1b:af:e3:25:4a:70:
                    d7:6a:1f:5b:68:2a:7a:2b:4a:2f:bd:a0:60:d5:94:
                    58:64:01:78:34:35:8b:d1:2c:e1:ef:d7:05:42:05:
                    19:f0:95:af:fe:de:d5:a1:a8:65:c0:7d:d6:b0:b7:
                    cb:92:e4:69:91:46:ff:65:06:86:e7:75:6c:61:d6:
                    fc:bc:b9:df:3e:6c:9d:72:22:4c:51:28:08:f2:6a:
                    74:7b:4c:41:de:b8:e2:b7:d3:b8:0e:ae:0d:d3:23:
                    57:73:8c:a2:45:05:dc:e6:e2:83:06:e4:3b:6f:d4:
                    07:39:c5:d4:83:95:18:c2:4c:5c:aa:c8:f5:1a:48:
                    1c:77:f2:64:fb:8f:60:b9:7e:63:bf:46:78:c0:84:
                    b5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F1:3F:85:E8:78:86:49:08:B7:C7:24:44:28:0E:2F:FE:2E:D5:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a29e3157-cf6a-3ed6-a248-11880545bcb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:0c:3c:23:c4:d3:de:8f:38:fa:68:b4:f7:16:83:94:74:
         56:98:d7:df:ef:8e:50:98:66:50:99:8a:12:b8:e5:73:39:11:
         fd:6d:2c:1d:d4:fc:19:06:3c:04:9b:48:78:6b:a4:8b:1d:be:
         e7:e7:b5:db:19:42:13:2f:45:2d:28:5c:20:1e:08:aa:3a:34:
         70:a0:80:a6:14:9c:86:86:9d:6c:3a:32:0a:e4:8f:0c:f1:68:
         d4:5c:93:57:6b:52:49:e5:65:cf:3c:86:31:54:92:bc:ac:d4:
         e7:ed:18:eb:29:c4:db:91:e1:84:76:db:af:90:d9:57:a0:54:
         07:7e:ce:bb:eb:f4:63:2e:d4:7d:cb:08:31:4a:d0:fe:8b:c4:
         fa:d4:73:a8:3c:a6:04:f0:8a:06:f9:8e:ab:b2:78:53:de:98:
         0f:47:35:e9:00:22:df:5d:ad:2a:75:69:b4:e3:5d:a8:68:ec:
         92:12:e5:a4:e4:f0:40:3e:e7:46:63:a8:cc:5f:1d:29:97:8d:
         69:87:1e:72:93:e2:89:dc:f3:79:69:b8:0d:96:f3:1e:f2:d0:
         1e:1a:6a:4c:c8:0a:ae:e5:e9:f7:c0:8f:c7:e0:34:69:ec:3c:
         43:57:70:95:1f:02:48:de:fa:8e:ae:c7:0c:52:b1:7b:de:ab:
         74:71:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:47:59 2026 by rpki-client