Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5227326-074c-325c-89cb-75d3b5e89b52.roa
File:                     a5227326-074c-325c-89cb-75d3b5e89b52.roa (raw, json)
Hash identifier:          Y/rhH019X7AKnUw0sUe0+QLeZH+hrXCTPoAahiAraBk=
Subject key identifier:   80:C1:BC:07:3E:3D:EB:DB:67:3C:6F:AB:61:73:FF:25:70:45:0E:86
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584FAB28C55262C499CDB8EC9600
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5227326-074c-325c-89cb-75d3b5e89b52.roa
Signing time:             Fri 30 Oct 2026 01:00:13 +0000
ROA not before:           Fri 30 Oct 2026 01:00:13 +0000
ROA not after:            Thu 28 Jan 2027 02:00:13 +0000
asID:                     399168
IP address blocks:        2610:a1:3100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ab:28:c5:52:62:c4:99:cd:b8:ec:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 30 01:00:13 2026 GMT
            Not After : Jan 28 02:00:13 2027 GMT
        Subject: CN=80db1e3f-0312-442c-966d-d0a3af232a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:4d:6b:b3:90:2e:17:6c:6e:51:40:bc:12:
                    cd:bb:6f:f8:9c:13:99:51:06:0c:c6:11:46:93:11:
                    cc:15:54:fa:40:69:9c:c6:60:3a:57:55:93:a0:1a:
                    07:b4:69:80:64:be:85:09:11:99:a3:53:65:61:3f:
                    90:b3:4a:32:7e:4d:5f:22:b9:43:e6:ee:3c:f2:65:
                    3f:41:30:3b:9a:8e:b8:ca:76:ca:32:87:8d:79:f7:
                    61:67:b7:d7:58:48:50:58:b3:bb:55:3b:ff:51:5f:
                    a2:e5:3e:e5:f6:df:99:fd:54:04:72:24:a1:f9:f7:
                    f8:9c:20:a4:78:d1:53:5c:7c:f6:c3:00:00:f1:ee:
                    1f:b2:01:25:c5:d4:ed:78:ee:a2:f8:a8:48:87:2b:
                    4f:74:ff:db:27:b8:69:a1:64:cc:39:91:18:83:f0:
                    2d:ac:f0:31:22:df:5a:d6:a1:4f:2d:f3:b5:ef:54:
                    37:8a:67:9d:1c:35:6e:30:e9:56:47:a5:c2:47:48:
                    76:bb:cb:10:97:07:83:93:1d:5a:c0:38:11:a1:c7:
                    3b:ad:ff:ea:4b:d4:88:47:30:0d:52:36:2e:4a:a9:
                    ce:69:dc:1d:7d:94:f3:d3:41:35:cf:56:dc:8d:7f:
                    58:bb:aa:ab:ad:62:b1:71:ca:58:10:86:a8:dd:e9:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C1:BC:07:3E:3D:EB:DB:67:3C:6F:AB:61:73:FF:25:70:45:0E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a5227326-074c-325c-89cb-75d3b5e89b52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:a0:66:98:89:61:24:a5:da:10:9e:cd:6c:00:75:29:35:
         a7:68:0e:55:ae:33:b1:44:1f:92:7d:d6:2d:b5:de:d8:1a:e5:
         0a:01:f0:33:f9:62:4c:bc:f5:3d:8c:4e:a2:b3:e2:cf:20:d2:
         29:e3:f2:86:a5:67:96:58:3d:6f:ce:18:da:37:b0:6c:41:4a:
         45:e2:a9:c5:83:4d:68:2b:71:ec:45:f1:82:30:5c:e1:88:fd:
         03:80:ff:68:15:09:3e:77:a6:4e:b1:bd:28:b5:a5:83:83:2a:
         0f:65:44:d0:c4:10:8e:94:8e:83:be:01:e5:f1:28:9e:ef:e3:
         fe:c6:6e:54:ce:25:31:8c:54:3c:dc:62:f0:eb:46:c3:c8:e6:
         07:f6:4b:60:e3:ee:16:84:a8:b4:d7:b6:8c:d3:56:c3:41:71:
         d7:5d:9e:3e:48:cb:cf:01:54:4d:50:58:8a:17:82:f1:5d:57:
         64:ab:56:58:66:20:f0:9b:35:ae:38:34:22:89:81:ce:6e:55:
         dc:19:86:12:41:95:87:6d:e5:3b:8f:71:08:f3:03:3c:bc:67:
         ab:f0:69:25:9b:a2:39:71:bf:4e:fd:ea:3f:37:53:9b:66:a3:
         cf:57:c7:be:bf:e6:60:4b:60:15:db:0d:58:e5:1c:ef:81:70:
         11:93:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:39:38 2026 by rpki-client