Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa
File:                     c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa (raw, json)
Hash identifier:          6m3F6325NE6XkDoZ7pYT+Vxp6zwjsPQPQgKqrKaET3g=
Subject key identifier:   5E:89:E0:BC:E3:56:C5:A4:E3:44:F0:AD:B8:60:13:F0:A3:C3:AD:CE
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D747008135C7041B075051300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397213
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:08:13:5c:70:41:b0:75:05:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=e1aab257-019d-429c-87b4-69196d53054f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:27:fc:9d:2a:32:c0:02:6a:1b:63:8f:0c:
                    f4:24:24:fe:fb:7f:d5:7c:08:f6:85:64:64:c0:1c:
                    7c:73:5e:40:aa:78:d6:61:cb:aa:ed:3c:96:e1:ba:
                    c5:1c:15:8a:6b:53:ec:a7:a0:5d:eb:5b:3f:55:39:
                    bd:52:27:09:99:20:32:dc:03:99:9e:4c:01:f9:46:
                    d4:02:77:85:49:e1:58:7d:96:14:62:d5:0d:17:58:
                    66:a1:22:88:a2:ae:76:d0:52:b9:b8:09:80:82:ae:
                    b5:ec:32:81:ee:ad:d0:6e:a5:80:c4:38:0e:7a:7c:
                    53:19:29:48:b3:c0:12:cc:e9:7b:7d:93:d6:03:53:
                    d1:8b:05:2b:3b:fd:00:db:34:24:a8:a3:78:91:5c:
                    57:77:9f:95:f5:14:98:8e:d2:be:92:a8:99:62:cc:
                    3c:05:50:d1:4f:74:fa:5a:99:d0:c8:5f:0d:f9:f6:
                    12:73:8b:a8:be:bb:d6:d1:af:28:64:f3:cf:ca:58:
                    91:48:0d:d5:96:62:39:0f:0f:aa:35:a8:5a:89:b3:
                    a6:e9:2a:48:31:57:c7:7f:d3:86:87:4c:09:20:ec:
                    19:67:af:9f:c3:10:49:90:f6:66:f7:bc:87:dc:0f:
                    01:01:ef:a2:da:ba:10:1b:fc:07:62:9d:cb:ef:06:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:89:E0:BC:E3:56:C5:A4:E3:44:F0:AD:B8:60:13:F0:A3:C3:AD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c00c1f50-36fa-3f66-a810-2880bdec5b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:df:2d:b0:b5:e2:65:20:19:02:89:a7:48:c6:2f:9d:40:
         3a:df:17:1c:45:87:e2:18:22:c7:75:0d:e4:82:ab:4f:5c:37:
         14:f0:90:fe:94:e0:c7:fe:b6:1b:79:2d:af:7c:c9:69:5c:86:
         79:99:8a:75:d8:d3:e4:e1:82:19:27:14:da:0c:7d:bc:5e:24:
         b1:20:90:c2:cf:aa:1d:e7:73:0c:a2:51:53:52:2b:e7:e9:12:
         7e:71:a6:b4:2c:8c:04:15:4a:78:c1:f8:03:bf:0e:38:29:1c:
         ce:67:9f:c4:96:8f:99:c4:42:ca:58:b9:4a:5a:ae:c2:bf:b2:
         41:35:83:fe:1f:72:b7:b6:17:dc:06:6b:7a:f1:48:96:b9:f6:
         5d:68:57:59:39:9a:fe:96:2e:ae:c8:08:c3:d0:49:2d:84:11:
         8a:04:7c:ef:a4:9b:c4:2f:d0:a5:d1:35:19:81:59:de:00:f3:
         1c:05:15:da:60:a8:9d:45:e7:45:83:ee:5e:9b:26:03:26:b7:
         8a:07:a3:20:65:27:e0:52:3c:f0:72:66:67:b7:89:5b:68:d4:
         79:db:75:50:10:96:07:ba:fb:fd:48:da:c3:33:72:4a:6a:7e:
         63:2e:15:87:5e:c7:b7:ab:51:89:54:b9:07:8c:71:66:79:84:
         43:80:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 08:10:14 2026 by rpki-client