Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf6d2ad8-d2d2-3e2f-a2ef-c1bbba903e67.roa
File:                     cf6d2ad8-d2d2-3e2f-a2ef-c1bbba903e67.roa (raw, json)
Hash identifier:          tl9VAARJcSnREVggd0rcFhQb9UGQsr6v1joiEERew08=
Subject key identifier:   33:93:22:12:E8:82:1C:A4:B2:DE:4A:59:62:92:A0:E5:81:0E:08:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584D747009BE881E35A4D6BC0700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf6d2ad8-d2d2-3e2f-a2ef-c1bbba903e67.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     397216
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:09:be:88:1e:35:a4:d6:bc:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=68d67835-5a25-47cd-b25e-2ef69e9e015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:a8:77:e0:6c:cc:4e:27:a3:16:27:82:9f:
                    f6:a7:5e:e3:13:80:38:4a:d6:1f:89:1d:ec:a6:5d:
                    d7:c2:04:67:a9:87:96:b2:b3:ce:cf:a7:68:bc:8c:
                    be:8e:5c:9b:78:73:f4:b5:68:85:c8:15:57:a6:5b:
                    b2:ff:c3:8b:26:7d:d5:b8:ce:3a:06:bf:c6:ed:a6:
                    bf:af:3d:81:2d:62:21:46:f4:a0:f1:0c:36:c0:f9:
                    e2:b5:da:c7:95:18:ff:38:fb:a6:db:c9:a8:7f:69:
                    7b:92:e7:f2:12:6b:c1:c9:e0:71:51:5c:4f:dd:30:
                    72:f1:57:cf:0a:74:44:02:c6:0c:9d:7f:37:d0:ad:
                    75:c6:66:d2:f5:7d:b8:1a:b3:f4:ea:9e:ac:91:ff:
                    05:9c:db:9b:07:e7:3f:e3:98:4b:14:25:1f:77:05:
                    59:3b:4a:98:80:dc:72:68:4a:44:77:69:44:81:4f:
                    83:78:13:c7:23:f5:3b:ac:a7:fb:cc:89:79:52:6d:
                    ae:ad:f3:62:7e:75:66:67:6f:55:07:cf:d3:9a:a5:
                    77:cd:d3:f9:5c:74:af:b0:64:64:e9:47:89:db:4a:
                    c9:ba:c7:a1:65:eb:74:8c:fa:82:c2:3d:0c:25:e4:
                    39:0c:b0:25:db:16:68:25:96:56:8a:e9:87:11:50:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:22:12:E8:82:1C:A4:B2:DE:4A:59:62:92:A0:E5:81:0E:08:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cf6d2ad8-d2d2-3e2f-a2ef-c1bbba903e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:87:81:98:c3:f7:63:15:8e:4f:69:18:37:af:f3:1c:58:e2:
         ae:10:8d:ee:f4:69:cd:5e:0f:80:bd:30:0e:c7:f4:28:99:1c:
         a5:02:ea:6e:bc:49:28:86:8f:95:89:c6:91:23:00:75:5e:1a:
         0e:bd:b6:8c:d2:c8:7c:8f:4b:44:80:9a:00:8c:80:81:80:32:
         1a:ba:92:3f:aa:44:5e:7e:81:60:cf:22:c0:1a:20:d0:49:1b:
         27:a6:6e:8e:ba:6e:8d:24:18:bc:d8:6c:f6:ab:5b:5d:8c:20:
         f4:c0:e4:3f:a2:0c:72:e2:6d:29:a5:93:ca:ea:9c:c5:89:94:
         3c:f1:8a:b8:fe:4d:0d:d4:78:95:06:9a:19:79:d0:21:e3:5f:
         49:52:e9:8e:4d:7b:4b:c9:0a:93:9a:39:8b:19:cd:1d:fd:32:
         55:47:2d:78:ac:35:31:1b:4e:40:f1:3e:bc:69:de:29:61:8e:
         a5:1b:0b:3e:c9:e4:8c:b1:e8:06:aa:f9:2d:97:06:3e:d4:53:
         07:f7:4a:f2:8d:30:67:d3:c2:30:9b:d0:51:3a:73:31:10:03:
         e4:86:a9:01:d3:cd:b6:70:31:32:94:1c:b8:79:86:86:0c:e7:
         4d:3a:7d:18:2b:55:ba:3c:0a:99:b8:07:c4:b9:08:82:34:95:
         b1:db:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 12 09:05:34 2026 by rpki-client