Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4834d1a-61d7-3c76-b457-e251379c4060.roa
File:                     d4834d1a-61d7-3c76-b457-e251379c4060.roa (raw, json)
Hash identifier:          qSjQ03RyKcI+fwirDzXhs2eA06I4onv6HAxlyJ6Q+MU=
Subject key identifier:   18:8D:43:B8:FB:F9:CD:CF:86:97:81:3D:ED:DE:06:81:FB:D3:3D:17
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584E54B4D8B58FC409BA30882F00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4834d1a-61d7-3c76-b457-e251379c4060.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     397215
IP address blocks:        2610:a1:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:d8:b5:8f:c4:09:ba:30:88:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=61865d93-6066-40ee-b2a8-a8f54a2b9347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:31:0f:d6:e9:bd:a9:bc:ec:a0:8e:3e:c9:
                    2e:26:7f:99:f0:cd:c5:52:99:b0:86:cd:29:5b:35:
                    59:ef:0d:b4:30:3c:f1:83:85:44:2d:df:c4:84:59:
                    f4:a5:36:e4:ba:26:1f:5f:21:f5:db:d0:b6:f9:54:
                    b3:32:91:7a:a1:e0:d5:e9:91:74:56:81:bc:35:59:
                    ae:a0:d6:46:40:b7:34:b2:14:1b:1b:47:f6:ba:7b:
                    23:6e:0a:35:9f:f3:9a:06:7a:37:a3:62:91:fd:2d:
                    06:db:ce:25:85:14:90:07:69:72:ae:ec:e2:91:8b:
                    cb:89:26:01:23:4f:b3:7e:49:7c:b2:d6:77:33:44:
                    23:c5:f4:db:27:88:10:d7:a8:c3:39:2b:62:cc:3c:
                    8d:0b:e3:05:81:df:31:b4:ce:aa:cc:2a:b5:ef:72:
                    79:ce:a7:e5:59:0c:a8:a2:ae:c6:e9:aa:d2:04:48:
                    d0:a2:67:5f:82:1e:30:86:93:33:22:b2:5c:50:e4:
                    48:e6:80:ed:01:60:99:9d:f9:92:4f:ad:f1:ab:82:
                    95:bb:0e:e3:a6:27:da:a2:37:f1:4f:4d:4a:6a:bb:
                    e8:68:ea:33:37:8c:2f:72:50:05:14:f8:92:6f:d3:
                    c5:9a:98:41:26:06:db:e5:7f:52:55:fd:f1:15:f9:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8D:43:B8:FB:F9:CD:CF:86:97:81:3D:ED:DE:06:81:FB:D3:3D:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d4834d1a-61d7-3c76-b457-e251379c4060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:ac:73:aa:0c:17:2e:22:f9:56:45:d4:1f:e4:15:6e:8a:
         79:a6:6b:d4:11:51:7c:50:ec:4d:75:9a:b7:e8:5d:a2:34:53:
         b8:db:e8:13:40:1a:a6:17:f6:8a:37:4c:4a:c2:5e:38:8a:bc:
         9e:83:d6:65:22:f3:88:b0:c2:70:99:6c:87:08:65:34:c0:14:
         49:fc:2b:34:8e:a1:04:76:55:a7:7b:ea:21:f9:36:f8:ef:ed:
         40:b4:b3:a9:10:94:cd:c1:41:4f:ee:49:8a:01:83:46:03:b4:
         57:e0:02:4d:7d:13:6f:88:aa:90:e3:e8:61:e5:35:1c:30:c9:
         30:f5:b8:2c:21:48:57:d3:11:27:cd:17:39:9f:34:5a:c4:b5:
         5a:91:34:e3:62:4b:32:fc:bb:d5:0e:42:47:ba:6e:6a:62:27:
         c8:4f:05:c5:22:55:b6:04:68:c7:f9:a2:da:5d:a6:2e:f4:d8:
         0b:a9:3a:f7:7a:95:06:19:3c:60:23:03:2d:2f:c9:7b:ad:2e:
         0a:19:e7:47:a4:1d:10:66:ab:ec:f1:23:ad:d9:9d:44:9a:4e:
         b4:36:ca:f7:b9:c2:be:55:a0:7d:e6:22:f2:a3:8b:7b:28:eb:
         42:34:9a:8c:e6:79:a4:57:dc:ea:a6:3c:a1:1c:c7:c9:a7:59:
         4c:b2:64:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5UtNi1j8QJujCILwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
NjE4NjVkOTMtNjA2Ni00MGVlLWIyYTgtYThmNTRhMmI5MzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fcxD9bpvam87KCOPskuJn+Z8M3FUpmwhs0p
WzVZ7w20MDzxg4VELd/EhFn0pTbkuiYfXyH129C2+VSzMpF6oeDV6ZF0VoG8NVmu
oNZGQLc0shQbG0f2unsjbgo1n/OaBno3o2KR/S0G284lhRSQB2lyruzikYvLiSYB
I0+zfkl8stZ3M0QjxfTbJ4gQ16jDOStizDyNC+MFgd8xtM6qzCq173J5zqflWQyo
oq7G6arSBEjQomdfgh4whpMzIrJcUORI5oDtAWCZnfmST63xq4KVuw7jpifaojfx
T01KarvoaOozN4wvclAFFPiSb9PFmphBJgbb5X9SVf3xFfmbzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBiNQ7j7+c3PhpeBPe3eBoH70z0XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvZDQ4MzRkMWEtNjFkNy0z
Yzc2LWI0NTctZTI1MTM3OWM0MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhAAoRAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAV36sc6oMFy4i+VZF1B/kFW6KeaZr1BFRfFDsTXWat+hdojRTuNvo
E0Aaphf2ijdMSsJeOIq8noPWZSLziLDCcJlshwhlNMAUSfwrNI6hBHZVp3vqIfk2
+O/tQLSzqRCUzcFBT+5JigGDRgO0V+ACTX0Tb4iqkOPoYeU1HDDJMPW4LCFIV9MR
J80XOZ80WsS1WpE042JLMvy71Q5CR7puamInyE8FxSJVtgRox/mi2l2mLvTYC6k6
93qVBhk8YCMDLS/Je60uChnnR6QdEGar7PEjrdmdRJpOtDbK97nCvlWgfeYi8qOL
eyjrQjSajOZ5pFfc6qY8oRzHyadZTLJkBw==
-----END CERTIFICATE-----
Generated at Wed Jul 1 07:28:25 2026 by rpki-client