Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
File:                     40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa (raw, json)
Hash identifier:          31tuHU6mpkPFs1vkAQMK5xB3QkNGdkFYh74GIZbi5Wo=
Subject key identifier:   5A:4A:5B:7D:2C:48:21:DD:BB:A6:F4:40:DB:D9:54:52:FB:8E:65:6B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A74B5D67CAF5C498EDD8910E0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     852
IP address blocks:        2001:56b:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:d6:7c:af:5c:49:8e:dd:89:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=dc1c57ae-94ba-433c-9810-f43b75b402c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:43:54:fe:fe:6e:63:a4:80:c4:c9:e9:9c:
                    a3:6b:2d:f9:52:df:01:9c:34:82:40:b4:87:ea:0b:
                    73:3f:67:0b:8b:87:79:cf:c8:5b:41:6d:3d:cf:88:
                    ab:be:83:84:6b:f3:04:34:c4:08:21:34:cd:7a:92:
                    f4:f8:ae:1a:b5:b7:6d:b1:65:07:73:d9:cd:66:3f:
                    66:ae:3b:d5:c0:86:b3:5d:bc:3a:6b:61:e9:bb:e5:
                    0a:0e:31:b8:f2:d5:51:5e:40:8b:7a:ac:67:1a:97:
                    5e:cf:87:39:3b:70:62:c8:ae:c7:de:86:14:34:5e:
                    fd:7a:09:33:a5:ef:43:14:7a:8b:85:16:6a:a6:18:
                    d8:df:4e:98:24:8a:31:de:c3:85:8a:9b:a1:b1:a6:
                    09:d2:2f:54:54:b4:0d:ee:99:d8:c4:1a:77:7a:d8:
                    fb:70:30:04:2a:d3:1d:df:41:12:d3:1d:b1:a5:44:
                    25:00:96:cc:23:6a:7c:12:45:f2:8b:2b:fe:fb:35:
                    b8:ba:4b:7d:d8:26:e8:68:4c:c4:e0:83:df:15:0d:
                    3f:18:26:a5:1a:7a:02:7f:6f:6f:3c:fb:c3:9a:be:
                    23:93:59:e6:7d:bc:56:25:d2:0f:3e:ff:36:d6:e5:
                    77:dd:79:30:81:cd:0f:67:0b:9b:a0:fb:e6:11:7c:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4A:5B:7D:2C:48:21:DD:BB:A6:F4:40:DB:D9:54:52:FB:8E:65:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:86:07:70:fd:fc:9d:88:7d:aa:74:be:8e:86:af:5c:1b:27:
         38:0f:ba:f6:62:02:48:40:c4:87:b2:cf:f5:c1:70:40:60:5a:
         74:e9:65:e8:38:6e:55:6b:a7:a2:58:7f:51:4d:5a:24:82:4f:
         08:68:a4:b3:e9:02:ef:57:3f:69:b8:c6:a8:21:c5:e2:31:a6:
         8f:0a:0c:60:28:59:26:bb:76:50:96:d1:b2:ee:b4:9b:35:39:
         7f:0d:d4:02:dc:0e:65:35:e2:69:33:6b:d7:62:ad:0f:32:dd:
         e9:3f:d6:f8:ae:36:a0:52:e0:b8:2b:2c:32:91:50:01:1a:02:
         17:2a:32:04:a3:19:e0:7d:4f:a5:d5:3d:d8:79:4b:97:17:a8:
         a9:8d:d1:f9:df:24:d4:99:73:09:e6:4a:40:74:43:2f:55:2b:
         a7:a5:cc:28:f0:1c:f4:d5:36:4c:36:04:d1:72:1e:a2:5c:bf:
         84:8e:2a:03:8b:ca:82:73:72:c1:11:ba:83:04:d1:14:40:4a:
         f2:39:f3:ef:12:14:cf:84:db:5f:68:94:ff:be:8d:65:4c:c9:
         e8:9f:8f:9e:ea:e4:7b:6a:8a:2b:fc:01:e6:a5:57:1b:6d:4d:
         95:0d:28:53:e0:48:ac:f5:40:b4:d5:6b:02:25:5a:ed:e4:52:
         46:28:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:00 2025 by rpki-client