Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
File:                     40979e81-e4d5-3b9e-aa17-d47ae9979638.roa (raw, json)
Hash identifier:          cKoSW6QXjXWha2hKIjrrakVIZRKEjO45DXA4euwzrTs=
Subject key identifier:   65:C4:23:79:AA:2E:F2:D1:11:B7:2A:91:AE:33:5D:C0:42:3C:06:5C
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584B758C90DE4F08FB18B7F2B400
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     16509
IP address blocks:        2606:9680:20c0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:90:de:4f:08:fb:18:b7:f2:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=cc191daa-ebfb-4b93-806f-d9f2761eda22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:7d:ed:0d:97:68:51:27:66:9f:32:4d:93:
                    b5:d0:d8:46:81:54:2e:73:6d:e6:91:3f:39:cf:a0:
                    e2:46:2f:a2:62:5a:1d:2e:e3:ec:a3:f5:b6:fc:f6:
                    53:9e:e0:dc:6e:30:6a:cc:4f:f8:4e:ad:33:52:19:
                    f8:f6:1e:aa:63:21:e1:4d:4a:15:71:a7:d3:e5:27:
                    6a:54:ac:bf:c1:23:84:a4:9b:e6:7f:84:73:a6:29:
                    74:a7:38:17:3f:57:a9:d2:dc:e0:62:0f:bf:a4:22:
                    7f:27:c0:09:88:06:2a:75:75:18:fe:f9:b0:ea:65:
                    1e:19:45:1a:a0:ec:59:1f:b6:47:6c:64:2e:a8:63:
                    4d:72:57:1c:df:d1:5e:35:4b:5d:b0:52:53:f3:62:
                    07:6f:a5:6e:eb:b1:5b:46:6f:bd:f9:f3:6f:cd:65:
                    98:8a:c0:1b:be:85:08:fe:0d:0e:30:f9:fa:74:0c:
                    0e:70:26:6f:ce:24:89:58:68:70:34:68:f8:45:d8:
                    2d:e5:63:ba:53:ac:96:2c:b4:60:4a:cb:2a:f4:ac:
                    86:cd:d7:88:5e:f4:7c:b2:e8:b6:ee:e9:3a:b5:90:
                    99:6a:01:94:da:7d:51:4f:f9:fa:f0:6e:a6:19:56:
                    c1:0c:98:b7:d5:54:53:2a:59:7a:8b:0c:a1:6d:70:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C4:23:79:AA:2E:F2:D1:11:B7:2A:91:AE:33:5D:C0:42:3C:06:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9680:20c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:51:1f:29:fe:db:db:94:36:1b:bd:6f:96:1d:2f:25:db:94:
         e2:d0:33:27:7a:5c:3c:6f:29:5b:f5:de:d7:fc:9a:0c:ae:27:
         5d:53:96:77:d9:d2:52:37:b0:f2:77:c7:20:22:54:bf:62:34:
         4b:de:c0:9f:b5:d9:99:f2:6f:d5:32:e9:7e:6b:84:b6:44:56:
         bd:53:62:62:68:14:56:db:e4:32:30:c3:7c:fe:c7:f0:83:11:
         0f:d1:80:80:05:68:a1:54:9b:d3:d0:a4:ba:92:46:26:c5:f5:
         1d:24:a7:16:7a:63:2d:e6:08:b8:ad:4d:63:d0:2d:48:9f:4d:
         d1:cf:c3:e1:10:60:1d:a0:bd:de:ab:77:dd:1f:ee:c2:7a:2b:
         97:07:91:a4:9f:6f:13:4a:f1:fd:41:b0:c0:15:bb:6f:2b:49:
         47:95:2d:46:a5:df:b0:50:81:c8:fa:23:9c:8f:5d:1d:a0:73:
         05:eb:be:09:d7:ac:c4:18:c1:06:23:c5:51:1f:d2:a6:8d:ef:
         9c:f4:3f:d6:35:93:6c:54:da:ec:19:c4:98:fd:e7:4b:0b:24:
         b5:24:38:ae:ce:87:b3:df:72:e8:4d:af:2c:0d:d0:cc:05:6b:
         8f:d5:c5:31:ec:10:d1:54:79:e0:c7:fc:a3:46:29:7c:85:e0:
         06:1b:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 06:09:25 2025 by rpki-client