Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa
File:                     40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa (raw, json)
Hash identifier:          yMHT1ZjlFpApUcn4CmcD7zMEJ7UGJ8UzbAh3eJi0z7U=
Subject key identifier:   17:C4:9C:A5:82:E1:A4:5A:64:FD:DE:46:28:65:AC:E8:89:3D:A4:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79A1856B151D6880ED992C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     40717
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:18:56:b1:51:d6:88:0e:d9:92:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ba2716ee-b35c-423f-8ff6-7ed143285cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:03:60:ff:c6:d5:ee:15:ba:b0:ef:70:de:
                    94:a9:27:3a:a9:1e:f5:33:b7:df:00:2d:68:fa:83:
                    0f:cd:c2:39:dd:ba:db:0a:4d:4e:08:95:89:0d:54:
                    db:04:b3:20:43:0d:7d:2e:eb:e1:c6:61:ee:21:ec:
                    11:5e:60:e4:72:ce:83:9d:03:8e:29:16:02:c4:10:
                    43:99:2b:27:f1:82:15:b7:b6:bf:9a:d6:35:cb:97:
                    21:1e:88:89:b3:b6:f3:02:e5:3b:8a:6d:91:c2:08:
                    57:6e:53:98:3b:dc:bf:93:cc:f8:2b:e2:45:c8:fd:
                    f3:10:7a:e4:a7:48:d4:a0:b9:3e:3a:35:47:13:34:
                    e0:58:16:54:a5:01:1d:9f:72:de:05:35:f8:23:bb:
                    88:e9:30:44:ab:ac:0f:8a:71:fc:04:0b:f0:03:c2:
                    19:26:03:4f:39:c6:46:fc:75:49:d2:92:f3:17:9a:
                    c0:2d:7f:24:55:e4:2f:b5:37:9d:06:61:3f:10:91:
                    e7:92:ff:7d:5c:14:a3:49:b5:b8:be:b8:ee:3b:d7:
                    ea:95:e8:48:3c:28:0e:98:a6:e6:e4:9f:0c:5f:90:
                    42:ee:01:ac:1b:01:47:ea:16:67:ab:f7:d3:7a:76:
                    4e:6a:5f:01:7e:d0:6c:cd:9a:ac:63:ab:bf:bf:a7:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C4:9C:A5:82:E1:A4:5A:64:FD:DE:46:28:65:AC:E8:89:3D:A4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:59:2b:5d:f8:cf:cb:54:21:8a:24:ae:88:b9:ab:8b:34:
         9f:b5:c2:58:de:bb:24:45:fc:4e:a3:3a:fe:09:b5:ca:8c:11:
         10:5b:8a:8b:60:52:34:07:5d:51:01:29:11:43:d3:bf:fb:36:
         a0:fe:8c:6a:f7:d1:30:a2:db:99:b1:ce:72:5b:f6:93:48:61:
         e4:28:d1:da:dc:6c:e0:7c:04:3d:a8:06:5a:49:e2:ff:42:03:
         2d:d3:cd:e6:e1:9f:60:3a:d7:dc:d9:c4:4c:54:8a:22:5c:a3:
         e0:4f:22:76:19:aa:51:96:bd:67:f5:56:16:4a:00:f1:e0:88:
         50:50:6f:a3:a2:6c:52:01:37:81:6e:f9:71:2c:44:91:e7:c0:
         72:da:e0:fa:cb:b7:31:ad:2f:ec:5c:88:cd:c1:aa:26:a7:4c:
         92:0f:a5:d7:1e:64:21:39:ff:e0:94:5a:dd:65:43:80:d9:ae:
         29:46:40:57:ca:4f:ad:a7:14:45:d1:59:2a:57:46:80:3f:f5:
         fd:ef:75:f7:7f:69:67:60:2f:fe:98:45:9b:2c:ba:46:d0:d5:
         33:3c:dd:b2:3c:b8:2d:4a:f4:8a:8a:57:03:f9:e6:08:e8:62:
         25:65:4d:fd:15:bc:33:60:07:20:3a:06:d6:3a:b8:0a:b3:f7:
         57:e7:06:25
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6nmhhWsVHWiA7ZksAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YmEyNzE2ZWUtYjM1Yy00MjNmLThmZjYtN2VkMTQzMjg1Y2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RADYP/G1e4VurDvcN6UqSc6qR71M7ffAC1o
+oMPzcI53brbCk1OCJWJDVTbBLMgQw19LuvhxmHuIewRXmDkcs6DnQOOKRYCxBBD
mSsn8YIVt7a/mtY1y5chHoiJs7bzAuU7im2RwghXblOYO9y/k8z4K+JFyP3zEHrk
p0jUoLk+OjVHEzTgWBZUpQEdn3LeBTX4I7uI6TBEq6wPinH8BAvwA8IZJgNPOcZG
/HVJ0pLzF5rALX8kVeQvtTedBmE/EJHnkv99XBSjSbW4vrjuO9fqlehIPCgOmKbm
5J8MX5BC7gGsGwFH6hZnq/fTenZOal8BftBszZqsY6u/v6cwgQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBfEnKWC4aRaZP3eRihlrOiJPaREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBjYzVkNGQtNTM4My0z
MTdlLTk1YWItNzg0M2JiN2Q0ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAJDVkrXfjPy1QhiiSuiLmrizSftcJY3rskRfxO
ozr+CbXKjBEQW4qLYFI0B11RASkRQ9O/+zag/oxq99EwotuZsc5yW/aTSGHkKNHa
3GzgfAQ9qAZaSeL/QgMt083m4Z9gOtfc2cRMVIoiXKPgTyJ2GapRlr1n9VYWSgDx
4IhQUG+jomxSATeBbvlxLESR58By2uD6y7cxrS/sXIjNwaomp0ySD6XXHmQhOf/g
lFrdZUOA2a4pRkBXyk+tpxRF0VkqV0aAP/X973X3f2lnYC/+mEWbLLpG0NUzPN2y
PLgtSvSKilcD+eYI6GIlZU39FbwzYAcgOgbWOrgKs/dX5wYl
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:59:01 2026 by rpki-client