Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
File:                     38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa (raw, json)
Hash identifier:          h7fht4peyvnl1NjkFQ/eX6/2gkBLv9YMPDHiB1g/pNo=
Subject key identifier:   88:A9:79:AB:CA:D7:86:9D:F8:44:60:0D:5A:EA:3A:2D:78:6C:8D:9F
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584FA1632FF0B2182D5247219000
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     62563
IP address blocks:        2607:a140:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:2f:f0:b2:18:2d:52:47:21:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=40e72586-47a9-4e62-9fec-ca13bbb198ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:d4:1f:b2:e9:33:20:88:74:87:f4:13:04:
                    aa:e7:43:89:52:54:a1:3f:cd:53:06:cf:17:e5:23:
                    bc:e9:38:ab:4a:b7:dc:65:01:5f:4c:7c:d7:1e:81:
                    a5:68:1f:b7:7c:0e:df:83:21:5c:8e:4c:70:d1:f0:
                    ad:30:9a:1d:fe:fb:ba:40:8d:bf:78:d1:c3:b1:e1:
                    81:fe:14:74:6e:ba:ee:1e:8d:4e:bb:2c:60:f0:cb:
                    30:a0:79:17:e7:17:c2:62:7b:5b:d5:bd:cb:e3:8c:
                    e0:c9:9b:ae:ca:23:7b:c4:19:29:25:a6:8a:a8:86:
                    e1:b3:d1:ca:fc:1d:ce:e1:b4:b1:9f:15:a8:c3:fd:
                    3f:55:64:22:94:8b:f6:7a:a8:08:a4:46:85:33:fe:
                    1a:85:61:a5:48:b0:cb:25:bf:f2:c2:89:e8:1c:a1:
                    eb:fb:3f:a2:c6:fe:93:2b:63:b1:9e:10:cb:b5:4a:
                    b0:a6:d6:45:92:70:79:9d:d3:0b:72:b3:2d:fc:19:
                    2a:eb:34:03:3c:ad:74:23:06:81:7d:d9:e3:bb:f6:
                    72:73:91:9e:88:f3:8a:0e:11:65:9a:fa:fc:50:77:
                    35:96:22:0c:af:a1:83:be:90:b9:37:96:4c:0d:1b:
                    cb:94:70:7f:99:12:43:15:95:ce:46:64:aa:5e:d0:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:79:AB:CA:D7:86:9D:F8:44:60:0D:5A:EA:3A:2D:78:6C:8D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/38d11b6f-5994-3e0e-b8fc-88f1251730e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:50:bf:66:96:af:3e:72:98:d1:75:3f:dd:0f:cc:68:94:
         e9:0a:2e:88:be:47:f9:86:a1:3f:02:ad:11:f2:cf:e1:5c:c6:
         32:f3:d0:dc:7d:23:09:91:3a:4e:9e:1a:4f:73:af:c0:f5:ba:
         d3:4a:25:20:68:16:6b:18:99:96:91:ab:38:9e:8c:3b:bd:4f:
         a1:9b:13:57:ef:65:90:a3:53:0a:40:cb:78:92:90:8c:a0:c6:
         88:c8:7f:9c:cd:76:a0:33:3c:5f:7a:54:ea:6f:77:e6:04:88:
         a1:b6:e5:52:e9:27:c7:23:1f:57:45:b0:7a:43:a5:95:3c:48:
         1a:11:8e:92:01:78:0a:79:a0:a0:4a:21:9b:f3:5c:72:6a:1e:
         9d:7f:6c:72:15:bb:06:23:8a:65:a5:c0:f4:96:ac:26:f3:d5:
         d1:67:f5:8f:90:f2:16:ea:26:d1:04:2e:ff:d4:eb:14:23:14:
         5a:8a:da:aa:b8:af:81:d7:bb:09:af:2d:91:11:e4:0a:b7:fe:
         71:2e:f1:9e:d0:02:23:de:ce:0a:88:e9:95:64:1f:9f:c2:a5:
         52:91:d5:6c:d6:aa:85:83:ff:18:35:f2:77:d3:25:1d:dc:67:
         e4:5c:46:f1:a7:e8:e8:81:a7:19:42:96:8d:10:80:f9:b7:eb:
         6d:10:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:28:09 2026 by rpki-client