Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
File:                     40c437b4-a88b-3526-8eb4-8c0c2b279264.roa (raw, json)
Hash identifier:          SQLpHed3S5MheBjVqNeslJFAa4uCLwaAv29OViGfapc=
Subject key identifier:   9B:B2:67:E1:C4:7F:50:7D:51:5D:2B:04:CE:60:8E:D7:24:5F:21:3B
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584D1B7DF3C99B79687B26F95BC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa
Signing time:             Mon 09 Mar 2026 04:22:11 +0000
ROA not before:           Mon 09 Mar 2026 04:22:11 +0000
ROA not after:            Sun 07 Jun 2026 04:22:11 +0000
asID:                     212238
IP address blocks:        2607:740:195::/48 maxlen: 48
                          2607:740:197::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:7d:f3:c9:9b:79:68:7b:26:f9:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Mar  9 04:22:11 2026 GMT
            Not After : Jun  7 04:22:11 2026 GMT
        Subject: CN=11159024-fa79-4fb6-89c2-47eab1cc2651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:39:dd:2a:80:f4:eb:bd:c6:7f:6f:fb:af:
                    84:1a:94:26:8e:94:27:49:66:29:7e:a6:f5:da:2b:
                    03:27:58:34:f7:46:78:0b:a9:37:c7:d8:6b:84:cb:
                    ae:b4:78:e9:db:03:af:73:15:2b:41:2e:7c:01:1b:
                    1a:74:e5:f9:7f:1f:5c:ed:5e:e0:11:b3:9e:53:ed:
                    b5:5a:55:10:34:f2:b0:c0:ed:f3:b7:28:56:b8:27:
                    2e:24:63:5b:86:fd:ff:f9:f3:52:1d:0f:42:9c:c3:
                    88:f9:47:dc:8b:29:d8:32:cd:ed:ea:81:b9:a1:f3:
                    20:41:75:2c:71:c7:b5:c1:d9:9e:77:ad:53:4f:df:
                    52:89:1e:f4:e5:ed:70:52:24:d9:8c:56:9e:f0:86:
                    2e:cf:02:61:6f:fb:36:cc:7a:da:a4:dd:aa:a4:7f:
                    02:ae:b9:3f:9d:04:c2:6e:f5:5c:e5:03:fe:d8:a4:
                    35:c5:ee:bc:c7:24:a7:96:70:f4:a3:00:be:5a:f2:
                    93:ad:a8:16:bc:ab:ac:56:1d:1c:52:51:68:a8:5a:
                    e9:77:df:b5:4f:ad:ab:3a:78:66:17:21:0b:a3:19:
                    b0:76:19:81:89:87:2f:68:7b:ef:fa:8d:7e:18:dd:
                    07:0f:75:e1:0a:4d:f0:c1:4a:b6:d5:e6:af:b9:25:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:67:E1:C4:7F:50:7D:51:5D:2B:04:CE:60:8E:D7:24:5F:21:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40c437b4-a88b-3526-8eb4-8c0c2b279264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:195::/48
                  2607:740:197::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:21:76:a7:4d:c5:d3:02:1a:e7:00:a5:2c:d3:50:04:cc:
         c7:86:a6:3e:13:a7:76:b5:aa:4b:dc:d3:2d:42:1a:07:15:bd:
         05:c0:95:b8:8e:30:dd:82:5a:ce:b5:da:25:45:5b:a0:99:a4:
         40:79:08:da:7c:66:0c:3c:25:b8:ee:4a:45:4b:6f:03:4c:de:
         8d:9e:2e:e5:55:38:48:b4:2e:36:c5:90:d1:fc:5a:de:fc:cf:
         18:a5:55:97:ba:b6:29:db:6d:8d:60:98:7c:1d:0e:5f:15:e7:
         56:e0:60:f3:5c:0a:a8:b3:d7:52:01:2e:07:bc:38:c4:65:f0:
         98:e8:de:fc:6a:f1:90:8c:87:77:e3:c9:b2:71:4e:72:2c:4a:
         28:8c:1b:10:2d:a2:09:ec:95:39:c4:25:c4:48:27:90:97:d4:
         84:fc:29:0f:0f:66:37:e0:77:57:40:18:2d:eb:47:e7:5f:d7:
         7e:fd:5d:1c:cf:ec:80:d5:24:e0:13:8d:99:43:0a:4d:55:5b:
         f9:23:2a:da:53:97:3d:9d:ca:2a:c2:08:4d:16:94:c3:ef:5e:
         ed:58:23:7f:09:14:1e:aa:fd:8f:4e:3a:c8:fc:bd:ab:2c:f0:
         df:58:c4:f5:42:fb:fc:32:45:35:65:af:ed:23:4b:6f:fe:5b:
         16:f0:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 06:43:12 2026 by rpki-client