Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
File:                     40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa (raw, json)
Hash identifier:          8v13Ax0RmkV4+SFisKXAi+ntlvTXxA+UbmAIT1fF0qg=
Subject key identifier:   85:2F:40:EC:89:C0:71:14:84:F8:CD:5A:50:24:7F:85:DE:64:A8:7B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF640A0EAB53B8B9235C478C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        2001:56b:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:a0:ea:b5:3b:8b:92:35:c4:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=13de2922-02a7-4481-a8b3-f105de60b654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:34:ef:b4:aa:03:bd:9b:2b:45:f5:29:1f:
                    f0:75:a2:8c:e3:43:cf:46:09:57:0e:d4:38:63:ed:
                    5c:b0:de:d8:a4:43:d4:db:b3:32:8a:22:e4:11:09:
                    79:86:33:9e:4e:ec:8a:dd:fb:97:42:9a:3f:d5:38:
                    a6:9e:03:b8:0b:16:76:57:60:7e:46:f1:fd:38:a5:
                    e4:f1:8a:c3:45:31:85:30:f4:9f:74:b3:c1:d1:49:
                    2d:6c:8b:e3:64:e7:f7:f9:41:12:47:97:08:ae:82:
                    c6:50:62:fa:ae:31:7a:46:6f:78:0e:06:35:03:0d:
                    b7:a2:b4:48:f2:c6:7e:de:82:d9:d3:e8:f2:ae:22:
                    a1:92:c5:ab:3e:7d:d2:97:29:f2:d5:27:2e:4f:fd:
                    64:2e:85:dd:2c:56:f3:1a:ef:c9:8b:9a:f7:7b:6d:
                    2b:d6:ef:a5:3c:27:f8:c7:5c:f7:bd:f1:56:15:1d:
                    a2:a3:5f:98:d3:ec:55:17:d9:0c:20:bc:71:3b:98:
                    c7:0e:29:5b:72:a3:b8:a3:67:f2:4e:60:9b:e3:9d:
                    cf:22:f8:6e:da:74:36:28:41:f1:e9:a6:b4:2c:bb:
                    4b:9a:3a:28:17:3c:4a:2f:ac:b3:58:c4:a4:a3:36:
                    8c:7d:ee:71:2f:4a:2b:e0:d1:0b:33:06:41:1f:b6:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2F:40:EC:89:C0:71:14:84:F8:CD:5A:50:24:7F:85:DE:64:A8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:c000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:56:f6:5c:e1:7b:10:4d:45:8d:37:5d:71:4a:f8:38:ab:54:
         eb:cf:a3:9b:5c:ef:e9:f0:94:9a:10:70:ee:e7:70:20:4c:1c:
         c3:a8:1b:a2:c8:22:c3:9c:ee:64:83:02:fd:ce:65:e5:52:f3:
         bf:18:17:ff:a1:2d:f6:b2:aa:92:db:c1:d8:a0:5d:f4:e5:2f:
         2e:e2:c5:db:5c:92:bd:d9:37:f1:1a:66:d0:57:3a:60:a7:0f:
         5a:37:c3:35:89:7a:06:b5:2e:4d:c1:72:52:5b:c3:f9:92:fc:
         05:1f:07:c7:bd:4e:f8:34:fe:6b:47:40:25:73:e3:2c:68:a6:
         3e:cd:53:3a:c2:30:3f:fb:76:12:c9:55:88:6b:2e:cf:62:c1:
         15:a3:02:1d:94:dc:23:3f:6b:2c:3e:24:0c:0e:18:b1:4e:e5:
         2d:8a:38:ca:39:bd:56:a5:b8:bf:06:c4:5f:d9:d9:60:dc:cf:
         6e:69:c3:90:52:a0:f2:f8:3b:54:30:03:7a:05:95:d2:c1:e0:
         cb:31:c1:2c:e4:85:aa:30:58:6c:19:32:f7:39:a9:c2:9f:36:
         5c:c1:ec:96:43:0e:5c:f1:04:e0:c7:08:d4:f9:b6:0a:ae:1b:
         ba:d8:2d:27:4b:16:54:38:77:03:58:b2:8c:59:49:ff:85:ac:
         89:63:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:52:06 2026 by rpki-client