Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b40ff183-9831-3d4c-9e90-40965fb74cc9.roa
File:                     b40ff183-9831-3d4c-9e90-40965fb74cc9.roa (raw, json)
Hash identifier:          QjldfKs1APAUZlKIHQaJlKVlsRjxoqYz2lcU0Jl9M60=
Subject key identifier:   78:39:4C:05:93:11:5A:19:21:46:88:EA:8E:41:AF:FC:6F:ED:D2:14
Certificate issuer:       /CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
Certificate serial:       010D0C9F4328584AFC1BF0B3646DE74D559112A0
Authority key identifier: 40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b40ff183-9831-3d4c-9e90-40965fb74cc9.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     13329
IP address blocks:        2606:3900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f0:b3:64:6d:e7:4d:55:91:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ca7c47-4500-4084-9bad-522bf30a9df5
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=2e146b7d-924a-4ff3-b01a-44f286e5b847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:48:9a:35:58:07:bc:86:df:96:34:bd:11:80:
                    dc:01:9a:53:7d:1e:1b:0a:fb:19:dd:e5:c9:0d:9a:
                    39:e2:2d:a7:be:fa:2c:bd:23:dd:17:75:74:8b:f9:
                    c0:ec:e1:3a:fe:31:24:10:ad:b4:d7:67:e3:a6:e1:
                    39:b6:44:dd:2f:84:f9:48:a4:f8:1c:3b:17:0a:ca:
                    2c:05:ba:77:7f:1e:79:30:3b:38:a0:20:12:7d:85:
                    8b:d1:d6:4a:79:f0:6c:17:5c:43:3e:c5:25:cf:f1:
                    31:63:fa:13:8e:c0:22:ba:cd:f0:50:8b:32:75:45:
                    17:4b:4f:b5:c5:43:e1:59:70:13:68:50:9f:fc:63:
                    92:33:4a:fd:cd:b7:c5:04:ef:1f:bd:e8:58:c9:c4:
                    90:a3:5b:f8:7d:17:b2:1c:56:81:98:20:75:f0:60:
                    a0:e2:a5:c1:f3:de:13:6f:a1:50:41:93:19:c6:7d:
                    33:69:1f:1e:8d:eb:32:01:b2:0a:91:23:f9:cb:bc:
                    d0:79:9e:16:ac:1a:a2:80:60:0e:f7:4e:bd:e8:27:
                    7f:1f:a1:cb:07:c6:d4:ea:a1:b5:2d:ae:e9:1b:8b:
                    e4:9c:40:d5:d8:f2:30:8e:bf:03:21:7e:04:e5:cf:
                    71:2d:e1:f6:30:2f:e6:be:86:0b:1d:45:0e:64:8f:
                    48:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:4C:05:93:11:5A:19:21:46:88:EA:8E:41:AF:FC:6F:ED:D2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/b40ff183-9831-3d4c-9e90-40965fb74cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5/a6ca7c47-4500-4084-9bad-522bf30a9df5.crl

            X509v3 Authority Key Identifier:
                keyid:40:66:03:E4:E0:91:57:92:0A:65:19:9C:20:A6:78:28:F6:F5:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6ca7c47-4500-4084-9bad-522bf30a9df5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:25:12:4a:24:77:29:20:79:a4:f8:ad:c8:dc:f3:5e:2c:
         f8:bd:a5:4a:a4:dc:02:d0:83:30:3e:7b:c1:84:98:58:f5:01:
         3b:e7:7c:f3:78:4e:e1:16:52:e4:26:51:d8:91:97:60:c2:b3:
         15:fe:d5:5f:2b:8d:12:59:86:c0:cc:e9:99:26:af:55:18:04:
         6e:7c:db:12:da:fa:c3:93:a6:8b:dc:a2:5e:a9:79:f8:57:52:
         2d:69:14:c9:53:db:61:a2:60:eb:bf:4f:e8:0f:6b:41:7f:a3:
         ed:37:d8:65:6e:a4:3c:c1:b5:69:8e:43:6f:c5:3a:9d:39:f4:
         56:95:ab:76:45:09:ba:19:71:df:34:62:b7:12:6c:77:77:61:
         b4:d3:21:29:11:d7:bf:57:8b:c9:03:9c:0d:1e:ed:5f:82:17:
         f7:5a:b8:49:fa:59:ed:02:81:6d:a3:e3:63:28:75:30:3c:32:
         c2:ab:1e:74:be:1a:0c:e2:7a:74:1b:25:1d:de:51:64:d4:d0:
         4b:90:aa:42:18:dd:a2:8d:58:26:f2:b8:a7:25:39:36:63:0b:
         cf:d3:e1:1d:e0:e7:3c:e3:ca:74:e6:cd:3e:da:23:98:88:c3:
         1f:82:67:7e:0d:ea:43:eb:7e:39:60:81:da:0d:2f:ff:45:8a:
         04:df:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:16:30 2025 by rpki-client