Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
File:                     42260333-fa7a-3e67-8741-ccb79a740c7a.roa (raw, json)
Hash identifier:          uRzuBcElmVRAAcjcx+7zFqnQi5aHA51W9Va/lkKIOM8=
Subject key identifier:   AD:7C:E5:E7:26:44:EE:63:89:30:CB:6F:10:3A:35:D5:B3:51:AB:BA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E5084940BD96542B0B1A85080
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     19437
IP address blocks:        2607:ff00:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:94:0b:d9:65:42:b0:b1:a8:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3ca002a4-873c-4f0d-9e31-944fe2c15b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:df:01:86:93:64:69:b1:25:47:40:94:22:
                    68:fe:9e:02:0a:7a:1e:25:32:f1:2a:2a:7e:21:cd:
                    91:ce:e4:d8:07:9f:a3:d1:be:98:a5:20:aa:2f:7f:
                    1f:b1:38:e4:3c:97:d7:fd:ae:a1:57:e0:b9:d7:c4:
                    e0:8e:e8:0d:88:d7:bc:33:ce:df:23:df:80:03:2b:
                    1e:06:5b:34:0d:bc:3f:b6:9f:65:89:24:d5:f9:91:
                    b4:0a:ef:c2:cb:0e:c8:81:82:dd:d3:ca:ec:cc:fd:
                    55:68:61:f8:9a:88:0a:a8:b4:f8:ed:e4:cf:ea:84:
                    f9:36:10:75:8e:3d:12:01:cc:51:17:16:04:8a:58:
                    9a:00:b0:ee:0f:62:e4:bb:f7:f7:44:8c:73:c5:63:
                    aa:92:a0:d5:83:dd:de:af:8c:45:52:d1:b6:8f:fe:
                    6f:5f:cf:8c:78:49:ec:64:42:e4:45:f7:f3:bd:07:
                    b7:f4:a6:7d:02:91:9e:13:4c:c8:12:f3:86:48:0b:
                    ba:66:97:15:9f:fb:7b:a0:1b:e4:8d:d3:af:9b:96:
                    e7:0f:93:e3:17:9e:35:6b:cd:56:41:72:a9:43:3f:
                    40:a8:3e:50:ce:de:76:fe:68:03:22:c8:8c:06:dd:
                    ee:3a:5d:9b:44:3e:ba:25:d8:5d:84:05:a1:be:fa:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7C:E5:E7:26:44:EE:63:89:30:CB:6F:10:3A:35:D5:B3:51:AB:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:44:28:b4:a6:5b:97:4c:f8:b3:34:6f:6d:60:2e:5b:67:
         0a:57:d0:ce:92:e7:15:fc:df:57:58:bb:d6:f6:8d:f3:73:94:
         62:ee:6f:90:b7:55:cf:38:19:c2:e3:60:a5:2d:88:ad:1d:14:
         ab:af:3f:b3:bb:fb:e7:85:9e:5b:6a:9d:9b:0d:ac:7b:bb:7d:
         18:c8:5c:03:aa:dd:be:7e:da:9b:af:e3:c4:da:86:b8:da:cc:
         ad:d9:03:fa:5b:fd:38:67:19:56:55:00:79:3e:6c:ec:83:5a:
         5a:26:73:93:6b:93:68:fb:8b:db:ef:57:53:3b:5e:fc:60:3a:
         dc:03:db:ba:7c:ae:10:44:a5:18:1f:5d:1d:00:32:ed:28:af:
         2c:15:9c:b3:81:71:d5:2b:af:52:e7:b0:f3:89:df:12:78:a6:
         16:d0:69:27:32:22:c3:f9:82:b4:4d:9a:b3:7d:a5:91:66:86:
         ee:99:05:91:06:84:b1:75:37:10:86:9e:18:ec:3c:37:75:34:
         8f:51:b8:51:fd:38:93:c7:fe:f6:05:df:5b:c2:15:a6:2f:76:
         b8:3e:06:16:65:d7:f7:86:df:c2:ed:3b:f7:ff:b1:2c:bc:76:
         ce:49:4a:31:d9:a8:76:17:21:9b:99:dd:57:e3:4f:45:1e:d9:
         fd:31:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:38 2026 by rpki-client