Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
File:                     39179c1f-cc21-3985-9eb4-794fcf01a39d.roa (raw, json)
Hash identifier:          VIACX1z8LekPwvKf/w7ySdwc9i52ycmj47k+GLIXF0g=
Subject key identifier:   BA:52:58:D3:8B:B6:72:AF:11:03:D9:08:13:22:C4:98:25:9C:EF:42
Certificate issuer:       /CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
Certificate serial:       010D0C9F4328584E5A4A04935820878C9CCD9A00
Authority key identifier: 0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     40939
IP address blocks:        2602:f9f8::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:04:93:58:20:87:8c:9c:cd:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5096d33-7c30-4ece-ab54-55a98cf7f08c
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=1dc6f373-a436-4161-b77f-c9df24a0c76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8d:77:c3:6d:52:04:d8:b1:b6:33:68:fc:de:
                    94:b6:70:14:7b:48:0d:bb:aa:c0:06:fc:9b:f7:38:
                    9a:9b:93:25:46:36:58:cd:3b:35:9d:14:80:94:ec:
                    af:07:c6:ca:e8:73:b3:db:53:90:67:cc:10:5b:8a:
                    e7:71:ad:f4:50:b0:a6:71:c0:c9:f0:99:9c:ed:7d:
                    85:cf:05:34:72:5b:ff:aa:70:20:6e:3f:64:5c:83:
                    67:75:01:18:71:84:c1:44:07:cc:32:cb:d5:01:81:
                    31:2b:e1:a0:c8:44:56:d0:3b:a5:de:56:78:75:73:
                    90:54:d9:83:2f:9a:c2:72:7c:45:96:d3:32:03:0d:
                    1b:62:6c:16:73:ad:29:0b:20:60:d4:1c:b1:34:15:
                    17:18:84:a1:70:c3:f3:4b:a2:b9:56:a2:f7:c7:fd:
                    06:db:8b:eb:8b:df:50:76:b4:fe:6f:a8:e7:14:21:
                    7a:51:c4:04:b3:4f:6d:df:5d:11:ea:3a:f5:02:9e:
                    ac:1b:3c:e8:16:dd:8f:ce:42:66:d8:6d:1f:65:98:
                    c3:35:ba:64:d3:35:b4:f8:b3:7c:f6:bc:f6:0f:7b:
                    c9:86:6b:78:27:0b:98:9b:90:51:cd:f8:7a:22:89:
                    60:dd:60:e8:f2:e8:1c:98:9d:31:e0:ac:eb:f9:2a:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:58:D3:8B:B6:72:AF:11:03:D9:08:13:22:C4:98:25:9C:EF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/39179c1f-cc21-3985-9eb4-794fcf01a39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c/a5096d33-7c30-4ece-ab54-55a98cf7f08c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:3F:19:D4:F9:54:34:10:DD:D4:D7:72:B9:E7:F0:59:D9:5F:22:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5096d33-7c30-4ece-ab54-55a98cf7f08c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:77:b2:8d:8c:9c:f4:06:89:2d:58:02:68:ad:06:f8:f2:
         36:f1:52:e6:94:32:17:ea:ff:ba:04:6b:d6:d5:ee:4e:ce:92:
         02:87:81:c6:bb:f8:87:f2:9c:a2:6c:a9:02:71:e7:4d:4e:ff:
         79:99:be:2f:51:4e:f9:ca:80:cb:df:98:e2:c2:3a:c9:1c:e8:
         c5:48:74:49:79:19:11:cc:c9:f0:9a:61:ee:ec:c9:4f:2e:ff:
         c2:10:58:7b:e5:d2:5d:13:e9:06:f9:26:6c:2e:31:43:53:70:
         20:3c:18:cc:3f:b2:7f:4e:d3:a0:02:61:59:96:12:b3:a2:c6:
         78:fc:07:b7:40:b4:66:47:2d:04:0a:84:fa:ed:8c:ab:b3:5c:
         ab:0b:1d:0f:c4:33:1e:b5:16:06:d3:99:ba:f7:6b:96:24:f1:
         13:ec:d4:01:66:cb:0b:f1:b0:99:d4:91:a6:78:42:d6:c8:41:
         d3:7c:c6:e8:88:92:c0:81:8e:2b:09:3d:ac:a1:4f:94:84:91:
         aa:b9:31:02:de:ee:2b:46:7c:3f:71:03:37:1f:12:88:46:a2:
         7a:77:db:b4:ba:e0:cd:88:d2:80:78:3d:70:d0:f8:2c:73:46:
         19:db:68:1a:74:aa:86:b8:7f:53:5b:95:c3:15:7d:81:d5:76:
         90:b4:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:15:50 2026 by rpki-client