Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
File:                     40378f11-a3e5-3530-9d69-2b7f814a3645.roa (raw, json)
Hash identifier:          2x0ZDxjr95LmTkKRE2WCoNDDI8dLmuKBy0V9rLi32QU=
Subject key identifier:   EA:05:43:D7:B3:79:D4:9D:23:AC:88:AC:BC:94:FC:26:7B:FA:BC:4E
Certificate issuer:       /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial:       010D0C9F4328584D0D42596F5EE37F85E68BC640
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     399240
IP address blocks:        2607:30c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:59:6f:5e:e3:7f:85:e6:8b:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=a74b5f55-caec-4213-bba9-534306a56eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1a:76:c1:9c:91:8d:5b:35:26:1b:c3:eb:0b:
                    5f:d5:98:d8:2f:97:d1:67:f7:d2:5c:a6:b9:cb:8d:
                    f4:21:32:53:53:e4:09:83:14:45:85:54:73:c1:91:
                    00:f9:e8:22:28:79:06:f0:ee:15:81:78:c1:9a:47:
                    4b:b5:8b:0a:d9:59:cd:51:93:01:57:e7:e7:2e:7a:
                    ce:c2:a8:bf:91:11:e3:cc:15:d9:77:a2:dd:ec:66:
                    21:49:8a:04:4e:e6:97:e1:a0:22:f8:9c:32:8d:32:
                    b3:84:22:59:63:db:1a:5c:25:6c:c4:fe:89:a1:09:
                    df:96:8e:87:0f:37:b4:c0:ed:b3:48:21:15:f2:78:
                    30:aa:de:9b:a8:53:54:7e:3c:83:ce:e1:18:2b:ec:
                    3a:b4:80:17:19:41:00:b8:30:80:55:54:7b:10:b4:
                    d1:e2:1c:93:b9:04:40:17:be:a3:87:53:2b:79:e4:
                    43:1e:88:1f:19:44:c5:1b:0e:88:96:07:e9:3e:47:
                    bf:47:1c:90:e5:91:75:44:e9:a7:c5:31:34:d6:66:
                    25:66:56:48:89:dc:e6:3a:3b:94:95:a1:39:3e:24:
                    2b:56:74:53:b0:ab:74:43:04:ac:6b:d8:1c:7f:e4:
                    5f:b9:44:b9:41:cc:86:a3:17:b5:a1:b9:ec:99:b4:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:05:43:D7:B3:79:D4:9D:23:AC:88:AC:BC:94:FC:26:7B:FA:BC:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:30c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:67:9b:3d:f0:64:1a:df:e0:06:80:3c:07:f9:c0:c5:d4:31:
         16:d2:69:22:36:a1:94:05:4b:b1:3c:ba:be:1e:16:1f:aa:b8:
         62:cd:e0:a9:b7:31:ca:16:3e:01:c6:ff:26:a0:e7:f9:5f:5b:
         b0:88:b1:ca:01:ee:9c:e6:b4:9e:33:d2:20:68:50:37:9b:0c:
         15:1c:b3:39:ec:f7:dd:34:2e:d4:9d:04:fc:dd:89:c0:0c:79:
         3a:c2:1e:bb:e3:15:a3:6e:2f:cd:2c:a4:56:0c:f0:ab:10:3a:
         d9:25:f7:09:05:78:b7:14:e2:29:92:ac:3d:04:22:f9:c6:af:
         2a:22:6e:55:24:c0:a0:05:f2:c8:a0:82:79:ae:64:33:5c:1e:
         2e:95:3b:71:96:ba:be:30:14:9e:f6:49:ad:2b:46:51:84:d0:
         5b:d8:79:14:ba:de:99:f7:ba:7c:3f:6a:31:7d:4c:97:aa:52:
         13:4f:49:a0:ed:7f:91:d3:a9:f8:5a:01:14:ad:f9:30:86:15:
         b5:df:da:f2:b9:60:6b:4e:c9:ed:65:e3:38:30:5a:fe:2f:e5:
         f9:d4:c3:31:cd:f5:35:ae:1a:6a:ba:cc:50:79:39:35:96:59:
         1f:83:57:82:7e:6b:f0:bb:b3:4e:3f:4b:64:9b:7b:40:a6:86:
         df:a6:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:35:20 2026 by rpki-client