Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa
File:                     7f753e12-673a-3a2b-9155-84fc15154977.roa (raw, json)
Hash identifier:          SpbLbQgonLV+fQTzxI6IoasF1iBC8RAYh3z5lvP9lMg=
Subject key identifier:   5D:07:29:4F:31:3D:9C:D2:EE:F9:A9:F6:E5:91:C7:84:3B:51:47:70
Certificate issuer:       /CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Certificate serial:       010D0C9F4328584EA790331D7B945AC7298B8100
Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46696
IP address blocks:        2607:e100:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:33:1d:7b:94:5a:c7:29:8b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=38734fae-305d-4fb8-b01a-5f1ca9643ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:06:6e:a1:12:d0:4a:9c:b9:6a:ab:56:1f:53:
                    02:8c:67:91:0e:5e:0e:a6:83:9c:fd:e0:aa:7c:29:
                    a9:93:7c:1e:e4:5d:34:e5:f3:48:14:29:fe:6d:87:
                    e7:86:5c:10:0f:07:f1:a4:42:36:37:0c:59:cf:05:
                    2f:e2:f8:8c:b6:16:c2:e9:cb:11:45:93:3c:e5:df:
                    93:d6:16:f8:53:fd:b5:36:8f:fc:bf:8f:8a:99:99:
                    8f:29:ba:f6:a8:a6:0d:4a:b7:5a:28:39:e3:1e:36:
                    bb:f3:e3:72:bf:37:dd:a7:10:ef:e4:68:31:d1:f2:
                    f1:4f:3e:27:f9:f7:fd:45:5f:40:7d:44:68:73:e1:
                    1a:2c:c2:6a:11:d0:b1:41:ad:ee:35:26:67:98:88:
                    18:76:cc:ae:5e:50:06:34:30:9d:d5:31:72:20:de:
                    be:a3:84:f7:e2:df:61:ec:8c:fd:2a:e5:87:72:cc:
                    fe:3b:d7:00:5f:f1:ef:b8:6e:77:da:46:c2:eb:69:
                    f2:50:ac:4a:9d:d5:bb:fb:0a:e3:e2:74:76:9f:33:
                    5e:fe:52:e9:3c:79:bd:70:eb:64:a2:e8:38:b7:61:
                    11:46:25:12:15:02:e7:4f:17:9f:67:16:79:09:8c:
                    54:82:b7:69:17:fc:70:60:a2:54:11:ac:53:6a:7e:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:07:29:4F:31:3D:9C:D2:EE:F9:A9:F6:E5:91:C7:84:3B:51:47:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/7f753e12-673a-3a2b-9155-84fc15154977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl

            X509v3 Authority Key Identifier:
                keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e100:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:05:b4:12:9b:45:93:0a:d2:3d:57:46:01:43:87:fc:7b:89:
         a4:bf:a6:ea:63:d8:c3:31:b4:9d:c6:66:e3:6d:d6:00:07:7f:
         dd:a6:3c:2c:e4:01:c8:7a:6c:f5:79:c5:a6:57:f7:20:b6:00:
         1a:f6:9e:77:a5:cc:d8:f4:cb:7b:6e:c9:6d:4a:a8:bc:c5:b8:
         f4:32:88:55:5f:d6:2f:c7:0d:74:38:83:0d:f0:4c:5f:8c:e2:
         24:11:70:f0:65:14:03:69:84:89:cf:b6:32:51:68:8e:42:1c:
         c9:72:3c:3c:12:0e:1c:01:8a:b0:c7:77:2c:30:b1:03:35:2e:
         39:88:d9:20:3b:0f:e6:96:64:16:0e:bf:48:3f:8c:77:1c:e6:
         8b:3a:61:aa:21:0a:5d:91:6e:7c:bf:3b:e8:ed:27:08:94:6a:
         4a:bd:07:09:a1:89:c5:1a:c4:6f:f5:51:e4:d1:13:9e:8b:1c:
         43:27:0a:5e:74:70:93:4e:2c:b6:a3:55:2e:92:52:62:c0:2a:
         00:6c:d1:41:23:df:7a:cc:01:74:83:ae:42:fc:09:a1:f3:8b:
         cf:a7:7a:74:b4:94:e7:04:a0:3d:6b:2a:d5:a8:fb:f7:34:9d:
         c4:6d:d9:d7:bd:fb:6e:48:e9:c3:0c:f5:00:d7:fb:b2:ef:12:
         04:c3:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:49 2026 by rpki-client