Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
File:                     d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa (raw, json)
Hash identifier:          hfFsncswQt9uF1ZYxOUkrv/y8y87utv8rwSCpMw1rSs=
Subject key identifier:   BA:37:36:8A:6C:DF:CD:65:38:CA:D6:08:54:6D:26:6E:A7:BC:E3:49
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584B2FC186D9006AFAEEBB3C3260
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397666
IP address blocks:        2602:fd9e:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:86:d9:00:6a:fa:ee:bb:3c:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=13dc9d15-7c50-40f7-9dc5-aa2040dd790a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:24:f4:49:51:09:f2:87:9f:e4:de:1c:e1:01:
                    56:b7:db:86:1a:3d:8c:e6:0e:ea:2f:de:b0:f6:db:
                    ec:9f:94:aa:63:9c:a2:83:31:f7:a2:58:54:a3:5f:
                    4e:d0:c3:31:1a:92:5f:62:b7:3c:bd:d7:f5:a8:76:
                    c4:d8:d7:a8:3c:0c:07:9b:02:ee:f6:74:ce:e1:a3:
                    b7:bc:4b:17:72:82:ac:9f:e8:a4:f7:d0:5f:5b:03:
                    27:bd:f8:4b:56:cc:3f:ef:f3:90:08:13:87:76:1b:
                    98:90:eb:f2:43:57:f7:52:8f:5b:46:7c:a7:5e:39:
                    4a:b9:6f:d6:36:21:01:4c:64:ce:6b:0c:ee:ce:5b:
                    99:43:d2:52:88:68:3b:09:43:84:e9:71:62:24:c4:
                    be:62:49:0b:2f:a8:09:f6:b5:1b:d5:af:26:d8:69:
                    7c:41:f8:a9:a0:98:77:5b:f5:8c:97:68:4e:de:28:
                    5a:d8:e0:13:4a:8a:62:f6:e3:36:9c:d6:09:5b:02:
                    ca:63:ac:bc:83:cf:5c:c8:10:12:9b:63:8f:6e:7f:
                    2d:fe:50:61:e5:e9:03:26:d4:54:80:82:b7:c9:70:
                    6d:c6:df:a4:10:96:6b:71:a4:6a:fe:08:1b:bc:f4:
                    d5:3a:93:d7:71:58:d4:b0:d7:b2:88:e9:9f:91:28:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:37:36:8A:6C:DF:CD:65:38:CA:D6:08:54:6D:26:6E:A7:BC:E3:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/d40687bc-8b22-3cb5-8bb1-15d7445b69ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9e:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:65:8a:bb:85:63:13:b0:90:04:d7:d6:01:57:c1:e4:c1:63:
         c4:16:ac:61:a6:6c:1c:92:40:99:4e:64:59:14:51:4a:55:77:
         eb:ce:31:3a:ca:7b:e0:29:19:d3:69:16:ce:54:a6:9e:5e:a1:
         3f:2b:ee:bb:ac:4a:c6:31:c1:c1:d0:92:36:3a:63:48:c8:9c:
         ca:cc:a0:fc:f5:18:93:24:21:6a:f7:75:0b:f1:af:7e:ee:f5:
         40:05:64:43:ed:0d:be:4f:e1:a2:72:56:88:0e:3a:ff:1b:c1:
         c8:77:92:49:51:8a:d9:78:c6:20:9f:bc:e2:fe:20:27:1b:ef:
         ac:fe:8d:85:ea:89:10:75:da:b7:d9:c5:2e:c3:43:5b:48:73:
         0d:af:74:06:6a:a6:9f:8d:6e:97:4e:1c:3c:12:69:aa:a5:81:
         58:a0:80:b3:f6:05:ee:6c:a0:5d:49:8e:66:c9:bb:c5:6b:0a:
         12:62:66:bd:87:97:08:fa:2d:20:a6:24:c3:37:52:73:e2:ba:
         e9:3f:00:e5:25:65:a4:7d:1a:f1:34:92:ab:82:c5:35:27:b6:
         43:26:16:71:b4:cb:fb:3a:f3:47:a6:00:21:88:03:e1:01:3c:
         d9:0e:3a:7d:88:8c:9d:a3:a3:fc:5f:08:08:c1:70:7c:71:5c:
         07:6f:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:34:31 2025 by rpki-client