Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
File:                     f40a319f-feb8-33ea-8a99-b02869d401c2.roa (raw, json)
Hash identifier:          NYR9CRySmJmvYhkXSwNABV1rcofonGLdUX3UNEDDK78=
Subject key identifier:   47:E9:C8:B5:64:03:61:2C:CC:0E:73:7E:E2:E3:34:24:11:A7:DA:10
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584D492A73EF3BA3F0370371D740
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     39937
IP address blocks:        2607:5240:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:73:ef:3b:a3:f0:37:03:71:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=6b246f9d-6f96-428c-9d97-cae83e2587c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:0e:d6:5b:3f:f5:e4:af:7a:b4:ef:0b:bb:
                    70:17:a6:ce:b1:6b:c5:30:09:38:e5:64:4b:b4:ab:
                    56:b8:b4:51:05:5f:a6:d7:0b:cd:43:c0:ab:72:a4:
                    e8:c7:5c:47:4c:ea:26:90:fb:bc:64:48:4e:3b:b0:
                    47:b9:35:83:10:7e:ab:93:95:0a:5b:c6:2d:d9:3d:
                    e3:ad:58:89:b1:42:47:6c:c0:3d:35:25:76:6f:7e:
                    e2:4d:f8:b5:62:29:f1:ed:7a:7f:ce:b2:65:88:2e:
                    54:40:3d:ad:06:af:81:7b:5f:a3:c0:82:d8:e1:f1:
                    ee:c7:b6:73:de:79:9f:83:a9:8e:82:c6:ad:98:8c:
                    f3:4c:91:33:cb:12:2c:72:77:4d:1d:85:58:c9:d7:
                    47:9e:9e:bf:78:4c:d4:d8:80:0c:ff:4c:c7:75:4f:
                    94:b8:29:7f:52:b6:f7:b3:29:53:3f:90:d7:d6:40:
                    12:2d:02:c8:61:71:22:27:16:02:d9:64:e3:3d:d9:
                    19:9f:9d:16:62:4e:ff:97:48:b6:69:66:09:08:61:
                    5e:6b:81:1d:17:8d:3f:87:b0:53:55:4d:b6:2f:d2:
                    fd:76:6b:26:f3:29:78:6c:fd:a5:8c:78:8e:89:05:
                    b0:9d:b9:ee:f6:1b:e9:03:b6:26:d1:3d:ea:d3:66:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:C8:B5:64:03:61:2C:CC:0E:73:7E:E2:E3:34:24:11:A7:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:99:bf:b8:cc:b0:d8:c7:17:f4:65:68:14:54:53:61:e5:2d:
         65:69:bb:ba:5d:3e:b4:14:eb:fb:23:01:6c:68:92:4d:df:15:
         93:8d:8e:49:59:d7:1d:82:87:77:02:b5:d0:1b:af:0b:da:4d:
         1b:96:30:57:ef:d8:d5:8b:73:ad:66:69:02:dc:70:8e:8e:02:
         99:7f:05:93:e5:60:ad:dd:af:79:9b:df:ef:b3:30:46:d9:4b:
         3b:35:aa:04:76:b5:69:c4:cc:c2:10:c2:4a:d5:9f:45:f6:1b:
         d0:16:08:f2:12:db:45:bf:59:77:75:5b:ef:3e:9c:c5:7d:fb:
         d6:a2:70:91:43:cb:2f:00:99:11:44:5e:4f:a5:4f:33:b5:42:
         b1:d5:0c:70:31:3d:d7:b4:b0:aa:e6:28:4e:c2:07:93:99:1d:
         e4:84:7c:ae:a2:ad:18:2a:71:98:a1:d0:cd:c8:01:a6:e2:2e:
         ba:15:93:9f:85:70:ca:56:02:d2:b6:27:23:54:81:7a:91:2b:
         d7:5e:62:85:77:d7:25:99:f6:7d:7d:d0:bb:f3:07:99:ec:4a:
         06:9a:a4:f8:7f:63:a3:4a:55:65:7e:f3:f9:85:49:57:b6:bd:
         54:c8:05:23:c0:77:0c:4e:1c:af:ac:28:48:fa:f1:92:2a:ea:
         d7:b6:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:01 2026 by rpki-client