Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/9a510bca-aa2e-3485-b744-c13154216e96.roa
File:                     9a510bca-aa2e-3485-b744-c13154216e96.roa (raw, json)
Hash identifier:          z7IA0HP9LwJvE3lrRsh6hPMMFIxfF9Oyma6sSV9H294=
Subject key identifier:   03:85:5E:2E:BC:02:9D:7E:30:D9:F2:B5:6B:95:8F:41:E0:AA:53:60
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584DBE6B215C231EBE48FF9A0D20
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/9a510bca-aa2e-3485-b744-c13154216e96.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     396026
IP address blocks:        2607:fc30:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:21:5c:23:1e:be:48:ff:9a:0d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=3095f55b-0704-44a2-a939-91f887531598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:14:99:82:03:d4:01:c7:06:e3:9c:0d:e1:
                    c5:ff:7d:aa:48:7e:8e:1f:4e:a9:76:10:89:c5:d6:
                    1c:48:62:2d:d6:f2:cc:19:fd:41:42:2d:18:8a:2a:
                    24:82:69:57:85:61:5e:2c:e0:10:e7:a5:15:86:4c:
                    d9:30:58:4b:55:c5:a9:ef:c9:ba:94:28:2f:6b:39:
                    07:4b:14:be:b6:03:95:5f:bf:5f:80:55:0d:0b:e9:
                    4f:d3:ee:44:c5:17:59:1b:e8:e6:2b:3a:fe:41:1c:
                    f5:67:b0:19:15:07:b7:6b:77:69:f7:f6:f2:f1:ea:
                    31:96:f4:f7:5e:df:76:3e:6d:f6:f2:f6:a6:48:1a:
                    dd:d6:73:9e:2c:83:ea:0b:05:06:94:40:21:5f:df:
                    d7:0b:37:e0:e8:b9:c9:0e:69:dd:d2:0f:8c:e6:82:
                    51:e6:4f:6b:fd:75:2c:00:a5:3b:1f:c9:5d:bf:93:
                    06:01:3b:dd:a0:7a:1d:7c:98:bf:81:c4:4e:fc:9d:
                    28:e5:3c:f1:78:a9:1a:23:d2:1e:b4:72:3e:e7:36:
                    33:ec:83:45:e2:3a:85:bf:71:35:ca:2d:6c:2d:df:
                    22:4f:98:e5:8d:82:9a:87:88:98:c8:a6:54:2f:db:
                    9e:35:8a:62:d1:31:af:ca:bf:6f:64:ca:b8:3f:3d:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:5E:2E:BC:02:9D:7E:30:D9:F2:B5:6B:95:8F:41:E0:AA:53:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/9a510bca-aa2e-3485-b744-c13154216e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:88:87:5c:a2:7e:8b:5e:de:1e:4c:d7:bc:ec:76:ee:77:82:
         83:a0:16:8e:be:ce:f0:2c:14:93:49:79:1a:ca:10:5d:7f:fe:
         5c:3c:b5:66:48:08:8b:86:a6:08:02:95:a5:ac:ab:68:50:b9:
         df:6c:15:d1:c1:89:20:f3:89:4c:66:4e:fc:b9:5b:79:4c:ff:
         fb:6c:9f:d0:25:89:94:e9:b8:07:b4:7b:31:83:d2:4c:e4:ec:
         04:77:75:12:af:dd:25:9c:7f:07:81:48:cf:30:89:dd:fd:aa:
         b7:03:4e:20:bc:4e:0d:dd:7f:fc:c8:57:35:f2:56:88:bf:5e:
         d0:6a:a5:15:ba:29:4f:c5:ed:07:06:a0:e3:91:6d:36:06:8e:
         cf:67:7e:e6:51:6d:9e:f5:60:6f:b5:f2:78:0c:9b:74:fa:e3:
         04:98:58:3b:06:11:e8:93:ef:1e:d5:27:cc:4c:fa:4c:e3:35:
         a7:ac:78:51:19:0e:15:d1:bd:9c:fb:98:cc:ad:f6:f8:a6:24:
         5b:c8:9d:f5:97:bf:78:3e:5b:80:65:d8:a2:0f:9d:8a:e0:a4:
         36:39:c9:05:cc:fe:1c:bd:4b:c0:60:ae:da:5d:12:40:43:6e:
         4a:80:f0:6e:7b:67:cc:9c:4e:9b:57:7b:bc:47:37:24:35:3e:
         52:17:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:45 2026 by rpki-client