Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa
File:                     a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa (raw, json)
Hash identifier:          hNHiLsGAyjwSSifPkPn8+1Ih7y6Cy5UbR32xIHGFB3o=
Subject key identifier:   7F:55:9E:1B:D4:68:90:13:6A:39:18:40:BA:F8:82:67:31:3F:D4:EF
Certificate issuer:       /CN=39812a66-44de-45e0-a65d-fd3a7673a954
Certificate serial:       010D0C9F4328584E97B50BBB0E2F17C186DB0300
Authority key identifier: 8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     401574
IP address blocks:        2607:39c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:0b:bb:0e:2f:17:c1:86:db:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39812a66-44de-45e0-a65d-fd3a7673a954
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=a7fc4cc0-8ae1-4cd2-bbfb-d3ead0ea2bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:4d:2f:39:87:de:6a:22:77:32:f3:0a:a8:
                    b9:03:f9:c4:8b:b5:9f:27:66:57:ed:99:1e:b7:1d:
                    bd:a6:ff:15:53:86:ca:56:f4:a3:e3:be:3d:2e:2c:
                    6f:7a:7a:2f:0f:24:11:eb:9f:2f:6e:3e:89:a9:12:
                    79:3f:6c:5a:e4:ad:58:e7:ec:9d:85:78:c5:30:fe:
                    b1:5e:c3:60:89:e8:6b:05:1d:4a:14:ee:14:c4:2e:
                    19:2f:52:c2:ec:fc:69:15:06:b1:45:bb:38:a4:eb:
                    cb:7d:8f:b4:4f:e2:7f:72:b3:79:64:37:74:ca:4a:
                    de:8e:c9:86:ed:bf:66:08:66:04:5a:95:d2:d7:a8:
                    71:10:2e:40:36:d7:16:59:41:5c:67:24:bb:69:ab:
                    52:f0:b8:15:72:4d:ac:a8:87:41:7f:dc:be:c3:a9:
                    fb:e0:d3:fd:f5:bf:20:d2:81:60:ef:35:0f:90:96:
                    ee:92:9d:0d:48:a5:19:81:66:6d:e9:9b:c1:8e:5a:
                    99:f1:a3:d0:9c:df:32:e6:ed:02:3f:09:1b:40:16:
                    10:58:b5:f2:61:2e:d4:39:88:89:20:c4:3f:98:3b:
                    9d:12:e3:30:62:f5:71:8c:c9:e1:32:11:f0:2c:34:
                    67:e4:ff:9b:71:00:5f:6d:5b:cd:25:aa:79:a2:74:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:9E:1B:D4:68:90:13:6A:39:18:40:BA:F8:82:67:31:3F:D4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/a3948dfb-cd61-312c-bfa1-219db2fa0aa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954/39812a66-44de-45e0-a65d-fd3a7673a954.crl

            X509v3 Authority Key Identifier:
                keyid:8C:B9:CD:61:0D:4D:2F:72:85:2B:F0:01:D2:9B:B9:E9:9D:DF:98:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39812a66-44de-45e0-a65d-fd3a7673a954.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:39c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:95:c7:26:33:b1:39:c2:fb:41:e5:00:ff:77:04:19:a8:
         d3:30:a5:0d:52:5c:20:9a:ec:09:51:a9:59:9e:76:4c:77:ad:
         5c:c3:a8:23:d8:f7:66:64:84:8d:fb:8a:aa:52:32:b4:e4:45:
         51:70:a0:04:17:25:4d:42:53:a5:41:8c:f0:a6:ae:c3:2a:21:
         86:30:0b:7b:83:c3:73:81:62:c3:22:aa:2d:d3:2b:f7:b9:4e:
         c3:c4:14:b1:53:76:2d:69:e9:40:e5:e4:be:fd:48:9c:75:04:
         93:c1:45:da:01:51:8f:e9:74:0e:86:21:59:91:de:b2:6c:83:
         98:b0:34:61:e9:ed:b9:58:6f:3f:21:6b:4f:9b:87:71:9f:a7:
         ce:b3:54:96:8d:dc:f0:92:ac:34:6b:2f:09:dd:34:0f:e3:40:
         4a:f7:9f:d4:15:fd:58:10:6e:7c:8d:1e:71:3a:57:7e:d2:d5:
         7a:fd:0a:d3:e2:63:73:9f:12:c5:6b:38:d0:6d:6d:d5:f8:90:
         6f:17:0d:1c:fa:a7:6b:a9:9b:4c:ba:b7:90:97:c7:05:dd:c5:
         21:86:ef:30:09:73:d3:b3:3e:40:85:89:4e:98:66:7a:f1:a0:
         6e:50:63:71:eb:09:82:89:ae:c3:40:4e:17:ad:28:00:5e:e8:
         96:3f:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:45 2026 by rpki-client