Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa
File:                     1a34a966-44a5-350d-9877-e7f7880cdf0e.roa (raw, json)
Hash identifier:          Ok1JaY2qXEM+s6EKpX6v6O8BlMAS1ELQXt2x8TH5OOc=
Subject key identifier:   2D:4B:E7:73:4A:15:C5:23:77:F9:64:73:E2:CA:40:BE:C9:DC:81:28
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D492A6E3FAEB75CA1BDFE38E0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     398549
IP address blocks:        2605:dd40:2500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6e:3f:ae:b7:5c:a1:bd:fe:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=4fc24629-9607-44f3-a8a6-6800a40506b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:d9:b3:9a:8f:62:91:01:14:ae:7a:b7:98:
                    ac:05:ee:b2:57:fb:62:10:41:59:c7:66:c3:f0:be:
                    cc:1a:36:eb:a1:6e:75:50:3c:d8:63:a1:fb:49:68:
                    83:98:1d:42:c1:82:55:15:73:56:6c:40:f9:09:1f:
                    82:15:f5:bd:b0:08:59:d3:e0:31:d5:3c:2c:18:b6:
                    8b:e4:83:e3:41:bb:70:c7:42:e1:19:55:d6:3c:eb:
                    1e:6b:8c:42:2f:83:02:4f:95:ea:1d:02:71:ad:b4:
                    2e:73:d5:64:29:c8:2e:e2:6c:24:b0:cd:05:e7:92:
                    5d:d2:ee:54:af:2b:53:aa:9a:a6:9c:3b:3a:2b:d3:
                    d0:9a:d1:f2:e5:3a:06:be:bd:2b:c5:1a:07:b5:cf:
                    3c:aa:e7:68:b7:36:36:cf:ba:85:71:af:5c:01:6a:
                    99:35:86:c4:18:fd:a6:79:06:e0:96:9e:64:d2:29:
                    7c:16:99:54:c4:5a:dd:98:2b:da:39:4f:ac:1c:2f:
                    ad:e7:1c:36:e7:2f:b8:69:ba:61:29:48:4b:88:5e:
                    b6:e6:12:1c:b3:4e:d8:87:d5:29:74:d8:af:59:9e:
                    7e:3d:b4:0f:13:de:ae:a9:f6:e4:42:5c:ff:5b:70:
                    1e:27:3e:14:c6:92:ba:d3:e9:2a:f3:a9:43:5a:47:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4B:E7:73:4A:15:C5:23:77:F9:64:73:E2:CA:40:BE:C9:DC:81:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/1a34a966-44a5-350d-9877-e7f7880cdf0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:3d:db:84:14:74:12:9e:d3:6d:0f:95:ee:ae:f4:6b:bd:
         c9:0e:2f:47:94:1a:14:89:19:8a:16:d0:12:68:b5:a5:78:46:
         46:fe:a6:86:43:dc:ef:03:1a:c5:fe:2e:2d:21:c0:41:93:2a:
         49:7a:22:ca:f0:ff:0e:71:7f:b9:63:28:08:c7:cd:00:6f:a3:
         86:bf:11:51:1e:cf:a8:a5:f9:e0:f1:08:97:02:d5:8c:a7:b9:
         48:6a:61:cf:47:78:dd:3a:70:8f:f5:f1:51:0f:54:76:d0:6f:
         ab:86:78:14:a8:5d:fe:fc:40:e1:e0:30:8e:9e:7a:7b:ca:5f:
         ce:10:cf:3c:c7:8a:01:12:7e:88:2b:3f:7e:c0:a4:6d:3b:c7:
         9d:0a:40:56:b0:81:a7:e9:15:ca:76:49:9c:0f:95:4f:4f:0a:
         52:28:99:85:10:18:16:eb:6d:3f:8a:d8:ef:c1:cd:1c:8f:6e:
         35:b5:44:c7:85:b1:ac:57:44:63:d5:f9:9a:60:3e:e8:b7:1f:
         d6:f8:c8:cd:05:9d:8b:04:ac:4d:04:e8:e9:e1:09:24:b2:d0:
         25:7b:4c:d3:5a:93:84:5c:8e:ca:eb:c3:c7:96:b0:32:43:8c:
         b3:ca:bc:6c:94:18:db:94:9e:0e:83:bc:49:ce:47:4f:99:bf:
         3b:61:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:35 2026 by rpki-client