Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa
File:                     40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa (raw, json)
Hash identifier:          0+IUjOAJVQPHNzcLyZzFbK/zhxdaPd7BVV8VMYjG94M=
Subject key identifier:   FA:A3:63:B0:48:F8:AC:ED:FB:A9:CA:81:93:6D:D4:F0:44:A3:B1:5E
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584DB60AD8EB40CDF73CA6A0B740
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa
Signing time:             Sun 03 May 2026 13:00:31 +0000
ROA not before:           Sun 03 May 2026 13:00:31 +0000
ROA not after:            Sat 01 Aug 2026 13:00:31 +0000
asID:                     16509
IP address blocks:        2604:e700::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b6:0a:d8:eb:40:cd:f7:3c:a6:a0:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: May  3 13:00:31 2026 GMT
            Not After : Aug  1 13:00:31 2026 GMT
        Subject: CN=ba3f09aa-4c2f-481b-bafd-c42b07e52d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:0f:26:b5:3a:d8:ef:17:a8:43:8d:76:c0:
                    13:10:cd:a1:2a:3c:ad:c8:43:2f:ab:ba:ed:02:66:
                    eb:c4:c4:5e:19:1a:7d:35:49:54:29:0c:11:a4:0d:
                    84:ff:f2:79:70:da:8f:ab:40:17:fc:f3:a9:68:79:
                    c1:c3:77:32:ea:68:76:eb:82:be:67:65:f7:6b:9f:
                    7e:c8:ce:24:66:27:ac:22:2a:0b:42:8f:71:ac:b7:
                    a0:53:4d:f0:24:f2:42:16:f5:75:12:68:d1:2b:b2:
                    f6:f8:be:83:67:a3:3b:17:66:76:93:00:2b:97:45:
                    a0:1c:6c:6e:df:16:7b:9f:bb:5d:ff:5d:f6:7e:03:
                    f7:0b:91:d4:69:64:9c:9c:94:b0:a2:36:53:0a:58:
                    e2:d9:32:b1:bf:5a:ca:91:0d:77:fd:0f:95:dc:39:
                    c6:d3:dd:ea:02:e6:91:65:68:4a:a2:15:f1:2e:42:
                    1a:17:f6:7c:f1:ee:9d:4f:12:c6:ed:3a:7b:58:a0:
                    25:41:91:a8:f0:ee:49:3f:6b:11:56:84:93:d7:42:
                    3c:be:54:6b:2c:53:34:97:1f:1c:52:78:d9:b6:15:
                    e7:6e:8b:fb:4c:f6:38:24:9a:5d:2e:a4:59:11:57:
                    65:14:3f:b0:da:73:ba:58:a4:79:75:ac:f0:c7:c1:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A3:63:B0:48:F8:AC:ED:FB:A9:CA:81:93:6D:D4:F0:44:A3:B1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/40e611f2-29c3-3353-bd75-fdc4137d4ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:b6:b7:7b:fc:4d:c4:05:63:71:2d:62:b6:a1:7b:18:3a:
         58:bc:43:4e:30:d7:14:58:7a:52:70:f6:5e:03:7b:a2:b7:1e:
         bc:57:9d:b5:66:4c:f6:39:81:df:bd:ff:4c:d2:ad:32:39:4e:
         78:c6:e1:cd:ef:2c:bc:ab:c8:ff:6c:5e:a9:82:87:e0:0d:ef:
         28:49:74:0b:cc:a0:d0:af:50:00:5c:9f:b2:fb:48:cc:f4:42:
         51:7d:3f:87:68:11:79:c5:ba:66:2b:62:5e:68:27:9a:7f:26:
         ae:b1:7d:4c:c1:aa:89:55:a2:bc:24:e6:3b:e8:b8:7c:24:ab:
         27:ac:4a:92:1b:fc:c0:c7:22:c2:4e:c0:e3:a6:41:61:62:93:
         1c:5d:da:9c:69:eb:ee:de:50:9d:67:f5:c1:48:bc:66:1f:0a:
         58:02:28:0a:bd:62:82:4a:3a:5e:14:fc:b6:b7:33:2e:24:6e:
         dc:20:d9:96:30:af:08:cf:a2:90:dd:28:6c:03:30:9b:15:53:
         cf:4d:76:53:ff:91:65:8f:79:b4:c8:78:45:64:97:33:f5:2e:
         b8:f7:92:a5:25:ab:71:70:19:b1:a5:f1:b2:d9:32:15:c1:ea:
         4b:75:c6:c5:1d:d3:3d:14:1a:01:38:16:cc:21:de:f5:58:06:
         03:bc:34:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE22CtjrQM33PKagt0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi
YjQ4MB4XDTI2MDUwMzEzMDAzMVoXDTI2MDgwMTEzMDAzMVowLzEtMCsGA1UEAxMk
YmEzZjA5YWEtNGMyZi00ODFiLWJhZmQtYzQyYjA3ZTUyZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUoPJrU62O8XqEONdsATEM2hKjytyEMvq7rt
AmbrxMReGRp9NUlUKQwRpA2E//J5cNqPq0AX/POpaHnBw3cy6mh264K+Z2X3a59+
yM4kZiesIioLQo9xrLegU03wJPJCFvV1EmjRK7L2+L6DZ6M7F2Z2kwArl0WgHGxu
3xZ7n7td/132fgP3C5HUaWScnJSwojZTClji2TKxv1rKkQ13/Q+V3DnG093qAuaR
ZWhKohXxLkIaF/Z88e6dTxLG7Tp7WKAlQZGo8O5JP2sRVoST10I8vlRrLFM0lx8c
UnjZthXnbov7TPY4JJpdLqRZEVdlFD+w2nO6WKR5dazwx8HQhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPqjY7BI+Kzt+6nKgZNt1PBEo7FeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy
NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvNDBlNjExZjItMjljMy0z
MzUzLWJkNzUtZmRjNDEzN2Q0ZWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5
NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm
YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3
NzNhZmJiNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgTnAAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACx4trd7/E3EBWNxLWK2oXsYOli8Q04w1xRYelJw9l4De6K3HrxX
nbVmTPY5gd+9/0zSrTI5TnjG4c3vLLyryP9sXqmCh+AN7yhJdAvMoNCvUABcn7L7
SMz0QlF9P4doEXnFumYrYl5oJ5p/Jq6xfUzBqolVorwk5jvouHwkqyesSpIb/MDH
IsJOwOOmQWFikxxd2pxp6+7eUJ1n9cFIvGYfClgCKAq9YoJKOl4U/La3My4kbtwg
2ZYwrwjPopDdKGwDMJsVU89NdlP/kWWPebTIeEVklzP1Lrj3kqUlq3FwGbGl8bLZ
MhXB6kt1xsUd0z0UGgE4Fswh3vVYBgO8NFM=
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:33 2026 by rpki-client