Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
File:                     40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa (raw, json)
Hash identifier:          6xubwtqBW4wYwjKSkRhF3qeewI34C3X9Q13j9M3zhPI=
Subject key identifier:   E9:DC:46:54:37:1D:4F:55:7B:BB:FF:AD:53:3B:30:A7:24:6F:46:EA
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584D98BAA6B3ECC1905F9D6E1C00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     3257
IP address blocks:        2001:49f0:d129::/48 maxlen: 48
                          2001:49f0:d12a::/48 maxlen: 48
                          2001:49f0:d12b::/48 maxlen: 48
                          2001:49f0:d12c::/48 maxlen: 48
                          2001:49f0:d12d::/48 maxlen: 48
                          2001:49f0:d12e::/48 maxlen: 48
                          2001:49f0:d12f::/48 maxlen: 48
                          2001:49f0:d130::/48 maxlen: 48
                          2001:49f0:d131::/48 maxlen: 48
                          2001:49f0:d132::/48 maxlen: 48
                          2001:49f0:d134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:a6:b3:ec:c1:90:5f:9d:6e:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=177a0ffc-3b2c-4b00-9229-0e119c942b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:65:af:22:e1:63:a7:43:be:97:22:81:c7:
                    b6:6e:07:45:bd:4a:1b:b1:3f:4b:73:da:3d:bd:3f:
                    91:c1:8d:61:87:16:92:53:e5:e9:7e:87:7a:8e:49:
                    08:c0:77:f8:47:44:82:33:48:fe:99:7f:8c:44:c4:
                    9a:11:51:7e:18:40:1b:ae:3a:6c:be:2e:61:79:00:
                    ae:02:bf:48:a9:8d:26:c6:60:bc:e6:56:b5:bf:fe:
                    c8:a7:11:46:73:7f:a0:f6:e6:98:cf:20:96:91:15:
                    e5:69:90:d6:de:8c:28:9a:42:b6:ac:da:37:5d:90:
                    f6:3c:f1:fd:da:19:5c:71:2e:1e:3e:f2:bb:99:40:
                    cd:14:79:12:f7:b8:d0:16:0b:ba:7d:0a:bf:4d:bf:
                    a9:15:91:93:4b:bf:00:23:0c:c7:a6:c6:ba:8f:90:
                    b7:65:14:19:96:9d:07:05:33:db:c0:a6:da:da:ff:
                    86:da:a8:11:ab:35:6b:34:97:28:65:a9:1f:ff:ec:
                    df:c9:ad:68:22:ff:08:1d:e2:1c:b4:2d:0a:4d:3f:
                    ad:f6:ce:76:7a:13:97:8e:f2:33:a9:1b:1c:4d:e0:
                    10:74:f6:db:c6:e7:a8:1e:26:1e:2a:4f:42:b4:75:
                    0a:8c:1a:f9:b6:15:f4:13:5e:59:d8:91:3c:34:f0:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DC:46:54:37:1D:4F:55:7B:BB:FF:AD:53:3B:30:A7:24:6F:46:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/40ee2efb-bdf5-33fb-8633-022bebcbb11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d129::-2001:49f0:d132:ffff:ffff:ffff:ffff:ffff
                  2001:49f0:d134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:fa:12:58:51:55:ee:ac:65:fb:8d:e3:17:fe:e2:a8:85:
         72:67:ee:9e:48:d5:9b:d2:fd:60:d1:27:a2:14:15:15:ec:1a:
         3f:75:4d:f9:38:72:6e:58:0a:97:52:aa:84:bb:3b:f1:b4:ee:
         67:a4:84:0b:40:41:55:dd:b5:13:cc:e7:dd:8f:e3:16:0a:b5:
         c6:25:c0:1d:e0:d5:46:16:0d:c2:ed:ff:cd:ea:cf:7a:45:44:
         cc:b2:6b:36:49:76:c9:f5:15:5f:47:c0:6f:6e:d8:5c:b9:6f:
         f8:d7:29:f8:e9:f3:c3:6a:0f:59:04:56:24:ca:96:57:d5:fe:
         3d:b4:ca:cb:da:e6:dc:e7:ad:49:4e:15:b9:ca:15:cb:44:e5:
         77:9d:e9:4c:1f:ae:2b:45:c8:3a:88:f4:61:cd:73:fa:20:51:
         d7:68:64:a1:2f:1c:0c:70:41:92:70:25:7a:93:78:14:f2:98:
         eb:19:38:5b:3f:cf:86:88:4f:d4:39:4c:b3:00:13:cb:16:17:
         0e:c2:a6:de:47:52:3e:98:10:cf:cb:b8:40:4d:49:bd:ef:80:
         15:8a:81:19:52:d8:e2:73:6c:e2:54:31:1d:07:24:38:79:71:
         c6:e0:3d:cf:74:1c:55:3f:ae:33:eb:91:b0:a3:cb:8a:3d:8c:
         9d:59:52:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 06:52:50 2026 by rpki-client