Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
File:                     39a9e277-40a2-31d8-afff-e586f0041303.roa (raw, json)
Hash identifier:          DAVyCZ8yK+2U04Z1gXL7urxuCTii5P6ec3OAgxt9AIc=
Subject key identifier:   F7:53:C6:1F:D8:41:54:CE:9B:8E:06:EA:4C:A6:85:3E:D7:89:A3:59
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584F49766C0CED9685165583D01E
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:3403::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:6c:0c:ed:96:85:16:55:83:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a54e303e-ba2a-4932-b2ae-3f8b6f1712fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:c2:ec:00:c9:74:07:a4:4c:da:86:af:7a:
                    e5:0c:ad:d7:d7:94:ca:99:af:dd:40:5b:0e:07:b6:
                    e3:7c:b7:66:37:64:fb:3e:8e:60:e5:e7:45:67:89:
                    a6:7d:d3:89:7f:47:0a:21:02:e0:f8:ed:04:12:a5:
                    40:c4:30:2c:38:8b:61:6e:10:28:5e:26:40:2a:bd:
                    24:05:7d:2e:de:77:93:7b:fa:a4:66:73:1e:c7:e8:
                    66:eb:fb:a5:5e:25:cf:cd:7f:66:d0:cc:be:7d:d4:
                    76:c4:9b:09:bb:b7:55:21:c8:1e:39:f3:81:54:d2:
                    75:ec:6e:22:30:f6:ba:06:f1:d0:69:e3:42:db:de:
                    57:7b:cc:b6:85:90:8e:95:8a:28:37:46:53:c2:79:
                    a0:ca:41:64:0c:c9:29:84:54:ec:92:5b:de:a5:22:
                    8e:0d:e1:b4:9f:26:1f:e3:47:43:dc:72:ee:ec:6e:
                    28:f7:0b:fd:d5:e4:2a:12:6a:4c:df:20:c4:f7:db:
                    54:f0:e7:56:5f:e2:63:81:26:4d:76:c9:c5:88:9d:
                    ed:b9:f4:c7:b8:42:59:ca:a0:0a:b2:00:08:1d:1e:
                    74:eb:fc:36:32:08:8f:48:26:e8:4d:38:5c:1a:77:
                    9b:5f:a6:91:c7:02:f3:15:32:74:36:98:00:1f:2b:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:53:C6:1F:D8:41:54:CE:9B:8E:06:EA:4C:A6:85:3E:D7:89:A3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/39a9e277-40a2-31d8-afff-e586f0041303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:3403::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7a:ed:61:70:4e:f3:2d:8f:f0:67:64:c5:88:d0:b7:27:b8:
         85:3d:6f:f7:4e:96:3f:fe:de:69:29:8a:62:61:bc:1c:d5:9f:
         58:2a:66:4f:33:a1:60:68:8d:5c:e8:03:96:91:35:5f:ae:6d:
         ff:02:38:c9:50:7d:b2:6e:28:fa:7a:8e:a9:93:ec:8a:09:05:
         45:03:e3:91:83:50:f0:19:19:64:6c:ef:50:65:21:11:aa:9a:
         85:7c:0c:bb:2c:43:4a:c7:12:f0:c3:28:fc:86:09:ec:0b:08:
         73:a1:d1:f0:3f:3f:5f:07:56:81:e0:38:8b:32:f8:18:81:54:
         a6:73:bb:ef:80:b4:bb:76:e8:d2:d7:c1:44:07:ef:78:89:bc:
         07:f7:2a:cb:47:c0:e9:42:05:bb:36:cf:f5:a0:18:93:da:77:
         82:55:6a:df:19:ee:24:b4:95:e4:dc:16:b7:78:68:b4:f0:c0:
         6d:a8:2c:10:1b:b1:0d:66:e8:9b:73:e5:a6:b8:58:9a:be:b6:
         81:1a:3e:32:38:b9:b7:f0:09:e6:b5:36:42:55:a7:f3:0d:fb:
         68:41:8b:c6:6e:56:49:f8:51:b6:7c:aa:9b:2c:7f:15:80:bf:
         3d:f8:48:9d:fc:76:ce:c8:dc:b4:cb:7d:da:82:15:3f:00:be:
         50:a1:44:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdmwM7ZaFFlWD0B4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTU0ZTMwM2UtYmEyYS00OTMyLWIyYWUtM2Y4YjZmMTcxMmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8nC7ADJdAekTNqGr3rlDK3X15TKma/dQFsO
B7bjfLdmN2T7Po5g5edFZ4mmfdOJf0cKIQLg+O0EEqVAxDAsOIthbhAoXiZAKr0k
BX0u3neTe/qkZnMex+hm6/ulXiXPzX9m0My+fdR2xJsJu7dVIcgeOfOBVNJ17G4i
MPa6BvHQaeNC295Xe8y2hZCOlYooN0ZTwnmgykFkDMkphFTsklvepSKODeG0nyYf
40dD3HLu7G4o9wv91eQqEmpM3yDE99tU8OdWX+JjgSZNdsnFiJ3tufTHuEJZyqAK
sgAIHR506/w2MgiPSCboTThcGnebX6aRxwLzFTJ0NpgAHytDTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPdTxh/YQVTOm44G6kymhT7XiaNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMzlhOWUyNzctNDBhMi0z
MWQ4LWFmZmYtZTU4NmYwMDQxMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QDQD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACN67WFwTvMtj/BnZMWI0LcnuIU9b/dOlj/+3mkpimJhvBzVn1gq
Zk8zoWBojVzoA5aRNV+ubf8COMlQfbJuKPp6jqmT7IoJBUUD45GDUPAZGWRs71Bl
IRGqmoV8DLssQ0rHEvDDKPyGCewLCHOh0fA/P18HVoHgOIsy+BiBVKZzu++AtLt2
6NLXwUQH73iJvAf3KstHwOlCBbs2z/WgGJPad4JVat8Z7iS0leTcFrd4aLTwwG2o
LBAbsQ1m6Jtz5aa4WJq+toEaPjI4ubfwCea1NkJVp/MN+2hBi8ZuVkn4UbZ8qpss
fxWAvz34SJ38ds7I3LTLfdqCFT8AvlChRGE=
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:52:52 2026 by rpki-client