Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa
File:                     2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa (raw, json)
Hash identifier:          +yIyCbNT1RLAchu4DUwFJ10WAEsrlbOFln4r8pJAFe0=
Subject key identifier:   F0:38:F5:9B:B9:6B:7E:5F:3B:B4:D4:1D:33:17:63:9C:2E:56:34:35
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584AA85BA26F7E17945712B5DA40
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     395437
IP address blocks:        2605:5a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:a2:6f:7e:17:94:57:12:b5:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=d85ef200-cfb6-48df-901b-503a243cac8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:86:6a:29:1c:a6:a5:32:59:ed:3e:ff:4e:
                    0c:01:3d:e9:97:d8:14:c6:e4:89:73:a9:8b:74:f7:
                    9b:c4:aa:af:ac:e5:63:cb:07:e5:c1:d7:0e:3e:ff:
                    63:38:58:28:ca:61:7b:39:a3:5d:ce:d2:65:06:7a:
                    6c:82:2b:03:7c:aa:b2:72:1f:01:5d:cc:78:c2:b8:
                    cb:0c:19:9d:f6:6c:2b:a3:30:0e:4c:2e:27:cb:cd:
                    6c:bb:c2:10:7b:52:27:e8:4b:a3:88:bf:ac:d0:5e:
                    0d:a5:e5:17:5d:8b:b3:02:48:e4:6f:07:7e:9f:3b:
                    4e:d7:b7:ae:36:47:4c:67:a1:25:dd:c1:4c:70:d8:
                    92:3e:ae:f5:7c:c2:42:91:a1:29:c3:8f:9a:64:e6:
                    7c:c9:82:42:e7:a2:4c:ae:4c:e3:98:a1:e2:e5:50:
                    df:0d:55:b0:1c:8e:e4:c3:0d:a7:ab:a5:89:7c:0e:
                    0d:c0:a0:84:a4:09:2e:02:51:1f:4a:1f:97:2c:26:
                    7a:50:c4:6d:24:1d:db:01:07:6d:5d:46:67:e7:41:
                    b7:e7:b0:e6:5f:71:ac:67:df:88:15:75:98:0f:a5:
                    7f:e5:fb:cf:46:b5:e8:ac:64:1a:81:b2:a0:7b:e7:
                    f2:c1:5e:aa:5a:61:f2:c5:55:e7:14:af:34:89:2f:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:F5:9B:B9:6B:7E:5F:3B:B4:D4:1D:33:17:63:9C:2E:56:34:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/2ce662e8-1e6c-3b7f-98c6-5f1164f4dd22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:c3:ba:42:0c:d0:e3:92:c1:46:b0:9e:66:12:dc:ad:3c:
         54:f3:52:0a:f4:59:33:b7:12:78:d2:7a:58:51:8e:15:bf:d8:
         f9:1c:08:67:7d:1d:7b:08:df:45:b9:97:50:f0:fd:cb:47:e5:
         2f:89:fe:30:47:d3:72:d5:cc:fd:fd:68:4e:e8:30:d4:a5:63:
         69:9f:2e:8e:78:0f:2b:99:ac:6b:b8:f8:17:72:2a:65:1c:24:
         de:c2:c7:79:90:7a:b1:3c:3b:25:62:0d:08:9e:22:87:92:c5:
         00:9b:0b:13:a1:41:45:97:20:a2:4d:d8:2a:40:b0:32:86:bb:
         d7:ba:6d:1f:e0:a3:33:48:70:94:07:50:91:63:97:07:3e:d1:
         db:45:8f:33:dc:fa:8f:71:6c:8a:53:76:27:6d:ca:3e:a4:ea:
         02:8d:34:56:22:05:bf:08:41:97:57:12:85:d9:d1:f2:07:ac:
         db:7d:76:d2:c9:1d:c1:68:30:d1:c7:1f:18:99:bb:6f:ed:d8:
         5f:b6:8f:8d:d4:2d:af:00:83:1f:79:f3:8a:07:6a:7f:b0:08:
         77:d2:9e:82:b9:9c:2a:d5:73:7d:b6:ce:c2:ef:da:b5:f2:f4:
         5f:42:ce:2a:50:5a:a5:91:5e:87:43:86:5f:c3:86:29:e9:c0:
         75:a3:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:09 2025 by rpki-client