Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
File:                     f40a319f-feb8-33ea-8a99-b02869d401c2.roa (raw, json)
Hash identifier:          CATntc4+H7QGg20bnF5hmQyj0BvqbpMyJ4kxXL4XZJ8=
Subject key identifier:   10:95:1B:58:6C:CB:CF:6D:0E:AF:F1:48:1F:E8:A8:21:AF:8D:CB:79
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F4328584AA85BBA3150B4E9BC72341BC0
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     39937
IP address blocks:        2607:5240:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ba:31:50:b4:e9:bc:72:34:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=58df3605-fca6-49a0-a0c8-dc8d32070da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b9:a7:83:fb:29:b8:a0:b9:1f:f3:7c:08:40:
                    1d:63:c2:12:31:cc:da:96:41:34:c0:bd:41:fe:ab:
                    80:ba:5c:ba:b9:b7:80:98:91:20:6b:9d:7c:d2:18:
                    11:a5:23:22:45:f4:22:f2:27:19:8d:98:6d:a9:40:
                    88:ec:0c:96:8f:70:7d:8c:2f:b2:d8:5c:34:9c:f2:
                    00:13:8c:0d:8f:52:d5:45:5a:ce:41:4a:cf:5d:08:
                    ed:54:2f:6b:1a:00:5c:18:39:63:88:d7:f3:c9:b1:
                    10:ae:cd:fd:c1:7e:86:90:0c:db:da:76:f5:5a:c2:
                    88:6a:0e:01:0c:8e:ec:cf:e9:d9:a6:d4:8c:11:c0:
                    b7:24:41:69:f4:e2:c9:b7:d9:45:cf:48:82:fe:f4:
                    50:16:f0:90:92:fb:91:61:22:7c:e9:ae:da:2a:74:
                    63:df:54:f7:e7:48:09:e9:d3:70:25:2d:f4:eb:72:
                    75:02:58:33:a3:2f:94:aa:f3:af:bb:ea:a3:23:04:
                    87:59:4c:88:f6:8e:7a:72:76:21:a1:5d:cf:b2:33:
                    3d:77:39:fd:bd:f3:8f:9a:bd:8c:44:ff:0d:99:d4:
                    ee:d4:be:96:99:27:d0:ad:16:f0:e1:ad:e6:cc:fa:
                    12:53:fd:d5:55:a8:73:9f:b5:5f:e8:2b:3b:7a:38:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:95:1B:58:6C:CB:CF:6D:0E:AF:F1:48:1F:E8:A8:21:AF:8D:CB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f40a319f-feb8-33ea-8a99-b02869d401c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5240:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:37:6b:30:19:30:9f:cf:42:a2:f5:c0:a7:05:96:9c:07:bf:
         e2:0c:f0:35:b3:59:85:62:fd:59:4e:f9:52:01:e3:68:64:e7:
         44:90:bc:c0:d4:d2:f2:1b:f7:01:55:f2:48:c4:6d:d9:07:5e:
         12:07:be:72:11:dc:f7:cb:cb:3e:7e:06:87:5e:8d:64:d9:26:
         8a:9e:b5:65:8f:39:00:85:f0:88:a8:1e:cb:96:36:f0:fa:0d:
         49:20:fa:ff:a7:c0:f9:54:12:2e:a8:66:f7:3f:ea:9b:cb:fd:
         06:ca:d6:64:7b:95:cd:cb:18:ad:13:da:99:29:7d:15:5d:d2:
         11:a2:72:9f:de:5b:3c:d3:b2:6d:5a:a0:54:21:01:ec:04:cf:
         43:81:ff:a5:a7:e2:cd:b8:a1:ae:59:94:c4:bc:a5:05:a2:42:
         3f:86:ce:c1:2b:f5:01:26:f4:0d:ab:89:ee:95:3d:6c:a3:36:
         31:c8:2e:93:15:39:84:bc:c8:c3:7b:bf:89:29:8c:65:21:6f:
         64:7e:b4:80:11:1f:28:14:4b:4c:40:96:2c:97:8e:d9:ea:59:
         65:d1:02:13:f5:07:46:eb:0f:29:80:28:3c:94:a3:7f:cb:c2:
         27:f2:e0:42:f7:6c:89:5e:19:62:a6:e3:ea:ce:5e:aa:da:c8:
         a6:d2:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:45 2025 by rpki-client