Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
File:                     42260333-fa7a-3e67-8741-ccb79a740c7a.roa (raw, json)
Hash identifier:          3gIPMajMi0ExA73jPrnYgIO91MI8E3XfM0m5qToXX8U=
Subject key identifier:   82:2F:F2:63:8B:48:65:8F:D9:BB:18:CE:43:9C:9E:24:B5:2C:36:98
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D703FD6CC9164C1CB679D84C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     19437
IP address blocks:        2607:ff00:300::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d6:cc:91:64:c1:cb:67:9d:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=acc7a9f1-76fb-4833-b5ad-5526dbe90718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:cd:e8:b5:1e:bb:f4:74:14:59:90:cd:92:
                    a4:53:e2:f3:ef:a9:a4:6c:73:b6:89:b9:3c:f5:4b:
                    2b:5b:e2:c6:1c:4b:a8:59:60:67:ab:5d:81:e0:63:
                    17:60:b8:36:15:0b:a3:8b:94:9c:ee:c0:f3:f2:83:
                    0d:8d:d2:4c:d0:10:c7:ad:9a:2b:51:86:c3:66:8c:
                    ee:e7:84:10:04:1a:75:4b:0b:d6:49:40:0c:3f:e7:
                    9f:a4:43:21:99:cc:de:7c:03:32:56:62:6b:4a:3f:
                    9d:86:54:5e:12:78:c9:92:40:09:93:a0:0c:29:c4:
                    ec:5a:34:f9:f6:f6:5e:27:42:96:20:3f:61:cb:46:
                    b6:4e:51:88:73:5f:9b:15:48:d5:96:79:ff:7c:11:
                    be:f1:2d:a4:22:f1:19:e9:5c:45:42:d5:90:0a:57:
                    32:76:f1:00:f2:42:e4:ce:bf:6b:40:b7:44:8c:4c:
                    5e:a5:73:f2:f5:2a:5a:90:aa:80:4f:29:05:5f:d0:
                    ef:2d:ae:3e:7a:03:90:7a:47:fe:be:84:95:68:f8:
                    81:8e:7f:9b:a7:8c:c7:7e:48:94:f6:f1:8f:7e:c5:
                    ea:5b:11:9a:ed:3f:78:e6:72:05:97:21:19:53:26:
                    d8:5c:ff:72:9e:b0:bd:4b:7e:db:9d:dd:d2:49:0b:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:F2:63:8B:48:65:8F:D9:BB:18:CE:43:9C:9E:24:B5:2C:36:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/42260333-fa7a-3e67-8741-ccb79a740c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:6d:7f:33:28:ba:60:8c:e6:37:87:58:2f:4c:bf:46:95:
         cf:14:b9:12:d2:4f:43:2b:3c:f6:ee:bd:52:ad:76:47:e5:e1:
         f6:4b:38:d0:da:86:a4:71:0a:d0:fc:d4:39:88:f7:c5:3e:06:
         31:d2:98:dc:57:d6:dc:1c:88:3e:bf:d8:3f:5c:a2:7d:94:cf:
         70:d8:7c:ad:14:c6:d9:72:d4:72:a7:ee:db:8a:f7:cc:a5:3c:
         e3:96:6f:85:74:8b:07:29:55:01:16:d8:a7:84:6e:bd:2b:c7:
         4b:75:a1:ff:93:4d:9f:c7:22:5e:20:d4:a7:66:59:91:6f:7d:
         a8:ea:af:cd:4d:28:ed:bf:4a:84:ad:81:f7:bd:3f:fb:a3:f9:
         90:b9:b9:77:7f:91:ac:14:a5:58:b1:2e:f0:0b:0c:9b:8d:5b:
         e9:fd:a7:dd:39:69:c4:42:7b:e8:b1:eb:c6:fb:cf:f8:3f:e5:
         be:89:33:fe:aa:3b:5f:2a:bb:97:f6:fd:77:d2:a2:3f:7a:b8:
         2c:18:20:db:a4:dc:d7:ba:2b:d0:01:8d:b0:34:4d:4e:67:02:
         e6:bf:76:b9:0c:66:60:97:b6:23:5f:d6:8c:19:e0:36:5d:ff:
         5a:36:6f:77:4d:2d:9d:44:dc:22:0d:ab:7c:89:51:b3:77:b4:
         4e:ea:23:d3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1wP9bMkWTBy2edhMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
YWNjN2E5ZjEtNzZmYi00ODMzLWI1YWQtNTUyNmRiZTkwNzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZnN6LUeu/R0FFmQzZKkU+Lz76mkbHO2ibk8
9UsrW+LGHEuoWWBnq12B4GMXYLg2FQuji5Sc7sDz8oMNjdJM0BDHrZorUYbDZozu
54QQBBp1SwvWSUAMP+efpEMhmczefAMyVmJrSj+dhlReEnjJkkAJk6AMKcTsWjT5
9vZeJ0KWID9hy0a2TlGIc1+bFUjVlnn/fBG+8S2kIvEZ6VxFQtWQClcydvEA8kLk
zr9rQLdEjExepXPy9SpakKqATykFX9DvLa4+egOQekf+voSVaPiBjn+bp4zHfkiU
9vGPfsXqWxGa7T945nIFlyEZUybYXP9ynrC9S37bnd3SSQtjzQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIIv8mOLSGWP2bsYzkOcniS1LDaYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDIyNjAzMzMtZmE3YS0z
ZTY3LTg3NDEtY2NiNzlhNzQwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf/AAMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAet9tfzMoumCM5jeHWC9Mv0aVzxS5EtJPQys89u69Uq12R+Xh9ks4
0NqGpHEK0PzUOYj3xT4GMdKY3FfW3ByIPr/YP1yifZTPcNh8rRTG2XLUcqfu24r3
zKU845ZvhXSLBylVARbYp4RuvSvHS3Wh/5NNn8ciXiDUp2ZZkW99qOqvzU0o7b9K
hK2B970/+6P5kLm5d3+RrBSlWLEu8AsMm41b6f2n3TlpxEJ76LHrxvvP+D/lvokz
/qo7Xyq7l/b9d9KiP3q4LBgg26Tc17or0AGNsDRNTmcC5r92uQxmYJe2I1/WjBng
Nl3/WjZvd00tnUTcIg2rfIlRs3e0Tuoj0w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:07 2026 by rpki-client