Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa
File:                     4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa (raw, json)
Hash identifier:          ibsisZII3HTgcwA2eJgliQCBclU6gkQMBhHxSTR8PtQ=
Subject key identifier:   F2:66:9B:4F:88:19:75:22:A4:52:53:9A:F9:71:92:D6:9E:74:45:C3
Certificate issuer:       /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial:       010D0C9F4328584EB416F47C1E9E5DFE1AE21E80
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     55039
IP address blocks:        2606:4b80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:f4:7c:1e:9e:5d:fe:1a:e2:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=ca186cd2-d240-459d-ad1f-450a91331ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:95:5b:b7:6c:e4:0b:ae:a0:20:f5:55:d4:7b:
                    19:48:a9:4d:33:b8:d5:db:87:b4:31:51:01:ef:7c:
                    d5:ce:69:5c:3f:b6:14:77:74:41:0e:4f:ba:89:a5:
                    8f:00:16:d5:47:5c:7f:51:75:d2:ec:19:60:10:76:
                    09:f1:80:a0:ff:8c:c4:00:16:71:a3:36:79:04:99:
                    b9:0a:85:8f:eb:b6:cf:01:4a:7b:d5:b0:a8:67:98:
                    6d:8c:17:c4:01:43:3c:30:40:32:6f:8d:2b:24:cc:
                    19:f0:8e:d1:11:68:d1:f0:53:5d:db:bd:eb:93:71:
                    20:36:20:e4:5d:a6:c8:24:8d:36:57:cc:18:37:4a:
                    6e:68:43:c1:85:5e:37:70:61:65:6b:d8:46:97:f1:
                    7a:c3:be:2b:70:eb:b4:c6:39:a0:ab:a9:1c:01:ec:
                    c0:ac:15:4b:1b:a0:09:f9:57:a8:67:84:24:8a:2f:
                    9a:05:c6:47:11:a2:fd:34:78:ff:07:d9:1e:99:20:
                    1b:52:d3:88:97:cd:ee:e2:be:d2:4c:03:4c:e9:b6:
                    4c:a5:0b:63:e8:4f:c5:a3:98:8e:34:a8:7b:a9:8c:
                    45:5f:98:34:22:d7:2c:4e:f4:bd:7a:89:42:6b:90:
                    e3:94:be:05:0d:64:d3:e6:6e:df:99:fa:d6:ea:5e:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:9B:4F:88:19:75:22:A4:52:53:9A:F9:71:92:D6:9E:74:45:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/4ba56cc1-9cd4-3f47-97cd-a0b1121acb8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl

            X509v3 Authority Key Identifier:
                keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4b80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:97:4a:fc:0b:db:15:73:db:c2:f8:8b:34:cf:fb:84:56:
         6a:11:9d:f6:10:46:1e:32:4b:4a:53:7f:19:a7:74:62:b4:ca:
         15:0b:a9:93:38:92:c8:8a:5a:87:61:28:19:f2:99:6f:5e:b6:
         28:67:30:b4:68:59:5b:a3:78:83:b9:0e:21:21:50:a3:32:a5:
         67:35:10:f9:ef:ed:fb:85:fb:11:72:8c:fa:db:81:52:4a:2d:
         0f:d5:f8:3f:a4:99:39:b7:61:b4:98:29:6e:d5:fa:0d:c8:5f:
         05:e3:21:7f:71:19:f5:4c:8a:05:cf:9d:3f:53:0c:5a:5b:ca:
         94:a6:81:00:ff:5a:a7:37:9b:1d:65:12:ac:29:1b:91:a2:40:
         85:75:56:0e:7b:6a:f6:50:ff:44:5e:58:07:72:94:72:af:5b:
         c1:66:3b:d2:71:20:f2:d8:80:3c:22:a6:e9:8b:81:bf:7a:11:
         af:2f:9b:ea:f4:d0:73:0b:60:fa:1d:1a:7f:44:f7:8d:0e:f6:
         49:55:d8:67:5f:f7:52:58:3b:17:4c:8c:d8:c3:6b:5f:58:71:
         38:83:7b:fe:37:23:13:0f:50:5f:90:c7:d7:e5:e2:83:50:94:
         cc:22:7a:42:9d:e2:8c:df:c9:5b:07:f0:1f:84:23:a4:c5:a8:
         33:13:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 13:20:08 2026 by rpki-client