Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
File:                     ba968438-1dc4-3db1-a0a1-e4360c977088.roa (raw, json)
Hash identifier:          Eo+HvBaZ0ZFXtbrZ+xBQG/nX+foL1ls3JHlU/AzwMhU=
Subject key identifier:   A8:90:40:F7:B9:6D:DB:88:DB:66:84:87:F0:FF:BD:10:D8:06:98:A2
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584F63F81EDEDE8FE436FCC80C40
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     52129
IP address blocks:        208.84.64.0/24 maxlen: 24
                          208.86.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:1e:de:de:8f:e4:36:fc:c8:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=2d52c4cb-ff09-4781-8f9f-f110d42b4a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:fe:9a:6a:5b:e3:e0:7a:68:df:34:25:64:
                    6f:e9:d4:9d:72:a7:5e:c2:01:e2:0c:d7:61:ea:8a:
                    5a:11:d9:38:13:30:1d:0b:62:6a:ee:a4:4d:a9:37:
                    26:c2:7a:5b:df:6a:94:36:39:38:95:de:a2:54:c7:
                    f8:37:48:d5:42:4b:33:35:f1:22:65:f9:5a:d1:9a:
                    0a:58:44:cb:1b:0a:cf:1d:0c:cb:29:41:76:8f:8a:
                    86:f4:3f:90:c4:9e:b1:a2:7c:d8:ad:fe:1f:c4:f0:
                    e2:4e:b5:fd:be:e5:67:ea:37:7c:45:40:cd:d3:ec:
                    36:a9:af:fb:78:af:6b:8d:91:65:e8:51:30:8f:cd:
                    1a:bc:86:1b:6d:07:80:1b:6a:d1:39:b5:19:8e:ac:
                    e0:32:ab:01:c4:82:77:36:75:b2:8a:d0:9e:35:cb:
                    0b:70:d7:62:96:f0:32:53:4e:18:2d:3b:9e:28:d5:
                    a8:cb:63:cc:f0:7e:28:2e:83:28:0c:0e:ce:83:5f:
                    b9:37:b1:9f:13:16:2b:3a:fe:46:40:8e:0b:44:71:
                    6a:a5:c1:d4:ab:1f:9f:a9:c2:14:9e:c0:e7:af:bd:
                    34:6e:e9:a6:3c:a5:ed:2e:11:17:bd:9b:71:4e:98:
                    87:ed:fc:c4:d9:db:cc:61:25:16:58:82:1a:34:ac:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:90:40:F7:B9:6D:DB:88:DB:66:84:87:F0:FF:BD:10:D8:06:98:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/ba968438-1dc4-3db1-a0a1-e4360c977088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.64.0/24
                  208.86.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:5a:a1:48:95:ba:8d:7f:c3:12:55:61:f2:54:30:42:3d:
         53:be:de:af:48:2a:ea:15:3e:bd:39:08:0b:ac:c6:4e:76:e2:
         dc:ab:2c:31:a0:54:7b:fe:6e:de:a5:da:f9:44:78:d0:6d:13:
         22:87:96:2e:5a:da:fb:4e:e3:8e:af:56:2b:49:af:e7:e7:f9:
         7a:e9:7f:99:32:5f:d8:ff:9c:35:59:a0:38:a8:fc:f5:6c:8b:
         d0:a5:5d:17:05:02:84:7e:0b:e9:d7:2c:46:26:28:50:83:14:
         20:6a:b7:16:cc:18:d9:c1:5c:41:27:c5:84:31:80:96:32:5f:
         b6:81:7d:dd:2d:7f:98:f8:c7:6b:79:af:71:ee:8e:63:c6:76:
         19:70:b4:6f:07:24:72:0d:78:24:f9:08:44:a8:e9:f2:0c:9b:
         9f:8c:5c:c3:8b:3e:e5:cc:de:a7:91:53:a0:4a:27:56:30:6f:
         33:21:dc:bf:ee:0e:2a:e4:fa:90:74:e8:a4:19:ad:3a:c8:b9:
         f9:b4:82:52:b3:93:22:88:76:6e:64:e1:69:d4:72:1e:1e:c3:
         f4:b4:df:cc:d2:9b:b8:ae:ce:45:d7:9d:cb:07:41:81:d1:d9:
         ff:2e:19:b8:a5:ae:5e:3c:12:82:4f:f3:05:b9:a8:aa:a2:22:
         0a:f9:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:07:41 2026 by rpki-client