Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
File:                     678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa (raw, json)
Hash identifier:          ayQt/hNeXhzXOB6NI9CZ23WSf9FB1S7WrwKMeYRiSz8=
Subject key identifier:   16:2B:7B:D7:63:60:C4:98:F6:53:FA:D7:CA:27:EB:F0:E8:C4:CE:66
Certificate issuer:       /CN=48f56219-8ac3-430e-90fc-cf0aea21115d
Certificate serial:       010D0C9F4328584F0ED22E02B80CCB603AFEAA00
Authority key identifier: C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     402714
IP address blocks:        206.197.76.0/24 maxlen: 24
                          2602:f368::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:2e:02:b8:0c:cb:60:3a:fe:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f56219-8ac3-430e-90fc-cf0aea21115d
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=efff9801-88f6-48bb-b868-cd1243b6bfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:c9:90:0f:82:3d:bc:9d:65:6d:d5:63:a3:
                    6a:01:ff:ae:1f:86:63:99:73:a6:a0:1c:20:d8:6a:
                    1b:98:9d:91:ba:80:bc:20:4d:7d:1b:03:53:8c:69:
                    d9:90:0b:81:7d:c0:fc:86:13:41:f7:1e:f9:30:34:
                    85:36:94:52:ea:cc:74:c7:53:9b:d2:68:85:72:ae:
                    eb:e5:9f:df:43:a2:08:15:7f:34:c7:8f:7f:17:44:
                    59:92:8c:cc:ca:f3:d1:66:e2:27:29:59:8c:d6:e3:
                    48:10:2f:6f:5d:8e:2c:5a:f8:98:38:0e:db:9d:80:
                    e9:a0:ed:86:f5:bc:21:03:fa:e0:40:43:d6:a7:45:
                    65:6a:21:12:01:7b:a3:a0:92:8c:42:5e:23:19:4f:
                    26:10:43:54:1d:12:99:77:f3:de:6b:a7:b3:fb:61:
                    6b:34:ff:d6:d1:07:3c:bd:f6:84:d2:40:94:3e:8a:
                    07:c6:e4:5b:67:10:f4:c0:53:17:8c:67:4b:42:65:
                    f0:41:b2:80:5e:c7:ab:47:0f:cf:d9:ef:2f:08:d6:
                    bb:d9:e3:35:34:64:a6:0d:d3:6f:ec:dc:a7:d0:ba:
                    4c:e7:cd:84:9b:45:9a:4d:74:9f:a6:15:e9:f4:4b:
                    db:41:7d:ae:30:56:87:45:9c:47:0a:97:2a:e5:4c:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:7B:D7:63:60:C4:98:F6:53:FA:D7:CA:27:EB:F0:E8:C4:CE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/678b9ba8-4625-320e-bf3b-d4c68be3aee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d/48f56219-8ac3-430e-90fc-cf0aea21115d.crl

            X509v3 Authority Key Identifier:
                keyid:C0:0D:AD:80:EE:3D:74:80:40:FD:74:D7:6C:E5:6B:15:44:79:C5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f56219-8ac3-430e-90fc-cf0aea21115d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.76.0/24
                IPv6:
                  2602:f368::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:39:ed:88:b8:1b:33:99:dc:ca:28:50:a3:2c:e9:48:63:5f:
         a5:2b:90:07:8f:f4:84:4b:63:9e:ab:14:33:7c:bb:02:6b:81:
         26:30:95:e7:e4:7e:d1:7c:08:63:ba:66:54:1d:86:ce:b5:a7:
         77:d8:8b:8e:1f:26:d9:a9:02:39:67:25:e0:56:93:30:f9:a2:
         19:bc:50:9d:0c:57:0e:a2:89:08:55:27:5c:57:75:22:b3:2f:
         8d:26:fb:5f:6c:5c:54:74:93:b9:00:bc:a4:9f:0a:50:a9:85:
         49:f3:fe:88:8e:63:5f:d7:c7:ca:f5:82:13:b9:c4:f3:e5:75:
         79:21:3d:23:96:9d:a8:b7:3e:31:66:9e:71:26:da:80:75:04:
         e3:c4:bb:4b:2d:3e:8a:62:bc:9b:35:8a:85:42:17:0d:74:a2:
         1d:cf:ab:32:e3:bf:97:5f:d2:fb:4d:25:b8:38:69:a9:e0:08:
         61:33:f7:87:11:bf:af:08:85:09:50:6f:62:66:42:64:62:e2:
         0b:4f:6a:2b:dd:a7:7d:49:6e:f2:26:6d:a3:e2:18:bb:f8:66:
         54:89:37:4e:59:1b:8a:67:7d:1c:de:71:2a:ab:80:77:f7:02:
         b3:15:48:8e:01:6b:43:35:af:ff:13:12:92:3b:a1:45:99:63:
         a8:e5:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:50:48 2026 by rpki-client