Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba30f4db-ea0c-3ff9-bd63-025cb1586e28.roa
File:                     ba30f4db-ea0c-3ff9-bd63-025cb1586e28.roa (raw, json)
Hash identifier:          JuUIdO2FczC4OB+01EJbudFv/zFoOoR67nXBg8Q1pZE=
Subject key identifier:   1E:B8:80:80:C2:18:D2:75:B4:2C:8C:F4:D6:7D:AE:FD:53:49:D1:89
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F15CD047852EBCA6CFD523D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba30f4db-ea0c-3ff9-bd63-025cb1586e28.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     21769
IP address blocks:        66.78.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:04:78:52:eb:ca:6c:fd:52:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=61a76b95-3e84-46bb-b309-b5c0bf4b41f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:c3:4e:ef:69:1c:22:56:0a:52:b7:19:94:
                    0d:ca:ab:44:a2:be:fe:53:88:7c:04:6d:b4:a9:5b:
                    63:81:a5:84:51:9d:31:5d:da:58:84:28:0a:3f:75:
                    51:f6:eb:ef:ad:0b:82:eb:2a:36:12:5e:0b:f1:d8:
                    bd:26:1c:0f:ee:dc:fd:15:48:f9:ac:bb:ff:f5:e1:
                    15:af:7f:42:c4:0f:d7:50:f1:37:c2:4c:29:de:af:
                    a2:d1:96:90:3f:64:7e:c2:ca:32:0c:5d:e1:f8:01:
                    99:6c:01:bd:42:6a:4a:05:3d:63:ad:0a:7d:0a:4b:
                    86:ae:f6:f0:e5:94:15:19:5f:a7:b9:e7:11:81:89:
                    82:e9:c8:c5:67:10:d1:6d:47:2c:46:65:b6:ef:0c:
                    9f:f8:68:ca:39:64:db:98:5d:1b:0d:95:bd:9d:55:
                    9b:e4:79:de:c6:a6:7e:6d:2d:81:65:92:da:9e:a5:
                    87:91:90:67:3e:07:e8:d8:70:58:f7:f5:a6:98:bf:
                    aa:4a:51:48:13:79:ad:7d:03:d5:58:f1:41:74:35:
                    f1:90:fc:fc:ef:58:e6:1c:e7:64:33:85:bb:b8:f2:
                    40:4e:39:77:de:d1:56:e5:b3:f0:c4:c2:81:5f:aa:
                    c0:3b:81:bd:07:08:f5:9a:f1:19:87:f6:ae:73:85:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:80:80:C2:18:D2:75:B4:2C:8C:F4:D6:7D:AE:FD:53:49:D1:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba30f4db-ea0c-3ff9-bd63-025cb1586e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:99:39:ed:65:0e:17:f9:7d:e3:cc:f9:2c:cd:9f:e6:26:8e:
         95:2f:dc:27:49:66:ca:d9:91:ab:c2:a3:80:3d:ec:4b:9a:f5:
         73:2e:fa:78:1f:1a:bf:db:7b:90:60:68:91:a1:a8:f4:fe:76:
         d9:29:8c:47:6a:04:1b:bd:8c:8c:26:b1:c9:fe:7c:a6:b5:06:
         81:14:38:94:2c:4a:3a:21:ac:ca:a1:fa:86:a6:8f:26:53:23:
         04:31:26:78:1d:6a:6c:b5:e2:f6:71:00:f3:01:2e:3a:2a:c3:
         c2:07:a4:6a:bc:98:96:c3:11:eb:2f:2c:78:91:ec:cd:df:60:
         76:f1:5a:3a:4a:f5:34:f4:6e:cc:47:ce:ee:1a:2c:45:4a:d6:
         1e:83:b0:66:6b:4f:f2:4a:3f:03:1e:37:2e:8c:59:7c:df:2f:
         19:d4:2b:80:74:9c:69:48:75:16:05:56:17:08:23:71:d8:7d:
         58:9c:d6:e1:88:eb:3b:b6:3a:6f:62:35:2b:8a:3a:fa:a6:31:
         3f:76:a7:2f:20:cd:96:1c:9a:14:0b:a3:5d:ad:02:76:e8:dc:
         08:65:0e:fb:06:06:06:94:c4:22:05:47:87:d7:1f:bc:2f:01:
         fe:78:0a:24:c9:83:dc:42:c8:1e:39:2a:2f:4c:fb:2a:48:e3:
         6e:ce:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 03:45:47 2026 by rpki-client