Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa
File:                     ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa (raw, json)
Hash identifier:          n5GPfixSn6D+njnhf40zU9J0RIT0MRoRD/+pAcgNj9M=
Subject key identifier:   2A:A9:3F:A4:E3:0F:F4:8E:C3:97:AF:13:D3:23:E0:9D:4C:4A:79:6C
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584EB57C46EE66B03D574D21B480
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     14618
IP address blocks:        2620:1f7:c025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:46:ee:66:b0:3d:57:4d:21:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=265a5d78-5a72-482c-b17f-d4791cb9253e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:43:2d:72:72:b7:e2:4d:fc:d0:d1:03:db:
                    98:96:20:5c:49:e5:f0:90:78:b8:5f:15:ef:62:d0:
                    e7:48:e3:41:51:0e:97:cf:6f:26:69:f4:04:03:d2:
                    bc:9d:ee:cc:a8:3c:f9:49:ba:46:f6:f9:43:7c:d3:
                    9f:fa:6b:4d:67:55:22:a8:48:b0:71:fb:91:cd:36:
                    be:18:59:d1:22:75:68:d3:1f:de:49:8b:a7:de:71:
                    a4:e0:cf:30:d7:c7:02:2c:7a:7b:e7:5a:cc:84:ce:
                    06:89:e7:f6:fe:a2:b6:dd:73:7d:6a:0d:cc:e2:af:
                    1b:cf:51:02:52:7f:b9:5a:96:a6:42:b2:53:f3:8a:
                    0e:ad:e2:c2:f3:52:59:b9:77:fc:2b:b0:71:d1:17:
                    91:7e:c3:4b:5a:87:65:fa:fb:78:6e:a7:00:23:1b:
                    99:d2:a9:94:fc:d0:e7:65:8f:ab:91:a8:79:82:b8:
                    eb:d1:92:f7:00:b5:26:28:22:94:55:10:a3:20:6d:
                    26:e9:47:7a:54:6f:10:24:c0:c1:83:1f:3e:f3:fa:
                    ee:55:56:e5:8f:c4:64:42:0a:93:5f:4e:09:62:16:
                    a8:05:35:61:5a:aa:eb:a0:49:01:2a:44:30:4c:0e:
                    16:f9:13:06:69:30:1b:15:cd:f3:d3:71:89:4b:d2:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A9:3F:A4:E3:0F:F4:8E:C3:97:AF:13:D3:23:E0:9D:4C:4A:79:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/ba7ce757-64bd-36f6-8b8e-c4a921c6f831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:f4:f1:ad:39:19:e7:75:74:31:45:67:c6:0d:c6:29:dd:
         c3:99:6c:10:5d:81:c1:f6:53:aa:00:e1:64:25:65:b7:1d:47:
         ea:e8:4d:b0:62:f9:40:3b:97:de:07:4f:2f:87:d2:c3:b2:3d:
         6c:b4:27:b9:cc:b7:76:d8:f6:85:bc:c4:a4:98:6b:84:2e:8e:
         04:ab:5f:78:a7:8c:b0:b1:12:5d:2d:ab:b2:77:eb:11:19:d2:
         f1:ec:52:5b:fc:e0:ab:1d:5f:06:b6:e8:2d:93:9a:68:24:82:
         0c:69:6b:c2:92:79:28:4f:7c:2d:23:da:15:8f:33:df:7d:2e:
         e2:7b:c1:9b:36:05:09:11:02:a5:fe:90:c8:49:c0:80:2c:9d:
         b5:45:0e:6d:68:6a:47:75:43:63:f8:67:dd:a4:25:85:f0:2a:
         7b:b2:20:9e:8d:46:b9:1e:b5:c6:bc:26:a0:00:72:97:f3:3f:
         6b:5b:a8:f5:dd:c7:c8:ce:de:06:cb:50:41:32:79:4e:7d:34:
         7a:ad:4d:5e:6a:d1:12:2b:8c:89:08:36:52:89:91:cc:98:1d:
         1e:28:5c:39:87:35:1c:6e:f8:09:00:69:77:fc:a9:84:46:d6:
         f3:3c:48:b8:8a:88:f2:b6:d9:10:8b:2f:03:21:70:44:60:8e:
         d5:f1:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:58:35 2026 by rpki-client