Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa
File:                     24578be5-a20e-38c7-ae02-b5e91a957be8.roa (raw, json)
Hash identifier:          PS/qba5WQLz1QGwF4+DMwDLkRIdT27aLSKmuBrFdtLw=
Subject key identifier:   68:BF:46:EA:E4:B3:66:2A:3F:DD:63:5E:2A:0A:1A:5A:DF:C8:C5:F5
Certificate issuer:       /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial:       010D0C9F4328584EB2B1FEA83D19B926707AE700
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     32806
IP address blocks:        2604:9900:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:fe:a8:3d:19:b9:26:70:7a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=724d1e67-8c7e-4763-aa93-40b2ad735ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e1:0f:8e:eb:3e:04:fd:73:1e:ee:1e:09:77:
                    6d:98:3b:e7:84:b6:6b:25:37:25:2b:33:3f:2f:58:
                    60:06:62:c4:0a:97:aa:03:73:b5:fe:18:b4:02:10:
                    37:67:d4:99:73:d8:a7:2a:04:14:4e:09:57:6c:9e:
                    be:70:50:4f:f7:2e:ae:4a:9f:03:75:cb:4e:7d:95:
                    48:d2:c3:74:e7:68:74:26:6d:9e:38:5b:71:fe:12:
                    7f:7e:b9:c8:b2:08:21:6a:f8:f9:83:d5:0d:7b:0d:
                    ef:0e:06:eb:ed:a0:95:85:1f:2d:cb:d6:38:97:f4:
                    00:9b:a5:1a:75:63:e5:8e:5f:5e:61:14:b7:b2:a7:
                    07:f1:cb:42:db:78:34:d4:50:ed:12:99:02:28:f4:
                    fe:10:01:26:b5:ff:62:a7:ac:d1:cc:e1:cf:24:81:
                    cb:89:17:3a:63:bf:d0:22:53:1e:c3:20:79:a7:44:
                    69:be:7f:0a:10:fe:2f:3a:74:7c:ad:f4:60:dc:09:
                    58:96:6b:1c:1f:1b:e5:f1:bf:92:0d:4e:d6:b2:89:
                    4c:fd:fb:1a:f6:ce:46:55:87:c6:27:5f:5b:ed:a3:
                    86:ca:00:83:5a:c3:c9:da:e5:85:29:a6:0d:ba:4e:
                    f8:c6:2f:9d:a9:d6:78:20:fb:d4:f2:f7:08:74:41:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:46:EA:E4:B3:66:2A:3F:DD:63:5E:2A:0A:1A:5A:DF:C8:C5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/24578be5-a20e-38c7-ae02-b5e91a957be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl

            X509v3 Authority Key Identifier:
                keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9900:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:d8:49:c4:95:8a:68:81:41:64:6a:4c:76:15:91:95:0e:
         e6:e8:cd:8d:b0:c3:17:dd:26:a1:21:c5:4f:57:8e:79:dd:c9:
         8a:bb:88:57:7c:e3:e8:b7:0c:fe:28:8a:e8:ba:c6:f8:85:b9:
         99:99:4b:d1:96:81:6f:6f:9c:93:bd:ff:93:09:27:e2:16:a4:
         08:c1:2c:8a:6c:f4:25:99:18:15:58:c3:a6:b1:ff:47:ca:b1:
         67:3d:a1:80:4b:12:8d:a4:7e:7a:76:86:89:10:42:40:ac:a9:
         8f:b2:be:e7:17:a8:4b:75:ec:1b:65:69:3c:54:fa:6f:4f:53:
         8b:37:1b:a2:06:8b:30:9d:c4:e5:5b:b7:e1:68:60:00:06:0d:
         24:63:e4:37:37:15:21:08:e6:70:17:8d:78:f8:b8:1a:18:2d:
         0b:8f:bb:e1:5f:95:b5:1b:c2:ca:1a:eb:92:31:65:f0:40:31:
         13:a7:4c:b7:c5:2d:04:47:c8:20:18:da:57:41:d6:be:90:c2:
         16:72:09:f5:19:9a:9a:a8:b9:fe:94:ce:dc:30:aa:10:15:92:
         c9:bd:f1:f9:bf:0a:73:af:f1:7b:08:7a:3f:ca:8f:2e:e8:77:
         ed:cc:74:f5:8f:60:ed:be:22:b0:12:2e:b3:90:ab:60:32:e3:
         f5:81:62:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 05:43:57 2026 by rpki-client