Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba7f7445-5806-32ab-9733-2a30fd2916af.roa
File:                     ba7f7445-5806-32ab-9733-2a30fd2916af.roa (raw, json)
Hash identifier:          XPgPPMlWgCXc1NhmT4NUttO+Rgr1YnkYXlxC2iD3+4M=
Subject key identifier:   B3:02:85:84:F2:B9:00:11:9B:13:01:E7:F2:77:22:B6:5D:E8:B1:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9220FB50B067B38F307BA8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba7f7445-5806-32ab-9733-2a30fd2916af.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14978
IP address blocks:        2001:470:db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:20:fb:50:b0:67:b3:8f:30:7b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=40a05420-a1bd-4938-b6dc-0eaf12b29882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:16:0a:68:71:90:ea:25:c2:f6:bb:64:24:
                    1f:4c:c9:42:0a:8f:33:6e:35:b1:aa:bb:07:85:a2:
                    80:f5:83:e6:62:08:14:c7:26:21:8e:13:08:d8:e7:
                    fe:64:76:2a:6d:98:ef:31:df:5c:71:7d:95:b5:2a:
                    5b:9a:ef:d3:a7:05:db:38:a4:8a:3b:d0:5d:d9:c2:
                    bd:6e:93:88:3d:d2:4f:08:08:ec:fc:26:12:e2:13:
                    b8:84:ac:aa:4c:ef:55:3a:41:1d:5b:c8:12:b2:74:
                    0c:4b:ee:c4:31:f1:12:d1:6a:18:d4:0b:14:59:54:
                    1f:54:c7:81:ad:af:78:84:cc:8c:69:1c:de:ff:f6:
                    e3:db:4d:ef:93:ab:3c:12:97:ea:f0:05:58:82:15:
                    e7:e7:26:26:d6:dc:5b:49:2e:e0:1e:05:7f:dd:7d:
                    e4:f5:df:6e:2d:6d:85:f4:8e:56:f4:2e:b9:a6:1c:
                    d2:e6:f4:9d:a0:07:fe:df:9f:b9:f7:68:4c:78:11:
                    a1:3d:de:d2:dc:21:9d:ef:19:0a:a7:60:38:24:0e:
                    71:da:48:c9:0b:25:de:0e:ba:18:b5:4e:5e:0d:7e:
                    d0:01:b3:4a:8d:8e:af:b5:f4:49:d3:c6:37:4e:6e:
                    df:4c:ce:ee:46:8e:3b:30:78:c8:64:12:85:e6:15:
                    87:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:02:85:84:F2:B9:00:11:9B:13:01:E7:F2:77:22:B6:5D:E8:B1:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ba7f7445-5806-32ab-9733-2a30fd2916af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:92:f9:ce:a4:c8:8d:36:24:c7:33:ac:e3:4a:bc:4d:8a:
         c3:5e:42:3b:0a:7b:47:cb:10:90:4b:49:00:44:f9:cf:b7:9a:
         50:6d:61:f3:3a:45:a7:d1:42:87:27:31:da:83:ad:49:fd:85:
         c3:3d:6a:fe:d6:a7:80:fb:c4:64:e0:31:ba:b9:7b:51:1b:e9:
         4a:00:64:59:6c:bb:42:23:1a:4d:bb:3c:ea:07:81:9e:6b:8b:
         2b:3a:d6:6a:08:06:a8:d4:0c:cb:48:a5:93:48:40:5b:78:20:
         52:51:c7:77:83:f8:d7:04:dd:4f:fe:9f:4a:19:47:aa:a3:63:
         9a:d7:29:ed:a7:da:9a:bb:63:c3:ae:14:cf:9b:57:63:1f:d4:
         24:9e:5d:ea:ab:c3:4d:24:23:e6:65:f0:47:7d:6a:dc:05:93:
         50:79:22:6e:cf:94:da:59:f7:a5:4f:56:69:5b:a4:61:92:5d:
         b8:30:b0:7d:3e:79:1a:f6:83:e8:00:b9:93:d2:fc:84:fc:6e:
         5e:41:21:4c:80:7e:08:80:f9:df:97:20:98:90:39:c5:4e:d8:
         45:7d:bc:e1:98:a7:ad:20:63:a9:da:3a:f6:68:71:3d:d3:a2:
         19:a0:8a:29:73:dd:8a:f3:01:16:56:af:36:40:3d:4f:11:20:
         b8:3c:e0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:01:39 2026 by rpki-client