Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa
File:                     153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa (raw, json)
Hash identifier:          /8cwIfITWMrG84K0QxHcYCbhmbi6x3/D/5WwXfxli3U=
Subject key identifier:   AB:BC:77:79:45:31:11:9B:26:75:5F:F4:6A:B6:4D:B4:B8:5E:79:D0
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F331D13B433105DC1AD44D100
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     11798
IP address blocks:        2604:ba00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:13:b4:33:10:5d:c1:ad:44:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=0b8e8dd1-b601-4695-903f-f2c24067a0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d8:6d:e8:63:5b:c2:f3:13:5a:37:9f:b5:2d:
                    bc:65:0c:d9:82:96:8a:29:cf:6d:94:46:17:c8:a4:
                    a0:2f:31:ec:82:c0:b2:e6:9f:67:54:44:85:15:a5:
                    76:e0:05:bc:f8:f9:ae:21:c4:74:2a:10:e7:ed:5f:
                    08:66:be:91:54:eb:3d:c1:1e:5e:99:9d:fc:21:58:
                    93:18:ad:d4:b6:92:71:47:49:23:c4:84:8a:5e:dd:
                    d1:98:2c:53:f0:4e:f6:ee:2b:8d:11:48:cc:5b:94:
                    97:e3:f1:36:5f:29:c7:0b:80:25:e8:42:de:05:5b:
                    9c:d3:fe:46:62:0f:b8:28:aa:bc:24:28:27:ac:c0:
                    03:f2:43:c0:e0:ca:7f:6c:d5:d2:cc:49:1f:ed:2c:
                    50:32:4f:a6:dd:8b:de:a5:5b:05:af:07:1b:2c:d4:
                    b5:86:6b:bc:46:bf:4c:6c:9f:b3:fa:15:8a:cd:70:
                    2b:5e:0d:80:81:0a:67:ff:b7:6e:e6:2d:e7:d6:96:
                    47:b4:1d:bd:25:d8:fd:86:6e:cb:f5:77:df:64:be:
                    c2:1c:f3:9d:aa:8d:23:39:8c:bc:09:1b:47:8c:2e:
                    ef:9f:9f:ec:1c:97:ef:91:27:6d:0b:4a:81:43:fb:
                    aa:07:8d:0a:96:4e:40:d4:7b:25:cc:d4:77:2a:db:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:77:79:45:31:11:9B:26:75:5F:F4:6A:B6:4D:B4:B8:5E:79:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/153c8f8f-911c-3e7b-a1b2-847b48cc58d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ba00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:26:61:ad:a7:9c:3d:b5:30:70:fa:3d:d8:4e:fc:cb:af:92:
         18:ca:58:f8:39:40:f9:1e:c8:be:7a:2b:0f:4c:d6:bb:07:de:
         62:13:9b:f4:57:99:c9:eb:02:6b:f2:bf:3f:4a:2d:7a:9d:04:
         35:06:b2:6e:da:7b:30:b2:fd:1f:15:16:e2:c9:e9:c1:6e:24:
         2a:7c:c5:a1:7f:a3:27:50:28:26:33:60:4c:57:6b:0e:ef:2f:
         fc:d5:94:09:e7:1e:2e:9e:bc:80:18:86:6c:69:ad:6f:13:52:
         f7:5e:8f:cb:ba:80:d9:c9:82:85:a7:1a:6e:eb:09:fb:20:89:
         53:b6:7c:b9:57:73:2e:b8:80:90:b7:1f:d6:44:7c:0e:15:c1:
         37:3c:90:fd:52:96:3c:83:25:6d:aa:32:69:cb:fe:6d:0b:6b:
         f6:c1:0f:da:a7:1c:dc:ff:a9:9a:c6:24:dc:f6:81:78:65:57:
         d2:68:ec:0f:d3:df:0c:10:73:f4:b3:30:4f:dc:fd:e3:e9:3c:
         f1:22:43:d2:e1:29:5b:48:da:4c:76:75:c2:6c:a8:e5:64:25:
         39:5f:54:5a:b1:6a:1b:fc:74:46:8a:ad:ca:b2:48:77:6a:0f:
         85:4d:28:69:d2:b6:51:9d:38:3b:92:97:a8:85:e0:6b:46:8f:
         a5:f4:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:04:25 2026 by rpki-client