Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
File:                     ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa (raw, json)
Hash identifier:          UudecGa2EhgjP1HC7UhY9tteomf9Fr+3pVCFargVTSo=
Subject key identifier:   54:76:27:89:47:95:7A:BC:79:9F:93:EE:9F:DE:6C:9A:C5:3B:75:58
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584E7204D0DF2F6EA2C80CE18980
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     22192
IP address blocks:        2607:2240:1800::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d0:df:2f:6e:a2:c8:0c:e1:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=a0efe216-9b86-4c8d-9bcc-ffb77642eac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:2c:b3:0b:eb:ed:fb:cf:df:49:ac:28:4f:
                    1d:f2:fd:6f:a7:30:26:df:71:46:bc:a5:dd:ff:7c:
                    0c:f7:61:4b:9e:ea:51:c1:45:d8:ec:da:48:0c:a0:
                    50:af:89:fc:44:50:90:d8:83:7c:57:f5:0f:37:53:
                    dd:dc:3f:c2:cc:f6:61:4c:c7:0b:26:45:6a:5f:e8:
                    e9:07:f8:bd:3a:2a:68:ae:84:04:a5:e6:f0:c3:97:
                    1d:b4:19:fe:aa:3b:b3:75:15:42:07:e5:b6:6f:e9:
                    db:ff:0a:31:60:1f:ca:b3:d3:44:2d:64:79:99:da:
                    ec:47:c6:05:0a:6a:81:7e:3e:5d:4d:08:0d:d4:cb:
                    2f:1d:02:01:a0:7c:d4:a2:45:26:75:4d:57:e0:5d:
                    f7:d1:e9:85:b6:20:11:ca:c1:a2:22:50:bb:e8:3e:
                    ec:31:83:6c:31:e8:45:96:69:85:75:eb:64:ed:81:
                    21:bc:34:9c:75:56:37:80:9b:9d:7e:fc:b0:c4:78:
                    b9:2c:e2:c6:21:de:b6:91:f2:70:75:6f:0f:c7:81:
                    c3:ca:ba:67:43:a8:dd:4c:74:6f:c8:d4:8c:b7:b0:
                    89:b7:37:be:03:6d:df:80:f9:dc:21:14:63:6a:f4:
                    12:98:21:86:56:cc:65:6f:a8:57:4c:4e:75:98:06:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:76:27:89:47:95:7A:BC:79:9F:93:EE:9F:DE:6C:9A:C5:3B:75:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/ba83fafa-9f43-3e85-b0b7-0e086378e3d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:1800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f3:1c:74:e5:a4:db:9d:3f:00:09:dd:6c:94:41:7b:c0:e5:
         37:04:97:bf:29:6c:25:00:dc:d9:51:fa:38:c9:88:05:01:c6:
         da:49:f7:d9:15:4b:42:51:6c:51:83:04:48:0c:0c:fb:9f:1f:
         ef:29:04:cf:3b:2e:a6:e1:47:87:dc:0a:6b:70:82:d2:16:e9:
         56:5d:d2:c6:2c:33:9c:a8:44:d7:24:b0:2f:0f:24:29:7e:2e:
         71:44:8b:01:e2:91:15:a2:a6:3f:13:bc:42:db:cd:5a:8a:0b:
         bb:5e:01:f8:5c:c1:a4:87:ba:99:41:6d:63:56:68:9d:03:84:
         1d:19:24:62:0f:95:1b:03:5d:c9:b8:28:71:15:44:b9:49:8c:
         c1:0a:2e:b5:47:5c:cc:2e:83:25:2c:eb:d5:1b:a1:6f:61:3c:
         39:ae:55:ce:8e:1d:98:47:e8:a4:e8:ce:40:49:2d:c5:79:ce:
         2f:5a:e8:7c:9f:28:d1:14:f3:64:12:54:23:9f:fb:6a:ac:eb:
         9d:e7:b4:1e:0b:4e:67:f9:42:6e:00:8f:32:84:4c:f5:85:eb:
         a9:88:bd:f8:d2:80:fc:3c:c4:c5:5b:9b:bc:65:a9:2a:2c:42:
         fa:db:5a:e6:8b:41:ff:f2:04:10:c1:e9:b4:77:79:be:72:26:
         31:1d:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:31 2026 by rpki-client