Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa
File:                     8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa (raw, json)
Hash identifier:          uLHTd1QWMMyyjNhdEkuD3wjirvOwNKPOZVKtb7lx16U=
Subject key identifier:   8F:4A:0E:6A:63:F0:FB:F0:58:46:68:C4:CE:EB:34:D1:F0:86:8B:C5
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584DA11AC01499D6E7B6E2E12700
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     33392
IP address blocks:        2606:2480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c0:14:99:d6:e7:b6:e2:e1:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=f60200b5-fa6e-4fc0-8d65-db02a2d51e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:4f:c1:dd:4e:a7:9b:1e:a0:d9:25:ab:91:
                    19:4f:e9:74:d7:81:c5:64:72:d1:54:b3:f1:49:20:
                    85:a6:7d:f5:6a:64:b6:e0:b3:8d:2b:6b:f7:f0:e9:
                    af:36:11:af:cc:74:f8:84:66:73:28:d4:7f:9a:b0:
                    d1:32:6e:a4:e0:a8:95:19:82:16:aa:45:68:22:10:
                    f3:6d:03:44:45:69:ef:7b:c6:8d:21:6d:e0:3e:19:
                    62:09:e7:f9:a7:89:14:a0:b9:9a:7a:f0:77:20:72:
                    40:99:90:44:ae:51:73:47:99:ab:18:2c:bd:e5:39:
                    a5:d2:92:38:a1:c8:c1:c1:aa:b4:eb:67:38:4c:46:
                    11:fa:33:1e:ec:c8:c1:68:00:4b:74:d5:cb:b6:2c:
                    92:0b:92:d6:b5:d6:0c:2d:39:f5:72:20:42:19:90:
                    e6:76:b6:ed:d5:b7:4d:79:a9:90:4e:5d:dc:93:82:
                    e0:d9:8a:0d:b2:9e:40:c0:bc:25:c6:e2:6c:d9:23:
                    e3:a4:b7:f8:9c:d4:dd:b8:34:ec:96:5d:b9:22:b8:
                    6e:d4:7f:60:05:b3:66:fb:4e:26:ff:6a:6f:6a:30:
                    5a:c5:f1:3a:23:5b:79:bd:e4:a1:66:35:bb:cd:65:
                    da:f7:6d:da:6a:17:eb:a4:72:c0:8f:cb:02:19:6b:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:0E:6A:63:F0:FB:F0:58:46:68:C4:CE:EB:34:D1:F0:86:8B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/8d02ecff-6567-3ab5-b937-d1e8ed0cc1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:9a:68:90:66:fb:84:94:25:c1:e8:36:b5:a0:c6:4e:d8:
         68:2d:8e:86:ea:5b:88:2c:8d:91:aa:32:63:9d:f4:3e:79:b7:
         de:b0:1f:26:13:8c:db:2d:73:b8:ea:6d:70:24:df:2f:a1:20:
         22:2e:3c:c0:d2:85:5f:3f:09:5c:ed:eb:2f:82:d2:43:d2:d9:
         bd:e4:80:02:ee:75:fc:57:81:ff:31:df:f9:b8:50:cc:0b:4a:
         eb:e4:fe:7a:79:cd:03:ed:f8:a5:b9:c1:76:e3:be:52:ee:73:
         de:f8:60:01:ec:05:f3:6f:cb:42:65:8e:b6:2b:bf:ec:f9:30:
         dd:b5:68:61:22:64:23:5c:77:f7:a5:6c:4a:5c:74:5b:c9:bf:
         3d:ca:cd:ff:b3:ef:ea:58:69:1e:cf:d9:46:a8:0e:93:7a:ec:
         21:c7:45:c2:aa:ab:f3:f2:62:0d:0d:7e:d3:16:b9:f8:85:e3:
         6f:0d:31:d9:84:60:8a:73:55:7f:fc:20:76:09:3b:e9:36:5f:
         be:33:84:87:24:1b:fb:79:5b:53:a0:a4:84:c9:4d:80:ca:88:
         48:66:2b:8f:49:47:94:9c:72:9c:20:02:75:68:ce:70:f4:d0:
         06:9c:ba:c0:64:8e:80:34:8d:01:f9:5e:e9:d8:ed:9e:b8:13:
         65:31:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:16 2026 by rpki-client