Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
File:                     ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json)
Hash identifier:          JzlLHShKlPGcYLaE2lMMdePLDArbfnW1+ZXozoYJUcw=
Subject key identifier:   8C:03:DD:63:79:CF:A8:1F:49:11:38:7F:9E:92:75:78:D6:6E:29:B4
Certificate issuer:       /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
Certificate serial:       010D0C9F4328584F1CC79B9DA25A86CED1E9C5F8
Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     25875
IP address blocks:        2607:9f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:9b:9d:a2:5a:86:ce:d1:e9:c5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=a69e7c7d-7dd3-4aeb-9597-0cb0c6dcc76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:bb:b7:09:a1:5c:c9:c9:93:e5:26:66:b1:
                    59:96:5b:ad:5d:04:2c:d5:b9:b2:6c:84:26:be:04:
                    60:1e:f9:27:fe:ab:71:8a:a8:e3:10:0e:14:55:27:
                    a3:5e:5b:c9:8e:62:6c:c2:98:c9:6f:1e:da:06:d1:
                    cb:c3:69:fd:34:4e:66:d8:fe:ed:f8:ea:f5:f4:50:
                    f2:f5:1a:ce:a2:e7:cf:e9:f9:f4:7c:08:80:d1:f2:
                    9f:81:af:a9:dc:c3:22:ed:cc:70:85:c2:65:dd:81:
                    f3:05:1b:52:ea:96:b7:b7:0e:c4:6d:69:cb:01:33:
                    84:b8:76:2f:a7:10:6d:13:3a:0a:51:8d:83:31:90:
                    c1:d8:63:d9:2d:31:ce:3b:72:15:7f:0f:ef:c1:3d:
                    8b:d7:40:1d:b8:5c:3f:bd:e7:a0:ec:f5:11:5d:10:
                    2c:67:93:0f:94:1e:7a:25:99:c2:59:90:97:6d:5e:
                    42:6b:c2:0c:07:8d:d4:7e:ee:6f:bd:91:6e:62:51:
                    e1:a9:65:9b:14:5a:03:e1:16:bc:e0:f2:01:31:a7:
                    be:fe:d2:9f:7b:d5:c1:6e:64:0b:a0:28:d4:b8:c8:
                    67:15:dd:0b:d4:e0:f3:06:08:b1:2b:ac:af:9c:70:
                    8b:06:5a:1d:25:76:63:e1:81:cc:a4:ba:30:2a:48:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:03:DD:63:79:CF:A8:1F:49:11:38:7F:9E:92:75:78:D6:6E:29:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:bf:99:c3:8c:ff:64:ae:a5:a7:ea:04:38:5a:7c:2d:38:
         61:c0:36:f3:13:16:85:f9:9d:b4:84:de:a2:7a:ce:ea:44:31:
         8c:b3:f0:d2:74:9e:b9:1a:0b:d4:c7:79:f6:d7:4e:92:5b:d2:
         c8:56:1c:92:7c:2e:2c:4b:d5:05:96:e5:38:85:75:74:2f:01:
         ac:b4:3d:06:55:e0:ff:4b:66:2a:2e:94:05:50:81:eb:31:c2:
         9c:b9:ff:e2:02:0b:2f:0d:fb:71:77:6e:66:8d:3a:0c:7b:f6:
         b8:a7:1d:ff:0b:53:be:38:6d:f2:c2:a5:70:f7:c2:b1:47:5d:
         c8:ad:f3:11:2e:00:59:3f:2c:ee:24:c1:97:60:ed:9a:ba:62:
         99:3c:1c:35:3e:80:89:48:cb:b8:00:b4:fc:28:1e:37:09:00:
         45:06:56:78:9e:8c:b0:a5:62:1e:f7:4d:47:f5:66:3d:4a:cf:
         97:ef:ba:10:b4:3c:94:6a:a5:25:a6:59:6a:81:ad:38:d4:ab:
         be:64:1a:71:d6:72:34:7c:9c:84:47:ce:df:75:6a:61:d3:26:
         8b:33:a7:0b:da:82:9c:34:98:9f:b2:88:5e:20:0b:01:9d:7a:
         db:f4:3d:c1:00:29:85:9a:55:7f:3a:e0:9b:1f:7b:a4:7b:ff:
         97:59:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:44:03 2026 by rpki-client