Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
File:                     0bae15f7-91c4-3d47-8748-73a43c11976e.roa (raw, json)
Hash identifier:          TaekWY5QBkw2IO0pqmZaB6juRGRfXNYWkv0xpEz0PJw=
Subject key identifier:   9A:BE:C7:06:57:67:7D:DD:F1:AE:55:93:CA:BE:E4:FF:8D:67:E0:2A
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584F4988BDA829932DA70AD8017A
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19830
IP address blocks:        2607:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:bd:a8:29:93:2d:a7:0a:d8:01:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0b8d7a24-85c6-460a-ac8d-162ad133562b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:20:12:16:0f:e0:86:4e:34:88:c6:ef:bd:
                    1d:52:16:36:e8:ae:99:ea:27:a0:a3:50:4c:27:ed:
                    57:3a:3c:d7:51:37:f2:c3:95:c4:4e:81:38:92:53:
                    1e:7e:12:a3:48:0e:55:6a:7f:05:c5:c3:ae:92:20:
                    b4:a4:4d:26:1e:fa:ee:72:f0:5b:02:67:4e:c4:08:
                    7c:9e:f7:a4:10:56:1c:cd:ac:06:ad:d6:04:67:1e:
                    d3:c3:87:b1:70:d9:ab:86:8a:60:58:ff:0e:41:64:
                    5c:47:d5:74:34:f4:97:e9:ca:1d:d6:34:8e:4b:14:
                    d4:1d:e1:c8:ab:4e:56:92:47:46:bd:c3:4a:8f:7a:
                    58:91:e1:25:95:22:99:f0:7e:b3:51:ba:20:6b:ea:
                    22:4d:28:3f:b4:21:a6:96:82:2b:0a:c1:15:56:ac:
                    5f:31:3a:b8:a2:5f:d6:0b:86:79:3d:75:fd:fc:f2:
                    02:8b:d3:2f:51:3a:e8:df:2b:89:ac:70:d7:7c:4c:
                    4f:ef:39:fd:f5:1a:de:d4:a2:f0:d3:b3:5f:9a:c9:
                    42:02:80:de:a2:d3:2b:ef:3b:f1:ce:9f:ec:ca:c1:
                    fd:7a:61:8d:ef:6f:b8:0d:ba:cd:58:9d:60:84:f6:
                    7a:57:e0:17:ae:da:6b:7a:69:58:69:85:66:e5:66:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:C7:06:57:67:7D:DD:F1:AE:55:93:CA:BE:E4:FF:8D:67:E0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:4d:8d:a8:da:f3:c4:80:c4:85:0b:63:23:4d:ee:7d:69:
         80:6a:7d:76:4b:db:49:43:22:4c:76:40:26:16:f3:13:2b:23:
         82:3b:5f:dd:58:ec:16:8b:02:ed:10:9a:b7:e1:c6:3a:b3:1a:
         4e:49:eb:b4:26:ca:58:ed:b0:4d:83:42:3f:3d:93:83:00:f5:
         f1:68:b4:dd:3a:1b:2c:ed:28:2a:a5:49:b9:cc:16:cd:30:52:
         b6:2e:8c:de:b6:bb:d3:7c:5a:af:21:7d:84:32:1d:a0:a7:c5:
         22:d4:d9:74:08:77:2f:08:8c:b2:1c:9e:26:78:21:36:be:15:
         b2:57:2a:86:51:9d:bc:e0:98:a8:58:fc:2b:3c:23:58:73:a4:
         7a:66:73:c9:fb:03:32:2c:90:31:b5:7e:22:d0:69:3b:f2:9e:
         f3:01:f5:be:5a:7e:f4:39:f9:bb:72:94:fa:79:ee:61:e6:f2:
         5e:d3:4b:fc:5e:12:72:17:6c:a3:0d:12:87:b7:28:c0:01:33:
         b1:c2:0b:56:47:93:9b:5c:3c:af:08:e8:c0:2f:89:10:ea:18:
         c2:54:16:79:86:1c:a6:73:54:71:a5:95:aa:05:79:10:60:af:
         f5:07:97:8b:fa:23:96:28:1d:be:06:c8:be:81:97:30:fe:7c:
         94:12:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:33:54 2026 by rpki-client