Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
File:                     854c42fa-3e10-360c-b939-919df3fc02c0.roa (raw, json)
Hash identifier:          W961HM9GXIYajYDBoMyrIVXhLQgquVv7atLZi7yDR6Y=
Subject key identifier:   4E:9A:91:D9:90:74:EC:8D:CD:AC:76:69:12:39:C2:D3:4D:C5:5F:2C
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584EE38CA55AF70D4D0B9E942000
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     399077
IP address blocks:        2606:4dc0:ffff::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a5:5a:f7:0d:4d:0b:9e:94:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=be3b616d-7a40-414e-af23-0809d5608531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:a5:5a:61:3f:d7:dc:83:9d:7b:b2:ce:9e:
                    14:1b:63:a8:56:9f:7b:e1:e6:e9:53:95:e6:a1:d3:
                    cc:d2:d6:b1:64:3a:e3:0e:71:7b:c7:2e:1c:c8:df:
                    dc:ed:90:9e:2b:46:9f:9b:69:b9:2d:3a:ff:bb:64:
                    2f:22:15:db:84:a2:a4:c6:b0:12:fe:dc:e2:fe:04:
                    da:a5:13:56:13:54:08:ed:eb:88:8b:a9:87:b8:83:
                    1c:8f:6a:97:04:54:db:62:a9:a6:78:26:82:aa:91:
                    f3:9b:b9:57:b5:7e:34:d4:ad:97:8c:49:25:d6:30:
                    d8:81:d0:a2:1b:9b:12:b0:64:c0:3a:6c:f5:b1:e5:
                    c5:e8:a4:ab:6e:b1:da:7b:62:08:72:52:ef:59:0f:
                    c1:b1:ea:af:8c:b2:01:ae:8b:71:f7:6b:05:ef:7b:
                    9d:d4:2f:71:db:d5:19:b1:cb:dc:1c:25:f6:08:dc:
                    bb:4a:4f:8f:dd:d6:be:87:0e:75:e2:31:95:ef:c8:
                    ed:a7:55:ad:fe:fe:3a:96:c2:09:9a:dc:84:52:86:
                    1d:98:fa:60:99:50:ec:bb:a8:3d:22:68:38:76:97:
                    58:fc:28:fd:7e:19:a2:a0:48:8f:bd:1e:81:db:6a:
                    33:97:12:04:c8:b9:cc:a3:ed:3f:b1:e5:39:59:3c:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:91:D9:90:74:EC:8D:CD:AC:76:69:12:39:C2:D3:4D:C5:5F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:66:84:4e:77:16:39:88:82:b7:19:1a:50:ef:b1:ec:e5:de:
         dc:fa:d1:46:5f:f0:08:f7:bc:ea:c3:33:be:a2:46:47:52:8b:
         a4:c6:19:13:dc:b1:dd:2b:b8:10:24:f7:c4:3d:1e:98:f7:2a:
         53:71:92:7c:66:7c:1d:a8:73:e8:60:8f:87:3c:23:b5:45:d0:
         0f:93:55:73:93:f8:34:ce:ec:96:18:e6:7a:0c:a7:ef:55:a4:
         ab:c9:bb:6b:14:35:09:c1:41:11:13:f7:65:b7:93:5b:b5:66:
         24:5e:4f:f6:44:dd:ae:da:23:cf:38:80:e9:dd:90:cc:58:04:
         a1:75:47:1c:c1:8d:a6:f1:23:e5:c8:c7:08:57:10:87:46:f5:
         e1:3a:fe:8f:2d:ed:bc:ee:93:d0:c5:23:1c:01:21:e9:06:07:
         ef:2c:6a:58:3d:83:af:ba:63:19:53:66:c9:70:b5:17:01:65:
         c1:2a:1d:b7:65:10:58:f5:4d:ea:b5:4b:30:82:6f:45:d5:84:
         87:01:22:25:79:6a:c7:40:14:8f:99:84:37:ed:e0:2e:35:d8:
         f5:a3:6c:7d:1c:1b:1a:15:b8:bb:e9:a2:e9:3f:bb:a6:dd:f3:
         75:69:4f:3a:1c:da:b9:cb:c0:7b:f8:f1:f0:97:70:66:39:e3:
         32:eb:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:42:26 2026 by rpki-client