Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
File:                     a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json)
Hash identifier:          6W7MU6eRI5wuPWKs1y4i63Ate6QGChslH5lTvzPbiRc=
Subject key identifier:   5B:A7:3F:3C:98:F7:A5:2E:E4:98:6B:09:2C:04:8E:C6:FF:42:5B:84
Certificate issuer:       /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial:       010D0C9F4328584E1E44516E95D1C7181F64F24A
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     4246
IP address blocks:        128.235.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:51:6e:95:d1:c7:18:1f:64:f2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=485d4420-ced7-42d9-b61b-e627c07e0817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:3a:75:f3:c5:2b:6e:d1:df:ce:84:b6:54:
                    e5:77:7e:84:6f:1d:1d:2b:96:12:49:73:3b:d1:14:
                    46:c0:92:e8:4e:9b:01:e0:c2:f6:5e:08:c5:35:e9:
                    f6:e0:2a:ff:92:00:83:b2:0f:19:ff:b7:61:c2:fe:
                    fd:25:0e:a0:96:83:64:fc:dd:ac:b7:44:eb:5d:0a:
                    f6:87:62:6a:5c:e5:99:2a:c3:47:53:ab:4e:8a:90:
                    99:b0:20:3e:7c:13:35:4b:b7:2f:7a:3e:59:ef:23:
                    de:f3:6b:09:14:67:d4:3b:22:e8:e8:9b:66:bd:5c:
                    32:63:bd:a0:32:c6:9e:96:bc:51:91:d1:83:ee:57:
                    f0:fb:99:52:e3:35:d5:31:3d:cb:a2:26:6d:0f:2e:
                    b1:5c:c1:00:61:d2:35:df:05:84:12:62:b8:d5:e0:
                    08:da:37:55:ae:30:e1:56:0d:ee:b7:0e:a3:65:9d:
                    23:bf:a3:e6:10:bf:fe:50:18:e8:2a:b7:33:4e:de:
                    37:4a:6f:e8:db:09:be:e7:9d:88:01:7d:57:83:5e:
                    1b:ad:ba:53:72:d8:65:f9:a2:f0:63:a4:78:2c:93:
                    2b:c6:f2:f2:b2:7d:ca:28:59:48:50:a7:bc:e3:14:
                    19:ef:ae:cc:28:64:10:56:83:6b:f7:73:18:f5:e7:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A7:3F:3C:98:F7:A5:2E:E4:98:6B:09:2C:04:8E:C6:FF:42:5B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl

            X509v3 Authority Key Identifier:
                keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.235.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2a:2c:8d:a9:ac:bd:94:ad:ab:0a:de:17:2b:be:1e:40:56:
         d4:0b:4c:9a:d8:82:c9:73:45:ab:78:dc:30:1b:ee:60:a2:6e:
         e3:6b:fb:52:20:16:08:19:20:8b:e4:04:2b:71:03:06:dc:2a:
         09:fd:bd:a1:2a:e7:5e:2d:ee:5d:42:dd:8d:fe:6a:a7:67:4c:
         ca:bb:ef:9f:f9:0a:35:ff:8f:34:68:75:a0:84:ee:be:94:a4:
         f4:65:6b:dc:9a:34:4b:b5:b6:27:83:90:93:d3:e8:44:41:5b:
         4d:a5:5b:7a:bd:9d:e7:a2:72:5b:28:97:e9:fb:d8:77:9e:be:
         92:5f:16:54:9d:ed:1e:40:d1:c9:c4:40:4d:a0:cb:5c:78:84:
         3b:1c:80:ed:07:a3:56:39:3d:51:8c:08:ae:06:13:bf:8e:71:
         7f:5f:d0:e8:87:2e:7e:78:8d:73:28:44:90:c3:39:28:30:45:
         59:c5:1a:2c:cf:2c:78:f4:3c:70:14:c5:6a:d6:80:99:71:30:
         8c:7a:a7:da:43:33:78:61:69:f7:23:c7:3c:86:32:d1:6c:5a:
         ee:be:75:f7:e2:9f:49:cd:c9:5c:cb:fe:8d:d5:aa:ff:2f:2b:
         8b:0e:01:ab:41:75:cd:d0:65:a3:ad:5a:61:45:72:2e:ab:b9:
         cf:db:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:22 2026 by rpki-client