Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa
File:                     f338295c-6e6c-3b3c-98dd-1e80c1957650.roa (raw, json)
Hash identifier:          CEOGjSOoZ29NCjbDNiSYlCoQUmxkpq36kwh8GTaMUmc=
Subject key identifier:   4E:91:00:B4:A4:2E:25:F0:6A:D1:A4:36:98:EB:85:36:3B:5C:B3:8A
Certificate issuer:       /CN=ba691a44-20cf-450c-8abe-c548dd6bd5be
Certificate serial:       010D0C9F4328584E0006370BC439A6E43E7C4C70
Authority key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     402258
IP address blocks:        2620:a4:8860::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:37:0b:c4:39:a6:e4:3e:7c:4c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8847a780-3fb1-4a15-8b70-729730b88209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:96:dc:fa:99:e8:c2:9c:26:74:b6:34:fa:
                    3c:a5:9b:58:44:7b:38:ca:6d:26:f3:7d:11:0c:c6:
                    78:64:41:16:01:70:ab:32:fb:fa:ea:eb:40:a7:f4:
                    cf:a8:4c:04:59:eb:c3:ed:bc:5b:4a:32:4a:4f:82:
                    1e:68:53:d4:58:a8:b2:af:93:7d:92:be:4a:28:f7:
                    1a:7d:2c:ef:32:68:7b:1f:da:cb:56:68:6a:3b:7f:
                    a0:5d:6e:7b:d2:83:62:80:a3:25:58:68:27:82:b0:
                    07:71:b6:61:be:77:22:6b:ed:4a:dc:86:04:17:0a:
                    d1:44:97:f5:89:7e:56:b2:8a:ef:d0:d9:42:c0:19:
                    9b:6d:68:65:a3:f6:db:2d:4a:6b:6a:a8:b6:fc:0e:
                    62:85:6e:af:71:30:dc:61:d4:f9:4d:75:6c:cd:48:
                    33:0c:40:c6:e8:c6:13:0b:a0:bd:85:b5:5e:c6:38:
                    84:21:b7:cc:7d:d1:30:0b:71:86:4f:28:4d:e5:58:
                    8f:6a:f4:32:fd:72:dc:31:a6:d5:28:f7:92:11:80:
                    a7:37:43:58:ea:7a:e2:3b:ff:cb:98:34:0e:89:16:
                    4a:32:57:f4:9e:b2:20:d8:56:a9:94:aa:fc:0a:48:
                    58:93:a6:f5:1a:1f:03:c5:40:0f:03:91:02:d0:6f:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:00:B4:A4:2E:25:F0:6A:D1:A4:36:98:EB:85:36:3B:5C:B3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/f338295c-6e6c-3b3c-98dd-1e80c1957650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.crl

            X509v3 Authority Key Identifier:
                keyid:91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a4:8860::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:03:e8:67:a3:85:6d:08:ce:a4:3a:76:fa:14:a1:33:50:
         85:8b:db:b2:e6:78:15:b5:ff:16:f1:78:42:43:bd:05:70:c1:
         97:e9:40:f8:7a:fd:f6:ed:37:3a:b4:25:7a:0a:b1:62:77:92:
         e4:c7:b3:2c:3e:70:88:5b:e8:c7:10:da:b6:e9:a4:ae:6e:a1:
         72:f1:60:99:15:5c:20:18:0b:73:7e:b3:85:00:65:46:16:9a:
         37:22:0d:f1:b2:25:e9:87:1a:7a:a9:4e:61:ae:d7:52:1c:13:
         cb:f7:96:65:ac:44:59:be:49:75:43:f2:92:77:6c:9a:7d:26:
         42:ca:1e:29:da:48:b8:bf:cc:85:7b:77:45:4a:f6:ec:8f:f7:
         29:09:7c:cc:15:b3:73:f8:e1:c3:64:e6:5c:1a:d6:ba:b4:11:
         53:31:4f:e5:f1:c7:fa:b2:b5:e7:6c:ac:f3:77:cd:12:ef:bf:
         57:d8:8d:cb:73:40:48:e6:dc:83:44:78:df:9d:08:9a:a4:18:
         36:b2:62:a9:a1:9f:68:57:69:bf:dd:a4:43:ee:7a:3e:40:35:
         f5:73:11:3b:74:fa:cd:20:84:a9:9e:44:31:a8:08:70:3a:f3:
         64:23:82:f7:a7:b4:ce:39:80:4f:83:0c:01:93:34:cf:a6:0b:
         79:bf:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:37:11 2026 by rpki-client