Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
File:                     4e50a587-28e3-33c4-93d2-06b5fce81567.roa (raw, json)
Hash identifier:          GfEvv7JKD/mOVhMPx7mfUpgoHJ0TerZRygVLhCt/6Ug=
Subject key identifier:   93:E1:F9:32:ED:97:14:66:82:20:B2:FE:03:1D:78:BB:8C:53:24:16
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584EA2DFC205A7EAB122862782A0
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     30041
IP address blocks:        2607:9b00::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c2:05:a7:ea:b1:22:86:27:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=1e0f9c12-ea5b-4369-9cbe-4454f5953dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:46:da:fd:e5:52:b8:ec:cb:99:4d:72:0d:cf:
                    fa:47:9a:85:53:13:94:08:a5:cc:86:65:33:5a:60:
                    86:88:66:99:e2:ed:c3:2f:70:9b:be:22:bd:a7:9c:
                    75:53:4d:24:b1:00:ab:6c:54:69:57:95:8a:82:eb:
                    5f:80:0d:be:24:4c:36:2c:6f:c8:8b:0f:2a:2d:c2:
                    49:1d:62:3f:f5:b4:18:f2:f9:31:ae:33:d1:43:c9:
                    e5:ed:5f:60:d1:d9:46:fd:de:1e:7d:63:ce:1c:ec:
                    1f:94:90:c1:44:b4:39:f3:ff:5b:36:c2:93:6a:8b:
                    f2:a4:96:b9:6a:ba:b7:70:0c:01:48:98:a8:91:7b:
                    97:98:6b:0f:00:4e:e4:c5:66:69:db:f3:bf:b9:4f:
                    98:32:14:d1:35:fd:79:6c:39:f2:00:90:06:7f:f0:
                    5b:8c:09:fa:80:11:cb:b2:e4:c9:51:c0:16:99:16:
                    83:46:63:47:16:b9:6e:b6:1b:dc:a5:3b:2d:7d:3a:
                    5e:da:2d:eb:87:c1:a4:03:c7:0d:52:40:d1:66:15:
                    2b:8d:84:61:9e:51:0a:25:f1:9f:9f:2c:36:14:1b:
                    f7:9f:50:55:52:02:a4:3e:d8:1a:cf:fc:2a:fa:0b:
                    87:e9:11:36:24:93:2c:3c:e4:e2:f7:13:93:dc:ba:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E1:F9:32:ED:97:14:66:82:20:B2:FE:03:1D:78:BB:8C:53:24:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/4e50a587-28e3-33c4-93d2-06b5fce81567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9b00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:f5:f9:43:42:60:81:e8:94:0f:a5:cf:b7:fd:1b:31:c4:
         7a:6e:96:83:eb:29:71:de:3c:7e:8a:fa:ea:7d:15:56:de:33:
         00:f6:59:f7:be:4b:c4:fa:ac:9f:aa:e8:94:fd:df:d4:85:56:
         1a:f9:27:b7:ad:6f:34:6c:c5:78:ce:6e:5b:bc:26:1c:39:95:
         e7:6a:5d:9c:dd:17:b9:91:23:51:a1:18:4d:fd:57:21:b0:69:
         fd:4d:17:6c:e2:57:47:7c:ea:42:69:17:20:98:49:3e:6a:d6:
         68:06:6f:9b:35:78:c6:b4:79:c3:98:43:d9:e3:a7:2e:cf:76:
         4e:dd:6e:57:3e:c7:6b:0f:7e:db:b7:3a:34:c8:66:93:0f:4f:
         7b:fe:07:b0:59:ec:9b:69:3a:91:7c:1f:b2:e9:02:9b:79:6a:
         d4:b2:d8:9b:c6:1a:cd:f4:45:a7:2b:c0:a8:39:f8:69:db:f1:
         38:bf:4e:bb:b8:d1:6a:1b:a6:96:83:b1:32:38:5c:d3:37:5d:
         32:57:04:55:e6:40:8f:d2:8e:84:24:fc:f4:8b:32:e9:5e:2c:
         4f:3c:9d:8e:28:1b:d0:73:74:9a:bd:a8:52:c7:c8:f8:81:c6:
         2d:90:3f:e3:26:89:2f:3d:0a:f2:f5:c5:70:69:8b:7f:12:ac:
         0e:7f:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:08 2026 by rpki-client