Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa
File:                     badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa (raw, json)
Hash identifier:          8tJVl3SP7Ypd32cTGtH/TSkPVD9V7faq+gsMtKKrqoI=
Subject key identifier:   FD:C2:A3:EE:B0:A0:AE:5E:98:E6:6F:5A:9A:6B:86:DD:88:44:39:7B
Certificate issuer:       /CN=6528c9ac-3735-430d-99f2-7ac01944d688
Certificate serial:       010D0C9F4328584F5E62C422BD776586B8321480
Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     54696
IP address blocks:        216.181.164.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c4:22:bd:77:65:86:b8:32:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=b06468b7-5d2c-4f2b-aae1-4492c0e22bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:46:8c:ff:fd:fc:02:f1:4b:25:21:45:14:
                    f3:1a:13:52:a6:87:9d:1a:2e:03:84:f8:76:8e:33:
                    e4:81:08:2f:39:f0:b0:df:3d:0e:32:89:d3:d2:65:
                    30:a6:89:37:61:b5:d2:d4:ab:13:6b:b8:c9:34:ce:
                    05:28:ba:0b:b2:f9:1b:d2:cb:b6:49:a4:e7:b2:bc:
                    5d:e7:63:7c:5f:88:a2:b5:b0:3e:f4:45:3d:18:df:
                    ef:51:e8:22:e3:e2:46:1a:53:1a:a8:24:7d:7c:25:
                    d9:e8:fb:e5:7b:3b:5f:41:f2:05:ea:68:9f:7a:19:
                    2e:86:5d:6d:6e:4d:b7:07:38:85:55:93:40:90:12:
                    9d:46:72:37:3e:22:8d:dd:77:32:45:4d:83:73:42:
                    75:69:42:6b:6d:9e:58:6e:33:b4:07:3a:ef:2c:03:
                    08:fb:a8:d9:fa:38:a3:8e:f5:c0:cb:12:51:37:a9:
                    7a:22:03:6b:4a:a2:66:cd:30:8f:fe:83:b4:0f:e3:
                    b4:ae:e5:c2:e2:b8:3a:40:70:e9:f8:2b:92:80:20:
                    34:b8:ee:7f:7e:79:46:54:8b:57:5b:4b:2d:45:be:
                    7e:3b:95:fe:99:25:46:08:56:3a:cc:31:97:39:7c:
                    4e:88:62:6c:71:23:da:4b:14:11:a8:44:26:fb:89:
                    59:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:A3:EE:B0:A0:AE:5E:98:E6:6F:5A:9A:6B:86:DD:88:44:39:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/badaea97-a20a-3ae2-9d3b-b1f6549d00ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl

            X509v3 Authority Key Identifier:
                keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.181.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:11:b1:f1:90:67:42:3a:eb:e5:81:36:02:40:8d:2f:a5:
         1e:68:29:80:e0:8c:2b:ec:a1:40:26:01:fa:b3:62:1b:0f:37:
         7d:f5:87:ea:35:7e:f2:bf:62:81:5c:ef:87:63:8b:fa:ec:f5:
         04:d9:9a:c4:2a:15:9c:70:3d:36:64:6f:58:f8:f8:13:5a:c4:
         b1:79:1c:aa:b9:81:4a:fb:7a:e7:93:cb:fb:c8:5b:55:51:d8:
         22:cc:fc:8a:5a:ef:08:7c:42:8d:1d:7b:60:2f:b2:c5:ea:2f:
         a1:08:fa:19:9a:6e:3a:1f:48:6a:56:2a:61:5b:f1:47:13:2e:
         77:22:31:ce:41:df:43:58:0e:e6:bc:db:fd:90:ee:f6:f3:dc:
         dd:e1:f7:db:8c:e8:ef:97:cf:7c:8e:96:b0:e6:ef:0c:f5:54:
         4b:6f:c4:e7:03:88:8f:08:66:35:bb:96:13:60:9e:bf:4f:90:
         e9:c7:1d:01:5c:82:9e:ad:dc:af:b7:fb:d4:d5:e1:ae:3a:64:
         9a:7e:7d:fa:33:ef:62:45:e0:d5:e5:07:87:58:1c:b5:7f:e6:
         ba:d6:e3:5d:4e:60:9e:82:89:4a:8e:85:cc:43:86:26:c7:84:
         ed:78:e7:80:0a:aa:c3:33:bb:d3:e8:29:3d:0b:4a:0a:5f:5c:
         ad:f0:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:23:23 2026 by rpki-client