Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa
File:                     ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa (raw, json)
Hash identifier:          QYRMKB/qQ7P3dM0cbscuO8PxTxpzYoJ7R1mHUkLpnKM=
Subject key identifier:   04:58:C5:E6:0A:EC:3E:B3:AF:6E:E6:07:95:1E:C0:FC:2A:52:34:DC
Certificate issuer:       /CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
Certificate serial:       010D0C9F4328584E15E49E40400398AAFC5D9780
Authority key identifier: 74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     401764
IP address blocks:        205.215.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:9e:40:40:03:98:aa:fc:5d:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6e260c-421d-48c3-b47d-d76ac074fbba
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=d623273a-b76e-4be3-8cfe-09c7507a23f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:19:99:56:07:62:a5:a6:69:00:44:e8:a7:
                    97:36:9e:33:09:30:35:0d:d1:f4:ca:72:63:b9:e0:
                    c6:55:d6:64:7f:27:bb:2a:82:2b:32:f7:cc:58:6c:
                    d7:15:59:d4:66:07:b2:9b:75:db:a3:6a:c5:ad:a1:
                    b9:3e:71:35:57:c8:a1:27:aa:39:57:4c:db:07:6d:
                    53:04:db:77:6c:a7:94:1e:a1:4d:9e:08:95:80:ac:
                    ed:41:08:c8:15:31:6f:63:6e:0d:1f:b4:98:89:20:
                    46:b0:e9:a3:bd:1b:e6:55:da:f0:13:f6:e3:8f:dc:
                    81:c3:c3:56:9e:63:9a:01:a5:78:1f:88:38:29:4e:
                    f8:d5:9b:5d:d6:13:29:76:5d:de:aa:a9:34:38:ce:
                    72:73:96:bd:63:74:be:d1:0a:24:99:3d:5e:4c:59:
                    e1:f2:68:3c:0a:bd:f5:e0:50:58:8c:b6:1a:6a:33:
                    51:d1:c5:06:d0:b7:9b:1b:1d:75:1d:68:03:d9:c8:
                    0c:b6:d3:04:f9:cd:a0:f6:11:b0:90:36:c0:41:89:
                    9f:09:0c:61:4d:a0:5e:ef:d4:07:0d:5f:08:9e:e1:
                    45:16:00:e9:4d:2b:a0:ae:99:62:ce:b3:83:fc:63:
                    0a:bc:04:6e:cf:50:5e:fc:2f:0b:a9:87:0b:3e:8b:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:C5:E6:0A:EC:3E:B3:AF:6E:E6:07:95:1E:C0:FC:2A:52:34:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ba2cd280-d2ed-3b00-9c8b-baafbffaa367.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba/ae6e260c-421d-48c3-b47d-d76ac074fbba.crl

            X509v3 Authority Key Identifier:
                keyid:74:93:60:5C:AC:A5:72:63:1A:BA:B7:95:2E:DD:67:02:83:DE:3C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae6e260c-421d-48c3-b47d-d76ac074fbba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.215.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:11:e5:6d:07:0b:10:25:47:78:09:da:79:7e:9f:d8:7b:b2:
         a1:1e:87:a5:3e:b6:3c:2f:72:06:cc:22:a6:fb:a5:af:98:32:
         9e:a0:1e:c0:63:5b:8d:27:85:41:d3:6e:b0:7c:22:80:49:2b:
         6d:d0:fd:9c:bf:d4:29:63:f7:3c:b4:7e:4e:64:be:bc:88:91:
         6c:be:5f:fd:fc:6b:9a:25:ae:df:93:b7:4e:f8:fc:75:c5:30:
         1c:d1:af:0f:ee:64:4a:85:74:15:00:54:89:23:47:ef:44:8f:
         1d:b7:34:e8:91:17:a3:2a:f2:9d:bd:04:62:31:2f:a8:a0:ba:
         72:a8:3e:8b:5c:ff:fb:7c:8e:09:2a:c7:8e:91:d0:19:41:27:
         89:08:a0:c5:a0:49:f3:98:ca:11:06:46:05:50:ad:f9:af:af:
         36:55:8b:d5:70:bb:41:6c:a7:94:23:a3:56:ea:1c:21:f6:f7:
         03:84:a2:23:41:f8:f8:4b:20:15:04:80:b4:fd:7c:19:e4:e9:
         fc:e5:58:af:2e:b8:93:85:54:76:d0:33:92:e5:bb:9c:35:68:
         33:2e:3d:76:59:04:f3:10:86:6b:09:da:ea:0d:54:d8:e1:f9:
         ab:1f:85:5b:8f:54:e2:3d:f3:b5:d1:7d:53:26:9a:6c:19:69:
         b4:0a:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:14:58 2026 by rpki-client