Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
File:                     ba59b760-0142-3f51-af33-d337e00ea9a6.roa (raw, json)
Hash identifier:          ozUndyZX3qfGUfCK+sHqXh/r7xUfea4L2Hd5gDPU/5w=
Subject key identifier:   46:95:F0:D3:0E:FE:32:FA:B9:EE:76:FC:A5:8E:D4:ED:F9:47:5F:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4F98654C997D6D1340B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     12222
IP address blocks:        2001:4878:a038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f9:86:54:c9:97:d6:d1:34:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=79933133-5882-4493-be39-d49ebbb4e617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:8c:ac:ee:47:83:6f:f8:fd:3f:d2:fe:ab:
                    11:b7:5c:c1:0a:57:ca:5c:67:bf:49:8f:25:89:62:
                    d3:57:d2:fe:63:d6:75:9f:f3:a2:1c:5e:4f:29:b5:
                    9b:e6:56:bc:4a:88:cd:1a:b8:09:86:bd:b6:f5:7d:
                    da:be:01:36:55:a1:f4:13:47:66:eb:6e:db:9f:35:
                    f6:5b:6d:b0:49:34:80:f3:e2:77:b2:cf:0e:79:bb:
                    f6:06:c3:96:d9:ff:30:68:89:92:28:ed:87:38:be:
                    b1:78:a7:8a:35:d7:a9:72:fc:17:d5:d9:1b:c8:e9:
                    d3:1b:a1:61:6c:87:ce:71:0b:ed:4b:de:7d:c7:05:
                    31:ed:c9:02:e8:6a:00:03:c8:23:1e:48:46:db:f8:
                    47:0a:cf:0d:08:58:58:5e:97:eb:a6:7a:7c:ac:17:
                    b8:46:e1:1f:87:8a:d6:63:3d:61:f5:8e:bc:2f:c4:
                    f6:aa:4d:67:9f:82:c9:a8:eb:33:21:c8:25:c1:51:
                    59:51:bf:e5:37:72:b8:95:cc:e2:8c:ee:59:db:c7:
                    bc:6c:bc:e5:8f:41:3e:a6:97:d9:95:1f:cb:f3:46:
                    5d:ad:91:e8:0c:68:f8:7d:55:5b:ff:1c:91:fe:40:
                    10:9c:12:16:8a:32:85:f7:9c:ef:52:eb:bb:cf:3d:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:95:F0:D3:0E:FE:32:FA:B9:EE:76:FC:A5:8E:D4:ED:F9:47:5F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:8a:3a:58:d0:6d:b5:fb:3b:15:85:48:2a:c6:a3:84:b8:
         24:62:34:68:3a:95:07:c8:8e:35:07:14:b3:36:73:2d:03:43:
         b5:3a:d0:9b:af:63:da:27:5c:39:fb:b7:ac:03:a1:31:ec:ec:
         9d:f0:9b:d5:bd:23:af:73:9a:b7:78:4b:53:60:5f:da:37:dd:
         e9:d0:a8:e0:5d:2e:6c:8e:22:7e:b5:7a:18:55:1a:f3:c5:00:
         2a:cd:15:bf:70:8f:aa:e6:8b:80:84:b6:ef:65:1f:64:e4:e0:
         d7:e7:32:d9:13:ea:5a:59:b6:32:54:9b:f0:ed:a3:8d:42:63:
         ce:d7:03:fc:53:d0:c8:87:1a:50:b0:0d:c6:dc:b2:fd:0e:c6:
         75:91:e3:56:82:99:bd:b5:93:36:4c:33:75:24:b0:70:d9:d3:
         75:af:93:41:a8:31:c3:91:54:cb:65:98:53:75:eb:38:bd:88:
         d0:84:5e:47:39:8d:84:b8:05:5b:05:9d:98:7e:29:e9:81:b8:
         6a:c1:23:af:da:f5:73:78:b7:ba:83:06:47:70:4b:0d:45:fe:
         4d:79:5a:3d:5b:ac:c0:01:0a:fb:b2:39:0d:6d:0d:7f:21:bd:
         b9:88:ac:2c:9c:5e:92:80:55:d3:9b:01:66:aa:35:9e:05:2b:
         4c:55:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:06 2026 by rpki-client