Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa
File:                     60295918-dfbc-3bea-bf20-df0fc072fbea.roa (raw, json)
Hash identifier:          ELvH8AEo7dTWPPJe9fqP3YC4tIn0FAKpDBrLwZqHkks=
Subject key identifier:   25:8E:BD:D4:01:97:11:7B:E7:2C:B8:37:17:96:6A:42:CF:B3:5E:F0
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584F4975BB1DB73FEA5B5699D200
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30058
IP address blocks:        2001:49f0:d009::/48 maxlen: 48
                          2001:49f0:d014::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:bb:1d:b7:3f:ea:5b:56:99:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d04d89e-3d02-4570-9809-2663565f4849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:86:ea:e1:0b:78:54:e3:8e:2c:83:b6:39:27:
                    94:64:8e:80:e8:e8:3f:dd:1b:ce:e0:af:08:46:36:
                    11:e4:d6:d5:76:fd:25:2c:4b:9a:20:1e:8a:ad:21:
                    9f:ab:69:6d:5d:21:cd:89:07:b8:db:26:30:60:de:
                    c7:a6:59:23:d4:d7:ef:18:d0:23:6b:88:89:13:64:
                    82:c7:37:1d:c6:f5:fe:cf:c7:92:37:f5:86:dc:e8:
                    6a:43:da:99:a2:d3:d2:9b:98:7a:c8:50:ad:5b:66:
                    ea:a8:4e:ca:5b:11:3a:ed:b6:d3:f0:86:5e:cf:d6:
                    eb:ef:9b:77:2b:b3:a8:fb:df:96:0e:98:f9:49:56:
                    18:8b:e4:91:4f:00:ca:ee:78:bd:34:5a:a6:c5:78:
                    bd:ba:b4:b9:dd:ac:42:14:ec:cc:dd:78:74:ac:07:
                    4d:9a:92:2e:48:d5:69:05:b5:aa:d2:45:81:1d:20:
                    c2:7a:d4:f9:7d:25:10:f8:50:93:1d:34:2f:52:c3:
                    34:1d:96:c2:c6:21:0d:a4:b4:04:6a:85:6b:33:28:
                    38:37:9c:76:25:9e:1b:e6:f8:4d:71:5d:d9:87:71:
                    51:15:e0:6c:d9:ca:88:25:6d:64:7f:af:08:08:f3:
                    f2:b0:8d:1f:cf:4a:14:d7:dd:be:98:97:44:de:0b:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:BD:D4:01:97:11:7B:E7:2C:B8:37:17:96:6A:42:CF:B3:5E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/60295918-dfbc-3bea-bf20-df0fc072fbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:49f0:d009::/48
                  2001:49f0:d014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:36:f3:c8:81:ec:5d:a4:10:dc:c2:f9:60:68:d0:0d:48:4b:
         0a:f8:0a:b9:e9:a3:a9:e9:83:55:63:8d:f8:55:ee:b3:e7:98:
         21:5b:11:69:b7:7c:a1:0c:bd:aa:fd:2d:37:47:71:be:85:95:
         45:7c:38:f2:8d:4a:21:98:f7:02:a1:22:a3:d4:dc:54:0a:ef:
         fd:75:b6:c9:36:21:0f:b9:c2:2f:62:28:61:4f:91:60:25:f4:
         47:8f:d0:fd:fd:7d:ab:2a:f2:8d:2e:ea:fd:ea:f9:5e:b1:d1:
         f1:87:f1:a4:1d:32:b6:cb:f5:ac:30:e9:a3:87:f8:b9:72:82:
         f6:6b:c3:0a:0a:5f:c1:73:c0:f0:a1:3c:41:9a:33:4e:49:63:
         3d:c0:cb:3d:a5:ab:2e:f6:bc:00:c6:19:c9:55:7c:94:16:fa:
         df:bd:4e:2b:05:92:b7:3a:ce:59:82:d5:66:f5:e4:cb:07:0f:
         07:2f:39:1d:97:37:f5:f2:ba:07:33:bf:fd:7e:62:be:2c:05:
         35:05:bf:34:f9:ce:d4:bb:1f:2d:5d:fb:11:e2:e0:a1:cc:20:
         e8:a1:94:3d:05:f5:4f:a0:ac:9f:92:cc:18:f7:ee:20:d4:9c:
         e8:03:a7:aa:ab:d5:1e:4a:eb:e5:8e:21:f9:5e:f3:c1:35:7c:
         01:22:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:43:08 2026 by rpki-client