Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0051339d-07b9-3238-a212-0700cf404962.roa
File:                     0051339d-07b9-3238-a212-0700cf404962.roa (raw, json)
Hash identifier:          qo/0sD5k1Uj7sgvNy6JiC4SgirtX1VyIJbn8MY/book=
Subject key identifier:   25:F1:BF:38:C0:AD:CA:CC:7F:A4:7C:E5:3B:90:A4:BB:C7:D5:70:F4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F306146B08A167CB32EE93980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0051339d-07b9-3238-a212-0700cf404962.roa
Signing time:             Wed 16 Sep 2026 01:30:15 +0000
ROA not before:           Wed 16 Sep 2026 01:30:15 +0000
ROA not after:            Tue 15 Dec 2026 02:30:15 +0000
asID:                     200477
IP address blocks:        2001:470:622::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:61:46:b0:8a:16:7c:b3:2e:e9:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:30:15 2026 GMT
            Not After : Dec 15 02:30:15 2026 GMT
        Subject: CN=f28511bb-0712-4d4f-92bc-f46523bc4c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:14:d7:bd:8e:13:5c:4f:0f:aa:43:b4:bc:
                    17:ea:2b:50:ab:18:a2:a9:0b:1b:99:33:5b:60:0c:
                    88:16:ce:e0:4e:14:19:ff:b9:db:2a:48:f8:08:01:
                    78:5b:90:41:c7:ea:22:9c:b4:a4:19:18:fb:18:4b:
                    bd:03:e0:30:ed:fa:ed:18:5b:fd:db:65:d4:8a:84:
                    0f:24:23:e8:92:e2:e2:31:7d:e6:fa:13:6a:aa:ee:
                    e4:e9:48:d3:36:d7:13:5d:9b:ca:3b:92:eb:5a:42:
                    70:57:4c:36:9f:a3:5f:d7:32:b1:2a:36:34:3b:7b:
                    c1:96:93:c4:1a:47:96:8b:05:4d:f4:b8:13:da:ba:
                    e3:d1:1f:74:9e:13:7b:db:21:9a:e6:ce:e0:30:d0:
                    fe:69:53:c3:ff:90:78:e5:6a:7e:92:1b:45:18:ea:
                    38:ae:72:4d:ca:13:04:93:d8:ad:9b:28:3b:cd:95:
                    6b:52:78:a6:ee:1b:26:0d:c4:8f:d4:fb:c7:3e:19:
                    28:f7:c5:b0:3a:0c:ed:0c:02:d9:fb:d8:d7:82:a3:
                    00:9c:3c:44:22:4b:e2:3c:12:78:77:c6:bc:3c:e1:
                    70:4e:c2:28:ee:d8:91:75:66:7d:7e:94:4c:6a:c4:
                    0f:29:4e:a9:14:2e:5c:0a:b0:1e:c6:c7:d1:b2:01:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F1:BF:38:C0:AD:CA:CC:7F:A4:7C:E5:3B:90:A4:BB:C7:D5:70:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0051339d-07b9-3238-a212-0700cf404962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:622::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:32:8f:f3:c5:a2:b6:02:6c:c6:33:d5:c8:95:fd:b9:da:e6:
         9b:66:84:d9:dd:bb:b8:3a:0c:66:41:0b:04:90:17:73:d4:30:
         d5:cd:e9:af:19:bd:da:2f:ce:2d:c4:ec:ac:4c:e1:b3:04:6f:
         a2:d8:2f:5a:d9:52:06:58:6c:2c:04:14:37:86:54:06:75:13:
         03:1e:58:d8:0e:01:7b:91:61:c4:eb:a8:92:00:e3:a2:c9:c6:
         f9:3f:bc:ed:ff:af:10:dc:e0:fa:c8:86:9c:aa:8e:67:dc:8b:
         fa:9e:76:dc:d6:07:1c:e9:58:4c:b7:91:8a:01:1d:44:ad:c1:
         4e:90:17:52:2a:37:6e:d8:5e:2a:92:f2:04:e0:65:67:2b:af:
         1a:6d:ee:59:1a:dc:d0:6a:54:cc:64:96:74:9e:1b:de:f2:5e:
         28:2c:6a:94:d9:d7:ba:e8:c3:a9:6c:d9:dc:ef:97:e5:29:6d:
         de:30:a6:23:1b:6f:12:b3:1f:95:7c:ce:86:f0:6f:0f:33:3c:
         51:5d:67:57:22:df:e1:ff:d8:76:8d:c0:51:2c:b9:32:66:ef:
         f2:09:d1:d8:f8:cf:24:0d:7d:a2:cd:35:31:aa:5f:19:45:54:
         1e:e6:50:ff:28:15:d0:a7:67:d2:d9:53:27:7b:c3:5d:81:7a:
         69:64:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:15:21 2026 by rpki-client