Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa
File:                     034f7432-b27a-3ff4-a74e-a8537f8751fd.roa (raw, json)
Hash identifier:          4vK5B0H3RWaeMC29e0si+Dg08N2dsGUk2cIgxqaOnjg=
Subject key identifier:   2E:10:48:21:FD:F4:F1:45:45:12:92:AC:8F:57:70:BF:CA:E3:6D:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA79BD12160FF4FDA69D71140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13781
IP address blocks:        2001:470:57f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:d1:21:60:ff:4f:da:69:d7:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3ce203f3-ac6f-4eb3-9b91-189ae79e8111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:7b:9a:f7:2a:54:4e:cd:4b:4e:e5:f2:49:
                    03:99:e4:6c:f2:b7:49:32:a9:25:8f:90:c5:53:33:
                    f9:3e:a1:12:50:ff:98:ba:0f:c2:5d:aa:4b:29:c7:
                    21:f4:b7:89:c2:e2:91:af:ef:56:22:2c:80:bb:66:
                    11:f3:79:02:e7:f4:f8:21:05:21:dd:31:b7:40:be:
                    01:0b:ba:f3:c0:a0:57:02:52:84:6c:d8:fd:37:99:
                    c4:bc:eb:92:11:0e:0e:7a:ee:57:8a:23:be:5e:05:
                    ef:b4:fd:67:d8:a6:95:39:e3:77:18:25:0c:ab:84:
                    56:1c:79:85:06:02:29:c7:70:c3:31:47:ab:e8:89:
                    f3:e2:0b:87:7d:f2:32:5f:78:3f:b0:af:46:5e:b7:
                    6f:81:7a:e8:70:5a:9c:b7:72:ad:66:d5:50:ee:36:
                    1f:c9:7a:61:7f:d5:ae:f6:63:f6:42:bb:cc:9a:36:
                    1b:ea:6e:af:f4:80:8b:a8:0e:a6:ec:28:7e:ef:75:
                    b3:5c:e2:74:cf:e9:52:63:48:06:ed:74:d7:87:1d:
                    13:ce:dd:5a:81:4d:03:0b:d3:34:d5:53:7f:b4:e8:
                    4e:6b:89:e4:9e:59:db:d8:30:32:fe:33:1d:29:6f:
                    54:1e:7a:f8:23:84:f3:25:a2:06:98:77:f0:64:e8:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:48:21:FD:F4:F1:45:45:12:92:AC:8F:57:70:BF:CA:E3:6D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:57f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:90:78:16:d7:4a:87:c4:7b:3e:c7:0b:41:06:55:77:4e:
         de:60:5a:83:61:89:c4:a3:85:3a:67:10:32:79:09:2d:5f:08:
         18:57:6e:30:a9:b0:b0:c9:2c:d7:e1:b2:46:82:46:0f:39:be:
         6c:01:b1:a2:24:1b:21:f5:45:3b:ca:d6:e9:b7:7b:d2:59:68:
         51:52:da:6d:7d:a5:8b:a2:5d:9b:d9:1d:da:74:68:0c:80:60:
         ff:40:5d:f7:02:ff:b7:e7:09:59:1a:0c:e5:98:6c:c3:e7:47:
         b5:f0:52:41:b6:87:ef:41:e1:52:2f:f9:2c:cf:e5:0e:31:cb:
         b1:55:30:d5:0c:d3:ab:cb:d2:02:ea:b5:e1:af:17:b5:b3:03:
         0a:0b:4f:fc:73:8d:44:02:4b:e6:b0:b2:7f:71:c7:20:5c:ac:
         ad:20:b4:d3:d3:6f:13:07:59:7e:97:1c:37:53:41:d5:c4:f9:
         47:8d:29:2a:a4:bf:ac:15:f6:f3:ed:09:db:99:64:c6:88:bd:
         42:20:48:c3:72:64:15:60:67:bf:99:de:11:ab:3e:f4:28:c6:
         b2:1b:2c:c2:d4:cc:6d:6a:c1:dd:48:ce:35:78:0a:1a:f7:bd:
         2b:d0:c8:5d:cf:ed:32:64:f6:0e:08:45:0d:89:fe:93:9c:cd:
         e9:de:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:47:13 2026 by rpki-client