Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
File:                     1048d88b-8309-3f5f-9d3b-cdb555b881db.roa (raw, json)
Hash identifier:          i07MtQcjv3ExpfJh5WeGCV9D/tyEZ88/O2XdS4gTtNY=
Subject key identifier:   1B:F1:A5:4E:56:0B:C5:41:89:4C:21:71:02:36:0C:1A:5C:AC:8F:4E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923EAE4BEE0FFD400AABC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     59895
IP address blocks:        2001:470:244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3e:ae:4b:ee:0f:fd:40:0a:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=dbf87507-cdad-42fc-b16f-e9c06ea66734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:0d:39:25:b6:7b:96:13:ef:92:60:e7:33:
                    57:83:69:fa:5e:b7:21:9a:75:e4:8c:d0:bd:c9:2e:
                    fa:a9:f6:7f:8b:2e:15:11:d9:14:29:ab:aa:6b:c8:
                    16:77:04:a4:67:ae:ca:62:61:ab:cb:cd:90:82:84:
                    e5:b2:e5:d3:8c:86:cf:9c:1b:a4:28:ee:72:91:b3:
                    b1:88:bd:56:70:3e:ec:26:d2:6c:37:9d:45:4b:c3:
                    e4:c4:aa:24:de:8d:cd:b4:e5:b0:cd:7a:ff:56:fe:
                    b4:ba:50:d2:c5:79:41:45:af:4a:4c:e3:eb:16:74:
                    55:56:98:36:51:76:ab:c3:c9:f5:aa:f4:61:f0:f7:
                    e1:00:c0:dc:e1:cf:f5:a2:6c:ef:12:2f:26:78:0d:
                    ec:be:90:ec:0f:5e:00:9f:60:e9:f5:73:94:d7:cf:
                    32:e7:10:d8:e5:c9:ab:aa:74:40:63:5d:24:76:23:
                    53:d9:46:f6:24:fc:6f:b9:8d:3e:7e:22:da:14:98:
                    ab:cb:58:94:c5:5c:2a:2a:3c:90:22:2c:56:6d:bb:
                    fd:dc:57:3d:1f:f6:e3:88:b0:73:2a:d4:ff:cb:36:
                    5f:58:31:61:79:29:5c:64:69:37:d1:86:69:38:1c:
                    62:47:7f:99:37:46:a9:d2:92:70:c8:fb:0b:3c:cf:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F1:A5:4E:56:0B:C5:41:89:4C:21:71:02:36:0C:1A:5C:AC:8F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:fb:4a:66:19:7b:4e:f9:cc:fd:37:d4:e0:2d:21:d3:c6:
         4a:a2:d8:29:e0:66:16:f8:cf:39:ef:1b:cc:4c:80:d2:b7:86:
         01:6f:b5:86:e0:32:13:20:4c:ed:73:bb:ff:26:56:2a:07:d3:
         a8:2e:96:05:8e:f4:ea:f9:12:cf:72:20:9c:51:2c:80:60:95:
         90:07:ee:19:d7:ba:59:92:1e:76:20:25:56:d2:3e:09:5d:d4:
         61:93:1b:41:d8:4a:65:6e:ac:f1:af:03:ca:a0:87:03:c6:40:
         85:8b:5a:a6:60:29:aa:5f:7c:60:16:46:7e:94:17:2c:76:04:
         1a:57:42:71:7d:01:49:3c:18:04:cc:d6:9b:43:f8:f5:3f:d3:
         9c:60:f3:37:28:1e:cf:36:aa:4d:8a:62:8a:9f:9c:ef:62:c9:
         73:90:41:49:5b:eb:aa:93:f1:3b:e3:7c:10:f5:b2:e8:cf:b7:
         d7:76:b9:2c:35:a5:ec:35:2f:5b:f6:c0:fa:1e:b9:39:a1:c6:
         8b:e7:fe:64:df:47:db:75:56:23:da:a4:dd:43:3d:10:6c:ce:
         63:a0:43:81:80:36:fe:29:e0:b6:37:fb:6c:d7:e8:46:a1:2d:
         ab:c1:e5:96:42:90:35:20:fc:00:bb:d0:e3:75:b8:bb:7e:54:
         e8:24:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:05:47 2026 by rpki-client