Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13eccca5-c314-3fff-b342-4132b63f9032.roa
File:                     13eccca5-c314-3fff-b342-4132b63f9032.roa (raw, json)
Hash identifier:          EUqwZgHg+Ajtuqi22r9vgcGZ4h8AlA7b8UwZ+9MTo/8=
Subject key identifier:   92:0D:F0:20:94:E8:90:E4:B4:1E:5A:76:6F:6F:09:CA:08:D0:1A:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7998334B15478BBEC1F5B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13eccca5-c314-3fff-b342-4132b63f9032.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     211826
IP address blocks:        2001:470:53b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:83:34:b1:54:78:bb:ec:1f:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=62a83b7e-871e-4e93-a315-fe4588a53017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:58:f5:eb:d6:b7:2c:55:07:ff:28:04:76:
                    8c:d1:f5:c5:86:73:45:e2:f7:d4:4f:aa:b1:97:4c:
                    60:91:f5:53:39:1b:96:b5:69:2e:26:4f:ab:c6:45:
                    f7:9a:60:4b:fc:b6:98:df:5a:9a:8c:dd:2c:d7:18:
                    76:97:b9:70:22:ac:01:26:39:23:a9:c7:98:42:58:
                    39:f2:22:b6:d0:66:5b:b5:b1:85:bb:d4:bb:aa:b0:
                    82:56:43:53:5c:8f:f1:ac:4b:60:43:df:62:1a:2c:
                    f0:3b:2d:1d:82:e6:25:2a:0b:ce:9d:20:f3:95:1b:
                    9f:70:4c:63:b7:80:64:f7:d1:cb:6a:f7:77:e3:87:
                    2d:93:49:21:46:42:4c:5c:b8:ba:4d:ed:85:e6:77:
                    0c:92:a6:52:d3:cb:05:0e:bd:ad:fe:94:87:d4:29:
                    1f:ed:6c:00:65:68:42:29:a4:87:6b:5b:d6:5b:f3:
                    b1:af:94:95:f8:79:87:42:82:b0:d6:57:27:d5:0f:
                    b5:34:5b:bb:01:da:2e:ec:2e:56:ab:46:15:25:a8:
                    63:35:87:eb:51:c2:a5:52:09:0f:98:f6:2f:73:80:
                    db:24:99:df:6d:34:66:4f:17:e8:f9:c3:d6:3b:3e:
                    6d:75:64:f5:5c:f1:73:ca:10:e2:40:e2:ac:58:ce:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0D:F0:20:94:E8:90:E4:B4:1E:5A:76:6F:6F:09:CA:08:D0:1A:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13eccca5-c314-3fff-b342-4132b63f9032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:53b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cb:fa:1c:de:af:81:14:cb:36:5e:ca:f0:39:86:5c:a8:f3:
         11:56:1c:12:1e:76:14:10:cd:89:a2:ce:b1:41:94:0f:44:cf:
         b6:16:b8:52:c3:4e:b4:15:86:c6:d1:ad:d9:1b:3b:61:d8:d1:
         b9:c2:12:2e:29:80:75:6f:ee:95:e0:d4:2d:e1:9e:95:39:93:
         2f:64:64:56:4a:05:4b:3c:94:d5:84:61:d4:b1:46:f4:63:10:
         4f:69:e0:46:39:b0:17:8a:77:ed:f5:be:39:1b:85:d5:5b:ab:
         9c:7e:34:67:7c:87:6b:af:60:dd:f2:e0:c9:fa:c4:43:65:ed:
         44:0d:7c:c6:67:27:bf:3d:5b:0e:3e:0d:22:31:57:5e:00:30:
         60:97:cd:45:8e:7b:8b:43:10:38:cd:50:9a:53:d0:40:c0:04:
         7b:9c:8c:a2:30:13:34:03:d4:b7:43:04:02:f2:87:f9:89:98:
         ec:57:ac:bf:8f:7f:4e:6c:94:8f:7d:b5:23:34:97:58:1e:d2:
         7d:b2:66:00:30:42:1c:6c:4d:88:f1:bb:6c:9c:fa:fc:af:32:
         6a:bb:f5:65:b8:ae:9e:d5:da:a0:15:b7:76:24:86:5f:17:ef:
         2c:03:ae:39:f9:47:1a:b2:de:6f:66:87:6b:71:19:a2:6a:83:
         6b:68:1e:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmYM0sVR4u+wfWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjJhODNiN2UtODcxZS00ZTkzLWEzMTUtZmU0NTg4YTUzMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGdY9evWtyxVB/8oBHaM0fXFhnNF4vfUT6qx
l0xgkfVTORuWtWkuJk+rxkX3mmBL/LaY31qajN0s1xh2l7lwIqwBJjkjqceYQlg5
8iK20GZbtbGFu9S7qrCCVkNTXI/xrEtgQ99iGizwOy0dguYlKgvOnSDzlRufcExj
t4Bk99HLavd344ctk0khRkJMXLi6Te2F5ncMkqZS08sFDr2t/pSH1Ckf7WwAZWhC
KaSHa1vWW/Oxr5SV+HmHQoKw1lcn1Q+1NFu7Adou7C5Wq0YVJahjNYfrUcKlUgkP
mPYvc4DbJJnfbTRmTxfo+cPWOz5tdWT1XPFzyhDiQOKsWM71cwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJIN8CCU6JDktB5adm9vCcoI0BpKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTNlY2NjYTUtYzMxNC0z
ZmZmLWIzNDItNDEzMmI2M2Y5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAU7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDL+hzer4EUyzZeyvA5hlyo8xFWHBIedhQQzYmizrFBlA9Ez7YW
uFLDTrQVhsbRrdkbO2HY0bnCEi4pgHVv7pXg1C3hnpU5ky9kZFZKBUs8lNWEYdSx
RvRjEE9p4EY5sBeKd+31vjkbhdVbq5x+NGd8h2uvYN3y4Mn6xENl7UQNfMZnJ789
Ww4+DSIxV14AMGCXzUWOe4tDEDjNUJpT0EDABHucjKIwEzQD1LdDBALyh/mJmOxX
rL+Pf05slI99tSM0l1ge0n2yZgAwQhxsTYjxu2yc+vyvMmq79WW4rp7V2qAVt3Yk
hl8X7ywDrjn5Rxqy3m9mh2txGaJqg2toHi4=
-----END CERTIFICATE-----
Generated at Sat Sep 12 08:27:48 2026 by rpki-client