Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d929537-78c1-35d7-a4e7-e525c361d46d.roa
File:                     1d929537-78c1-35d7-a4e7-e525c361d46d.roa (raw, json)
Hash identifier:          87InkLNKu+Hcksy+Iux/xSKvg/jVKq32fnGyfFo/8m8=
Subject key identifier:   08:10:07:32:93:98:67:69:0E:5E:78:56:2E:E1:0A:6C:C3:AF:05:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6A30B4F111C6F9315900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d929537-78c1-35d7-a4e7-e525c361d46d.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     204875
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6a:30:b4:f1:11:c6:f9:31:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=6501deef-b480-4d35-b88c-6b6ea15e874e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:11:c1:8e:17:0f:ad:fb:cf:f9:a9:3d:6b:
                    b5:26:dc:5b:ad:7b:03:8b:df:c1:72:d9:d5:61:9d:
                    9f:91:7c:9f:bd:f5:06:32:04:35:e3:49:d8:30:d1:
                    86:dd:f6:7a:cb:10:d3:bb:e5:8c:2f:18:6e:29:d0:
                    f7:df:8f:0d:cf:e8:fb:79:58:06:63:dd:c8:1f:2b:
                    c3:ea:42:47:09:9f:e9:46:fe:78:dd:80:0a:4f:cf:
                    6f:10:75:41:da:fd:e6:71:9a:c9:8f:ab:d6:a6:a3:
                    c3:d1:cc:c1:42:80:cc:46:d3:ad:53:10:9a:c5:fc:
                    82:57:4a:a1:32:2d:87:82:b6:e4:23:42:9f:a7:73:
                    1a:e6:a5:95:19:39:5d:c9:ec:b2:0b:ad:12:88:0a:
                    2c:23:a2:02:8d:1e:6c:cd:8c:3a:c9:48:93:8a:02:
                    d8:13:4c:2a:3f:b0:33:19:be:9b:75:06:69:eb:15:
                    92:96:5d:a8:75:07:46:b0:24:b6:72:a3:2b:04:32:
                    34:69:c4:da:7f:a3:53:c3:bc:1a:36:b4:40:69:31:
                    ec:2d:cf:6b:69:87:2d:32:9d:7c:b5:e7:12:37:49:
                    83:78:de:d4:fb:62:38:ab:17:2c:af:db:36:53:a3:
                    89:f7:aa:6e:b3:f8:d9:0f:6e:2c:a9:a6:6a:d7:e2:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:10:07:32:93:98:67:69:0E:5E:78:56:2E:E1:0A:6C:C3:AF:05:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d929537-78c1-35d7-a4e7-e525c361d46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:5d:1b:de:bf:d5:50:56:3f:c6:32:7d:fb:ba:12:2b:0a:
         00:7e:70:89:c5:9c:18:34:34:b8:96:f5:ee:95:0a:ee:16:b8:
         bc:bb:b6:b7:97:4f:38:b9:9f:81:c4:93:c9:1a:35:52:b8:8b:
         b1:4f:6e:fd:04:20:ca:12:35:b7:63:dd:ff:b7:e6:59:39:05:
         a4:76:c2:30:0e:8a:73:9a:18:f8:93:4f:8f:b8:3c:42:e9:02:
         50:95:d4:8b:5e:24:22:2a:92:7b:2f:82:b6:ea:12:4f:1f:c7:
         08:88:58:42:b3:9b:3d:c7:78:31:1c:11:18:63:46:15:5c:ee:
         47:f3:dd:4c:c7:83:13:41:af:a1:9f:f4:95:bd:29:08:e3:8c:
         44:ab:09:96:24:1d:b5:4f:bd:b2:b2:d6:78:00:8b:9b:81:e1:
         eb:39:22:f5:75:76:77:da:54:0e:c3:66:36:30:07:bb:61:37:
         0f:8a:31:d0:65:d7:3c:13:48:97:a2:37:ad:19:e7:87:15:0d:
         f2:02:b8:ed:ae:7c:28:c4:86:9d:4f:26:63:d9:8f:d7:36:de:
         1b:e5:52:f9:90:c7:19:3d:a4:17:0b:07:cd:b4:c7:16:a5:51:
         2d:69:64:61:f7:b7:1e:71:2f:1d:48:b9:78:d6:07:4b:f6:86:
         36:29:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:34:32 2026 by rpki-client