Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa
File:                     1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa (raw, json)
Hash identifier:          smFfgkkJp9XquhfPr6xg2CfCZGXm1PupRa/C6cSPfMo=
Subject key identifier:   B0:AC:C6:97:61:77:13:1B:8A:AE:15:A6:AB:8C:7A:2C:A4:4B:51:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF4849689030CD3449600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     394127
IP address blocks:        2001:470:149::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f4:84:96:89:03:0c:d3:44:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=10433a1b-0969-4d60-8c60-34336124e7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:b0:6e:76:c0:25:27:1d:d6:3e:fd:38:f7:
                    57:69:1d:d3:9f:2a:13:6f:6c:64:0a:36:e9:d5:23:
                    78:1e:03:53:07:c5:15:2d:2b:02:88:07:7c:9f:58:
                    8e:af:a1:d5:4b:5c:9e:9f:45:44:ae:1f:d9:0d:bf:
                    00:db:77:3d:05:40:cf:ca:18:a1:09:e1:50:8a:6e:
                    ea:52:a2:01:25:73:1d:b1:82:43:af:e8:b7:28:24:
                    94:d1:bf:86:23:4c:3d:ae:f9:a7:78:6e:77:1e:63:
                    06:2d:12:61:5e:b4:1d:c0:db:f2:79:fb:4d:6f:76:
                    ac:ac:92:69:91:cc:29:a4:3e:ea:37:0b:ac:2a:2e:
                    39:29:d3:a1:ed:e0:5e:b1:ca:38:45:c3:ce:32:b7:
                    5a:9a:39:30:96:cc:74:18:71:ee:01:0a:f3:49:59:
                    34:f6:f4:36:a9:61:7b:b1:f1:05:91:17:b8:ee:60:
                    da:85:84:d7:89:f9:ab:50:20:51:50:df:54:7c:95:
                    73:6d:1e:dd:ac:ab:ed:de:a9:44:19:d6:7e:fe:39:
                    d0:b4:93:43:04:41:c4:df:33:6f:94:af:72:af:26:
                    7a:52:85:f0:63:33:74:7e:51:db:96:d8:30:cc:12:
                    63:2c:ce:b4:e6:f0:dc:11:83:26:c7:40:b1:66:b4:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:C6:97:61:77:13:1B:8A:AE:15:A6:AB:8C:7A:2C:A4:4B:51:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:3f:51:8b:cb:8d:54:ab:f2:e8:ea:a5:74:e2:ae:03:ca:c3:
         6d:8a:6a:5e:7b:cb:17:ec:48:5c:97:9c:db:e9:b2:9a:70:80:
         ad:db:60:62:7f:4c:2c:d6:ef:59:18:37:65:36:a6:7c:5e:50:
         07:b0:e5:10:44:b9:b4:2f:1c:67:cc:30:b3:6a:eb:8a:f0:ba:
         ca:26:c8:d6:aa:32:a6:f3:ae:8c:3c:44:05:ab:fa:01:5f:a8:
         92:79:cd:8f:b2:a8:d4:6f:ba:e9:2c:ea:e8:b9:84:04:88:40:
         eb:20:3d:34:42:73:e4:50:82:c2:18:4e:ec:5d:4c:77:81:f3:
         af:37:43:72:11:27:8b:dc:2b:18:77:b2:9d:75:9e:73:13:46:
         1f:68:c8:b4:a8:61:88:89:08:10:a0:4b:99:35:86:7e:cc:3d:
         bb:dc:f6:56:b4:bc:9f:e3:df:77:72:52:c1:f1:76:4f:07:ba:
         b0:c7:67:a7:43:8d:60:25:14:a7:be:53:de:06:d9:d3:13:cb:
         b9:46:65:64:e3:e2:99:21:f5:e7:5e:50:cf:15:32:5a:d6:64:
         16:a3:2d:27:1d:23:e6:04:39:1e:72:96:4e:e1:c3:79:ed:c1:
         8d:09:f1:89:7c:f5:e3:69:e3:f5:ff:de:e3:da:19:75:88:19:
         4d:08:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:58 2026 by rpki-client