Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa
File:                     1fa2a60f-090f-357d-9108-2c2af7b2defa.roa (raw, json)
Hash identifier:          sc5PvNYVoIyJ3MUVvtteHW1yTZ27QHDEttrQ8aPQSQU=
Subject key identifier:   76:F3:EC:69:54:8B:F6:F3:20:2C:B5:A1:D5:00:5C:18:FD:92:55:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDB6CB4FE6A422D5E2900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     53813
IP address blocks:        216.66.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:db:6c:b4:fe:6a:42:2d:5e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=2b7e7ef5-bcb7-4dde-ab4a-3ede3b326714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:70:4f:b6:74:d7:46:9f:69:7c:0d:49:0f:
                    24:72:67:78:52:b3:4e:10:45:f9:ff:0f:2f:2c:f9:
                    75:19:6a:c9:a5:ff:62:0c:86:f1:3f:0a:02:8d:a8:
                    c2:05:a2:aa:1d:71:3e:e7:06:49:a3:ad:4c:53:4b:
                    ca:4f:a6:ff:cd:e1:17:0b:35:d7:4c:5b:5f:b5:ad:
                    cf:b1:92:e1:bc:65:e4:d0:cf:51:ce:e4:7c:ec:e5:
                    a9:9f:5e:fd:28:88:bd:09:d6:b2:1d:d5:cb:e8:c6:
                    85:1d:05:38:56:bc:d6:4c:85:9b:d8:55:77:fc:a0:
                    e2:e6:24:65:a2:88:0f:6a:74:17:86:b0:89:a5:46:
                    f7:6a:ad:02:ec:d5:f2:44:03:9f:d5:51:56:b7:6f:
                    7a:2c:74:40:a8:45:47:1a:9e:79:a0:eb:8c:e0:ba:
                    3b:34:ea:0c:87:fe:82:c7:17:9a:85:0f:e0:8c:9c:
                    fb:83:cb:b8:b9:c7:62:6d:cc:19:5d:fc:08:d6:62:
                    7b:e5:c1:67:08:32:7e:61:32:c8:80:06:41:0f:82:
                    79:d0:10:09:80:38:4a:e9:c5:c1:bc:dd:9a:75:75:
                    9b:25:e8:71:49:ab:24:d5:d9:25:ce:3e:64:75:8d:
                    8c:a6:2f:7b:5e:c2:e0:5d:24:44:1f:dd:2e:dd:dd:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:EC:69:54:8B:F6:F3:20:2C:B5:A1:D5:00:5C:18:FD:92:55:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fa2a60f-090f-357d-9108-2c2af7b2defa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:c8:73:61:33:17:ae:22:9c:aa:e2:cf:82:f4:53:ad:8a:
         2c:2e:97:79:25:91:39:e6:a6:78:e5:82:f6:35:1b:cd:e2:1a:
         ef:06:9b:92:b2:25:ea:c2:e5:17:61:4f:7c:6e:18:52:7b:42:
         5a:e2:2b:4f:26:91:bf:4a:8c:07:ab:e4:4d:92:c0:97:0b:d5:
         85:e8:fe:e3:ee:ab:07:8e:e1:10:57:47:cc:b7:b8:46:c5:10:
         b2:56:f1:87:03:45:70:7e:ab:79:4a:1b:52:68:79:66:19:d1:
         78:53:50:18:e3:b9:5b:24:48:c3:89:6b:10:1b:1d:f6:ad:6c:
         0d:96:50:3e:96:4f:4a:d8:cc:c8:89:97:cd:96:3d:be:9a:d3:
         0c:eb:d9:29:74:0e:ac:6d:cc:62:d3:ec:fc:24:3c:00:cf:d2:
         08:27:5b:c2:25:73:10:7f:61:9f:ae:a6:b9:d4:3b:b0:04:1c:
         6c:59:4d:1e:e1:77:86:29:75:7a:8a:f4:2e:c0:41:89:dc:33:
         0c:62:ce:d2:75:58:a0:58:2a:52:56:53:a4:d9:38:a1:1f:7f:
         f6:f2:df:de:9e:93:56:7a:b3:2e:c7:57:0d:52:01:f4:dd:b6:
         61:7c:b1:6a:4a:08:fa:a6:dc:7b:67:82:80:16:fb:c3:d0:f2:
         aa:40:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:17 2026 by rpki-client