Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa
File:                     22845774-85e2-3a81-8e7e-f042762050ff.roa (raw, json)
Hash identifier:          2Gg7jBy+DrCQUTpJ96OwQ7oDi9Iwysg8aH0z64DhkQA=
Subject key identifier:   B2:A8:42:CB:22:FB:CB:A2:16:34:EF:02:09:F7:B9:BB:6C:D2:D7:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923F9BB8CC28A4C7CB595C
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     7480
IP address blocks:        2001:470:299::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3f:9b:b8:cc:28:a4:c7:cb:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=e68ff50a-49e6-4183-a8b2-bbf1fe1ab874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:74:ae:1f:6c:6a:4c:ed:99:91:7b:b9:fb:
                    ec:02:4b:c4:94:71:71:63:1c:74:02:49:1a:7f:69:
                    d1:06:0d:78:e6:a8:67:d3:30:23:2a:db:98:81:c0:
                    af:0d:3d:29:27:fb:7b:12:eb:f8:26:27:e2:a6:75:
                    4c:8d:73:3f:a2:88:75:48:72:74:73:f1:46:58:86:
                    fd:d1:b8:a1:dd:61:f5:b5:95:94:15:6c:91:a8:05:
                    8d:8b:63:6e:7c:a0:15:cb:75:0c:14:89:ce:c3:d0:
                    de:cf:e1:4e:a2:59:8c:c3:b2:10:a0:2e:25:07:70:
                    2b:1b:ad:b5:2d:04:33:4b:2f:4c:40:f5:e3:08:32:
                    17:8c:ba:9b:ac:a2:e4:c3:0f:06:7f:a6:64:b9:d2:
                    6a:4a:a5:97:d5:be:54:21:93:1d:86:af:da:2c:45:
                    90:49:ce:06:5d:f6:49:11:e9:78:a8:5e:9c:20:84:
                    19:ce:d6:37:30:3c:89:25:38:47:2a:b0:51:bc:f4:
                    ad:38:4b:35:19:75:09:55:b6:d6:a7:b5:f8:a3:20:
                    ba:2e:0d:86:be:cf:43:49:14:df:b1:ca:f8:76:54:
                    78:7e:59:fb:cc:a3:a2:7c:3f:bb:36:b0:e1:c2:52:
                    d1:9f:c7:5d:3e:97:25:06:d3:41:43:73:de:e6:ca:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A8:42:CB:22:FB:CB:A2:16:34:EF:02:09:F7:B9:BB:6C:D2:D7:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/22845774-85e2-3a81-8e7e-f042762050ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:299::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:32:aa:df:51:3c:f2:e1:87:da:8f:52:f4:1e:d0:b3:a1:
         c6:26:08:06:4c:3f:f1:c1:25:7e:6c:5f:00:b1:aa:a4:ff:e7:
         27:c4:05:a0:c8:ce:11:45:51:ea:29:8d:2a:51:d2:4c:e4:47:
         d4:76:62:d4:db:5f:19:3d:a1:0c:8d:92:02:1f:b4:0c:20:5d:
         f0:55:8f:c4:38:de:62:e9:5f:16:b8:73:37:61:d8:74:93:6c:
         65:ab:f6:2b:1f:1f:6d:2a:a3:8c:b3:21:c9:50:61:ae:77:49:
         54:5f:9a:15:a9:6f:3f:fa:9d:ce:2d:22:63:65:63:63:92:12:
         0a:54:14:ba:41:6c:a4:cf:08:0f:fb:8a:4d:76:dd:bc:19:4b:
         ba:42:d6:9c:b4:ae:d2:44:4e:d3:29:89:79:6a:d9:5c:57:8d:
         2e:14:94:f4:6b:3b:b3:dc:72:2d:73:60:e0:bc:9a:01:50:da:
         62:d7:05:ce:7a:01:f3:f7:44:3e:06:6e:fb:46:7c:0b:aa:7e:
         8a:2e:90:1e:4f:04:ff:9a:10:55:d2:91:cf:d1:92:fd:80:4e:
         78:17:a0:73:20:67:38:af:8e:4d:6c:85:a6:ea:f4:eb:ed:be:
         b6:46:16:be:a3:bf:b0:1f:2f:3a:47:56:1a:40:7e:89:a0:cb:
         cd:26:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:35:22 2026 by rpki-client