Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa
File:                     3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa (raw, json)
Hash identifier:          Lp5VdepNTuRpptgZeE4LsLTLH1eP3rchNgs+VTbb55I=
Subject key identifier:   C4:F7:48:4F:E8:E7:23:5F:1B:00:B9:77:31:F2:7E:E3:9E:BF:50:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9217313857A1306CC53D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     22989
IP address blocks:        2001:470:142::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:17:31:38:57:a1:30:6c:c5:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=02e4e178-ea79-431e-8d35-6ea6bf0b568e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:e8:0f:d8:8e:54:8f:1c:dc:7b:71:ea:6b:
                    5c:6b:e3:08:6e:1b:ff:68:b3:fa:93:f6:81:4e:d4:
                    50:fb:60:aa:ac:c6:0f:74:06:6b:5e:0e:cf:e5:f3:
                    61:d7:f9:df:4d:0d:b9:bc:90:ab:c7:56:b8:ec:a8:
                    ff:ca:56:c0:99:cc:41:9c:77:5c:e0:9c:44:a3:87:
                    d3:db:82:40:17:b8:63:b0:95:f9:6e:f3:b1:d3:1e:
                    31:75:98:73:c8:42:60:e5:d2:4a:9f:f2:e4:28:80:
                    ae:3c:6d:84:74:18:2f:67:58:88:31:71:70:b8:28:
                    90:5e:01:66:b2:9e:cf:31:ea:67:9d:24:ea:14:ff:
                    d4:a9:10:88:f9:97:26:85:2b:01:18:0f:48:92:2c:
                    01:00:9a:d3:af:3f:bc:6b:15:a4:73:47:82:87:32:
                    b4:3f:ff:b7:c3:5d:18:ad:97:69:15:d3:85:80:93:
                    b8:cf:0d:7e:11:b2:13:03:f2:26:18:f2:14:d6:09:
                    cb:61:1f:d3:52:92:47:00:62:30:03:04:ef:ec:54:
                    26:77:75:d2:00:e0:9f:5a:0d:2a:3d:de:61:37:49:
                    c9:5b:b3:9d:a8:7e:42:d1:9d:6a:7b:2b:bb:3c:e7:
                    a0:56:b9:57:2a:4d:ae:22:23:8e:d9:f6:ae:10:ca:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:48:4F:E8:E7:23:5F:1B:00:B9:77:31:F2:7E:E3:9E:BF:50:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b6e6abe-f29e-34ef-9929-5aa13c0d216a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:58:95:7d:bc:20:01:b3:3b:05:e6:18:a1:84:2a:57:d7:9d:
         1f:8d:b0:9e:64:f1:eb:cb:07:e9:61:fd:0b:e8:56:1d:5c:a3:
         f3:0f:2f:9e:fd:78:87:12:ab:6a:bf:11:0e:74:24:1c:b0:19:
         94:2e:62:5a:9e:78:bb:f8:1e:98:fd:a0:9e:af:c1:97:1b:c6:
         c4:af:c4:18:f9:e1:56:c5:34:a8:29:2f:6d:34:0c:55:90:fa:
         6d:c8:96:90:60:29:82:5c:0a:42:9a:10:fe:40:87:af:03:87:
         b1:32:e5:5d:e6:86:3a:a3:53:24:5e:8a:83:6c:e1:53:b9:4a:
         b2:d0:da:80:d1:e6:33:69:e9:75:a5:2d:da:5e:94:8f:ed:69:
         5b:61:98:96:45:8b:01:de:ce:da:da:00:d6:c5:98:d3:23:41:
         2d:5e:7a:64:85:6f:7b:2d:00:f9:f3:16:5c:d7:91:ff:cf:94:
         c2:57:97:3d:32:ba:92:0a:8c:e8:5b:e9:16:3a:7a:7c:08:53:
         05:34:66:c1:ff:11:57:ad:2f:45:f5:03:fb:94:79:26:12:f7:
         8b:11:8e:00:3b:a2:97:c1:21:52:a7:a9:37:67:86:4c:a5:ca:
         a2:ca:d7:8b:fc:58:13:4b:c2:c9:64:fd:2b:cb:9d:2d:ef:af:
         e6:f1:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:57:43 2026 by rpki-client