Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48eefa7d-6d54-3b43-93ea-73e0613cbf19.roa
File:                     48eefa7d-6d54-3b43-93ea-73e0613cbf19.roa (raw, json)
Hash identifier:          oGuQvMtASL6gR/Ow8ejDrgwo6XTgw1oglnPhHqEof/U=
Subject key identifier:   DF:86:90:7E:1C:C6:73:FD:FD:8D:D7:D4:28:69:37:D5:2D:FA:D1:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EBF50900E1646A646FF6509B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48eefa7d-6d54-3b43-93ea-73e0613cbf19.roa
Signing time:             Thu 06 Aug 2026 13:30:14 +0000
ROA not before:           Thu 06 Aug 2026 13:30:14 +0000
ROA not after:            Wed 04 Nov 2026 14:30:14 +0000
asID:                     214618
IP address blocks:        2001:470:5fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:50:90:0e:16:46:a6:46:ff:65:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 13:30:14 2026 GMT
            Not After : Nov  4 14:30:14 2026 GMT
        Subject: CN=c0ce9b2e-f2c5-4f64-b43c-5d7e4691fb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:0b:1d:0a:3c:e7:94:39:24:8c:a4:88:57:
                    12:cb:ff:ea:97:47:25:64:05:6d:04:2a:c4:36:65:
                    84:d1:07:1f:42:d8:e1:dc:0f:e4:fd:c4:f5:af:03:
                    2d:c2:3a:ce:1b:26:2d:3f:99:13:0e:2d:2c:e4:88:
                    00:62:29:ca:4e:86:99:21:46:93:13:fe:c9:38:2f:
                    c5:0b:80:61:00:8a:25:6c:2d:03:25:58:15:ae:3c:
                    56:81:cb:b8:a1:7f:4f:58:5e:02:d5:fe:e4:b3:94:
                    1f:8f:b4:ad:b5:9c:39:b1:9f:42:bb:35:4f:68:fc:
                    65:cf:24:d6:c4:87:22:d0:c5:b8:80:87:68:5c:4f:
                    58:1b:1b:7f:34:f7:39:36:c1:45:79:00:ef:00:37:
                    a3:3d:f5:93:45:15:40:b2:69:e4:5f:0a:33:fe:23:
                    2e:21:41:38:87:01:74:92:d3:b7:7e:cb:53:44:1b:
                    45:76:a8:9a:53:60:b1:c3:2d:f4:09:23:4a:74:0e:
                    c3:54:8f:33:61:c0:9f:57:34:0d:fb:88:2e:b6:a7:
                    8c:1a:80:ca:29:8e:49:e9:b3:87:af:bb:82:fd:84:
                    6f:04:4e:d0:e1:b5:2f:8a:5b:1a:9e:63:ee:c3:b7:
                    dd:4b:46:19:74:9f:7f:dd:ed:d5:90:c7:42:84:c9:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:86:90:7E:1C:C6:73:FD:FD:8D:D7:D4:28:69:37:D5:2D:FA:D1:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/48eefa7d-6d54-3b43-93ea-73e0613cbf19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:a2:a5:e4:96:b0:1b:a3:fe:ac:68:22:bd:b3:e0:e7:bd:
         53:54:b8:cb:5f:03:44:16:70:89:46:2a:fe:ac:5f:35:ad:1c:
         0d:81:fc:28:ae:79:f4:72:e7:66:dc:10:1b:af:a6:d9:7a:2f:
         ae:47:2e:a2:90:ce:92:6d:62:a7:67:bb:42:01:dd:ba:6b:09:
         2d:61:8d:61:08:44:60:f3:dc:05:1a:e3:da:25:f5:bf:70:cb:
         1f:41:4b:b3:ad:0e:4c:31:f0:0a:b6:f4:33:06:6a:54:12:83:
         d0:76:3a:90:4a:17:60:74:fe:bd:01:eb:18:4c:bd:16:91:de:
         63:59:05:c9:20:4f:94:f3:91:d3:a2:78:9f:5b:98:9a:f6:63:
         6d:8e:09:43:9f:44:30:88:fe:9f:e3:99:8b:5d:9e:9c:2d:34:
         3c:96:f2:26:8e:18:ea:a6:45:3b:89:91:f0:e3:95:ce:69:94:
         a7:f6:82:2b:36:2b:73:9a:15:f6:06:90:9d:d2:34:2a:06:a7:
         85:57:fa:43:3f:c7:9c:a3:7a:0f:ac:49:40:0f:84:35:70:8d:
         20:85:b0:57:a1:f8:31:56:dd:ba:78:d5:f9:f7:7e:21:c7:25:
         c2:9e:e8:ea:e5:ec:f7:d6:a9:a6:14:e3:3c:01:a5:b4:c0:16:
         d2:a4:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:09:30 2026 by rpki-client