Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49944740-6c44-33a7-8860-84b5bd10d27c.roa
File:                     49944740-6c44-33a7-8860-84b5bd10d27c.roa (raw, json)
Hash identifier:          dOl9yIb4cRSj59hu3wdBfPredW3379IjAQbgBhWiAY4=
Subject key identifier:   CD:F3:73:DB:48:16:52:31:36:F9:2C:D1:95:D7:EB:B0:8C:70:74:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F1B6241B3E66C448100595CE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49944740-6c44-33a7-8860-84b5bd10d27c.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     6515
IP address blocks:        2001:470:24e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:41:b3:e6:6c:44:81:00:59:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=e1cf24f6-30cf-4371-bf99-76a256d68576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:9b:86:30:fd:70:08:5d:72:bd:7c:cc:a7:
                    c2:b7:c2:3d:33:98:a8:b5:6d:b0:8e:20:fa:d3:aa:
                    1d:92:47:21:78:4d:ec:f7:dc:a3:53:8c:22:46:ef:
                    a8:06:7f:4b:a8:5a:b0:aa:87:5a:a6:6e:99:46:21:
                    03:10:76:44:e9:13:62:fd:88:64:d2:90:65:ac:ad:
                    95:3d:c8:e0:c7:64:ee:1a:0c:1e:fb:40:6b:0a:54:
                    29:83:42:16:85:b3:95:d7:f3:e5:11:27:cb:e1:77:
                    66:14:7b:ee:b5:b0:9d:58:a9:54:a2:c2:3a:d2:2e:
                    77:e5:78:8b:44:ac:fe:89:70:b9:11:d0:b8:3e:cc:
                    3f:69:a1:df:d5:84:92:8a:36:fc:39:63:c7:95:3e:
                    80:4c:59:50:c8:24:7c:20:bf:8f:ea:22:88:ff:7a:
                    62:2d:cb:73:ca:48:71:41:07:84:ab:ce:f8:ff:b4:
                    16:11:53:7a:2b:0d:b7:33:1c:d5:ab:2c:38:25:0e:
                    25:25:39:f6:1d:99:3e:a4:bc:65:fd:98:ee:50:b5:
                    59:c7:6c:c8:b2:2a:7b:dc:3d:8d:20:3d:3a:ed:52:
                    f0:c6:56:d7:f5:13:02:fd:27:82:fe:cf:f6:0f:88:
                    cc:2e:4b:2e:d2:12:b2:57:58:b7:af:e5:ef:06:92:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F3:73:DB:48:16:52:31:36:F9:2C:D1:95:D7:EB:B0:8C:70:74:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49944740-6c44-33a7-8860-84b5bd10d27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:85:ce:3d:b6:36:3a:70:06:89:33:36:0e:b1:74:d2:61:bc:
         e1:f5:a6:13:ba:fc:50:36:eb:f6:63:83:5d:81:87:95:89:f1:
         0f:45:fc:e6:e6:1a:8c:ec:b1:c5:35:99:d8:bf:8f:70:26:df:
         84:6e:48:47:62:26:c8:ea:30:6a:09:be:47:20:ad:93:08:86:
         10:27:d4:23:c7:c5:84:5e:6b:4a:66:66:af:98:3f:2a:eb:81:
         d7:4d:b5:b7:c1:84:ee:ef:fa:cf:2c:a2:a2:78:df:d5:89:3a:
         fa:fc:f5:b1:ee:f5:29:0d:52:eb:b2:a7:fa:55:6b:95:56:5c:
         0d:2e:62:2f:8e:77:da:1c:1d:77:c5:8b:9c:b0:26:80:83:ad:
         bb:4a:c5:f8:1f:90:af:22:4f:cb:98:75:3d:e4:66:8b:b2:38:
         5e:1c:89:a8:5a:80:67:aa:00:eb:83:81:26:48:b6:51:80:90:
         13:1e:23:13:f2:08:87:08:e8:95:40:09:38:70:49:86:da:bc:
         4b:e3:25:98:2a:e4:fa:70:c2:52:44:68:13:9b:d5:be:50:05:
         6c:11:3b:10:93:8a:95:14:99:06:47:c6:8b:d9:9c:6f:9f:58:
         f3:4a:06:40:70:a1:49:e7:a2:46:f0:c6:55:b5:2c:01:14:b6:
         3b:cf:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:29:02 2026 by rpki-client