Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa
File:                     5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa (raw, json)
Hash identifier:          5erZMZnm/hQCzeMz4AtZxsDatx1baRbRIRTkAx0MrYk=
Subject key identifier:   BE:1E:19:5E:7D:48:D4:FD:86:5B:23:55:9E:4E:49:6B:BC:31:36:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7918745E74E9813196BDD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62943
IP address blocks:        2001:470:3c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:87:45:e7:4e:98:13:19:6b:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0ba6cc04-e786-4ed3-a529-301d01cdcf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cd:f1:33:60:20:f9:a1:03:02:31:c8:08:10:
                    48:d1:82:2a:e2:cb:ed:ba:3b:41:b6:37:00:06:50:
                    1d:c1:fd:3b:34:00:ed:a6:7e:af:70:f6:e7:2a:1b:
                    7f:46:f8:30:27:19:42:09:6f:59:fd:0c:e7:45:1e:
                    4f:8d:38:30:49:00:00:af:d3:34:5d:4c:d0:f1:e7:
                    e4:20:0c:0b:05:c6:a7:bc:c7:a7:46:56:76:b2:09:
                    e1:d4:8f:e0:ae:8f:25:7c:79:28:64:02:35:a2:75:
                    d3:d9:1a:b2:62:3b:e3:14:43:7a:20:0a:af:70:3b:
                    4b:f4:8d:2d:f1:48:0e:95:fe:12:4c:f9:23:15:42:
                    71:4b:7a:46:83:e9:4d:78:75:61:3f:40:65:5b:ad:
                    fa:f1:d6:07:c3:8c:88:3e:3f:57:fa:b5:60:a3:80:
                    ef:44:7a:0f:07:d7:6f:cf:4d:fb:e9:85:be:1b:94:
                    c2:7c:82:70:19:ac:66:61:f7:93:d5:e8:4b:e7:9a:
                    cb:90:c5:34:aa:59:41:0b:81:b7:09:2d:72:09:73:
                    cf:ab:8b:c3:68:46:51:f2:0e:ab:4b:0a:53:3a:77:
                    12:37:27:d7:0c:d0:e6:3f:b0:ff:d5:15:4c:6c:3d:
                    25:5f:5f:ad:2e:bc:97:e0:4a:fd:80:b6:36:ae:c8:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:19:5E:7D:48:D4:FD:86:5B:23:55:9E:4E:49:6B:BC:31:36:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:36:85:2b:7d:c2:70:cc:3c:9e:74:13:5d:73:6d:af:bb:ed:
         bc:92:ff:16:f1:fc:4c:f3:ad:dc:fb:72:d2:9c:88:f0:37:e5:
         4d:0e:bd:06:41:28:6d:bb:88:1c:e9:b4:f3:70:36:ed:e8:ce:
         87:50:61:e2:e5:5e:ff:43:9f:37:93:b2:90:06:d1:ab:ca:b0:
         25:0f:aa:dc:ec:ee:7f:24:b2:42:05:08:a1:40:20:38:0c:1c:
         2f:4b:06:eb:e9:4b:40:3e:04:97:c7:c3:d5:79:40:e8:e6:5b:
         b0:2c:f9:01:fb:c9:aa:f8:26:a4:2d:51:25:31:fb:32:c5:cb:
         58:8d:f5:81:8e:db:d3:34:f7:5e:94:1d:77:fa:c7:2a:14:e7:
         80:b6:a9:65:11:56:25:e8:65:4d:3b:d4:e2:df:27:fb:ab:52:
         c8:74:1c:07:3f:17:58:76:eb:cb:59:03:dd:cb:f7:97:26:ae:
         46:a3:21:57:af:8c:4a:1f:10:cb:49:2e:70:df:60:43:ab:9c:
         f3:4e:76:08:45:35:30:15:f1:85:b2:75:a6:16:86:fc:6e:32:
         3c:55:76:0d:39:f6:c1:3f:05:fd:3a:73:f3:56:0a:0d:11:8c:
         24:f8:4b:75:4a:f3:43:73:7a:e4:d2:b8:9f:de:61:cc:b2:dc:
         0b:2a:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 19:21:52 2026 by rpki-client