Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60b93e61-8e8c-329b-924f-943a7d6906e2.roa
File:                     60b93e61-8e8c-329b-924f-943a7d6906e2.roa (raw, json)
Hash identifier:          CegUkiX8bZ2qg6EDL2FCUnMskb+NNSNYd0ieYvUpmt8=
Subject key identifier:   FA:9E:87:7E:0D:48:1B:30:2A:E7:BF:01:F9:25:0F:5A:A7:EE:81:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86ECA3BF875FFCB36CB0AD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60b93e61-8e8c-329b-924f-943a7d6906e2.roa
Signing time:             Sat 17 Oct 2026 01:30:34 +0000
ROA not before:           Sat 17 Oct 2026 01:30:34 +0000
ROA not after:            Fri 15 Jan 2027 02:30:34 +0000
asID:                     47898
IP address blocks:        2001:470:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:a3:bf:87:5f:fc:b3:6c:b0:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:34 2026 GMT
            Not After : Jan 15 02:30:34 2027 GMT
        Subject: CN=db550772-458a-43b5-a690-4f9f4fe0ca72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:a8:63:a2:60:73:47:cc:fe:63:a5:5b:50:
                    a9:20:4c:5b:54:b8:7b:15:09:36:eb:9a:3c:c4:a3:
                    87:fb:6c:f6:b3:86:37:e2:38:4c:8d:de:ec:3a:54:
                    ca:17:c3:14:4b:a8:ab:29:07:48:40:29:c1:17:40:
                    82:9e:06:ff:41:40:ce:bc:2e:b1:3f:eb:ca:dc:31:
                    be:42:89:00:96:3c:4b:80:d1:e2:6c:b8:19:ea:ae:
                    98:dd:2a:dd:9f:06:66:a8:65:8d:01:6c:cf:32:54:
                    b7:d9:bc:16:dd:67:18:8a:ed:31:f1:d2:28:4e:22:
                    2e:e8:b9:00:c6:79:32:3d:16:17:93:ac:11:19:26:
                    53:0f:e6:1c:b6:a8:43:6c:44:3b:e0:25:ba:6a:48:
                    37:cd:3a:91:a5:fa:a3:3a:18:f4:35:4e:6a:63:d2:
                    e6:e6:50:03:08:ae:64:33:9f:b5:e9:78:f5:c8:7b:
                    25:ff:e6:e9:a9:82:5d:71:9d:ed:cb:2a:af:2f:12:
                    54:2a:cf:69:26:5a:94:e6:d6:8e:60:4b:71:69:76:
                    8f:eb:50:fd:4f:aa:9d:e6:09:b5:b3:3f:77:e3:8b:
                    e7:ab:ec:c7:50:76:56:df:ab:c9:ef:e5:4e:5c:29:
                    6f:fc:13:32:94:20:46:cb:a9:a9:e0:44:a9:ae:73:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:87:7E:0D:48:1B:30:2A:E7:BF:01:F9:25:0F:5A:A7:EE:81:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/60b93e61-8e8c-329b-924f-943a7d6906e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:647::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:01:5b:77:80:d4:1a:35:0c:8d:fc:87:f6:a0:34:69:d3:e2:
         8a:8e:4f:d4:9c:5c:3b:c9:fa:3c:af:dc:20:6e:b4:06:6b:ec:
         59:3a:c6:6a:42:4d:b4:3c:21:47:47:33:87:15:3f:04:ba:c7:
         fe:4f:08:d4:e9:0c:5a:70:9b:b7:d4:af:7c:6e:b2:88:0d:85:
         c3:da:28:a2:51:ab:6a:d0:67:d7:2d:e5:17:ad:ab:fc:ed:f6:
         ab:14:fb:cf:b7:68:36:e5:ac:8d:dc:98:85:49:3e:8a:7f:96:
         b0:22:fa:ef:f2:a7:78:15:17:89:67:d2:76:c9:d3:e6:d9:14:
         7c:f6:28:c0:7f:24:df:df:83:8f:e8:e9:ca:82:a1:db:9f:c2:
         e5:c3:51:a8:17:86:bd:9e:07:8a:5e:a8:88:0f:b5:9d:2c:8b:
         9c:23:4c:c1:e3:73:88:6b:cd:08:ef:11:21:be:df:f6:b6:c0:
         a3:f3:15:64:45:f0:f8:b8:3f:17:3e:5d:b2:c0:29:c1:5e:cc:
         16:fb:d1:d7:7b:05:db:29:c5:6a:42:4c:af:e7:2f:43:ea:bc:
         41:28:ec:71:e4:cb:a6:d2:6d:55:93:05:c8:b5:79:26:f1:88:
         b4:76:a1:36:99:2d:1d:7b:71:49:b8:ea:a4:29:9e:d9:dc:8a:
         bb:ec:7e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:47 2026 by rpki-client