Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa
File:                     63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa (raw, json)
Hash identifier:          INe61paYBhD7KbPMjnUbkuQ03mNiLIVZD2lJvAqJvs8=
Subject key identifier:   0A:8E:5C:C2:A5:E1:16:43:F3:75:77:C1:D1:D7:72:DF:6D:F0:4F:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9234B9E4A017287F1278C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     29844
IP address blocks:        2001:470:c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:34:b9:e4:a0:17:28:7f:12:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=77e94ece-5f32-46c8-8ec3-78b98884b488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:1d:8e:e0:0b:5d:0f:19:06:2e:fc:b2:a2:
                    52:81:cc:d6:78:ab:05:01:d5:c3:ca:cb:9e:3d:88:
                    cc:42:d3:5e:c1:8f:b9:51:97:22:ce:22:31:17:7e:
                    9c:5f:75:80:02:5a:ad:d6:c7:9a:61:5d:dc:79:27:
                    4e:7e:25:2a:3a:44:2e:e6:83:94:9e:e0:6e:9f:af:
                    fd:5c:6c:e6:6a:f7:e8:e9:26:9b:48:5a:73:d8:e7:
                    c1:46:c1:41:b7:5c:24:a1:3f:bc:d0:7f:b7:3e:d4:
                    df:cb:82:f1:9c:de:64:29:3e:ae:57:be:9f:ae:9c:
                    57:40:d3:6e:05:07:fc:b9:dc:86:57:f6:05:4e:8e:
                    54:6b:25:e9:82:5c:95:d7:fb:da:1c:dc:57:0a:1b:
                    da:92:99:b1:52:41:79:f4:ae:f1:34:60:a7:bd:1f:
                    a4:87:7b:bc:40:df:73:95:54:c5:fe:29:5a:3c:a4:
                    44:99:01:9c:b7:14:9d:b4:7b:57:fb:2a:b9:c1:a3:
                    f0:34:3e:9d:a6:a0:ad:ad:1f:4a:35:9f:56:f0:3a:
                    26:3c:42:f1:79:83:b6:f1:3d:35:6e:5e:7b:04:7e:
                    ba:0c:b4:ec:43:60:be:9c:f9:46:bc:21:e0:49:26:
                    1d:d1:95:34:ca:97:5a:0b:52:93:4e:b3:54:5c:30:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8E:5C:C2:A5:E1:16:43:F3:75:77:C1:D1:D7:72:DF:6D:F0:4F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:78:5c:68:11:37:74:e7:8c:5d:06:dc:a7:37:98:e9:8a:9b:
         b4:6e:f1:59:91:cd:2a:80:0b:99:1b:d4:e3:4c:25:af:27:07:
         96:7e:f7:18:30:b6:fc:d3:3e:b9:78:8e:0f:f7:89:61:68:f9:
         a7:03:b8:25:97:6f:8b:d3:34:d5:b4:f3:2f:d6:8c:28:e8:c9:
         b6:f0:d6:6f:fe:68:0b:0c:2b:92:b0:c4:f8:a1:6e:ca:68:48:
         c4:62:e2:70:8a:05:8e:eb:98:67:43:57:89:da:af:48:69:32:
         5b:3c:5b:93:c5:d9:22:5e:84:90:f3:0d:8f:c9:30:f4:33:fb:
         5f:57:ec:6c:7b:38:db:13:73:7c:7c:29:56:04:aa:95:4d:d2:
         b7:85:0b:42:62:90:95:23:1e:44:5c:ab:f9:aa:7d:96:64:54:
         b3:d0:73:6b:8b:4c:da:07:86:88:92:7b:60:48:c0:98:8e:9a:
         6f:a2:69:65:05:b3:40:57:cf:15:6c:8c:7f:8e:06:0f:cb:8e:
         3a:0b:d5:c2:62:c8:77:90:7e:c0:88:12:04:aa:41:48:b5:d5:
         43:61:33:8a:f0:eb:04:85:fb:18:d5:01:1b:77:dc:5d:73:f3:
         1d:18:40:c0:16:e1:26:95:bd:22:90:34:28:59:7d:43:b1:c5:
         56:a9:24:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:03:04 2026 by rpki-client