Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66033ad1-726a-3437-8f68-99c3cc48061f.roa
File:                     66033ad1-726a-3437-8f68-99c3cc48061f.roa (raw, json)
Hash identifier:          cssRJBQDa3m1FqzOmZk1K5Zo0ig3hr79OkKTVqtQO58=
Subject key identifier:   63:44:03:43:28:08:1E:B0:11:BA:BF:C0:A7:E4:8D:DF:4A:B4:94:28
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86EC7E72F6030F172B39F500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66033ad1-726a-3437-8f68-99c3cc48061f.roa
Signing time:             Sat 17 Oct 2026 01:30:16 +0000
ROA not before:           Sat 17 Oct 2026 01:30:16 +0000
ROA not after:            Fri 15 Jan 2027 02:30:16 +0000
asID:                     198408
IP address blocks:        2001:470:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:7e:72:f6:03:0f:17:2b:39:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:16 2026 GMT
            Not After : Jan 15 02:30:16 2027 GMT
        Subject: CN=2df31410-5b0e-4110-9c0f-48b261fb2b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:38:33:dc:f6:35:36:40:2e:07:dd:aa:d1:
                    c2:93:b0:c6:ed:6e:a0:39:6b:2e:db:bf:67:ac:45:
                    7c:de:91:ed:f8:fa:06:85:56:35:cc:e4:a2:00:d3:
                    0b:9a:bc:2d:16:f0:e9:bd:5a:54:8a:d5:1c:68:ec:
                    4c:81:8d:83:3b:0c:67:14:3d:08:fe:05:b5:b6:39:
                    23:ba:2d:73:70:e7:9d:01:47:f0:ef:04:1f:55:72:
                    24:e4:95:8f:8f:0d:70:06:bd:49:0c:b1:ad:93:e7:
                    37:51:ae:1d:35:07:2d:a9:58:28:05:93:4a:0c:d2:
                    88:45:03:21:eb:bf:5f:16:94:77:ef:49:51:81:f8:
                    c4:28:05:5f:c5:22:23:e7:f1:55:95:a1:90:45:a5:
                    bc:ab:b5:02:d7:25:b5:a4:08:55:dd:da:d0:5c:cb:
                    f4:fb:c8:9a:8c:35:8c:aa:16:3e:1d:8a:17:eb:28:
                    ca:c9:56:1a:39:53:55:64:1c:00:b2:5f:d2:31:cc:
                    41:61:e1:76:74:62:42:da:21:f8:b2:af:c8:ae:ef:
                    0e:af:6a:a0:0b:75:af:51:84:df:46:c4:5a:fb:c1:
                    05:31:ae:17:ec:3c:e1:b5:d4:86:0f:57:43:1b:3e:
                    ca:15:83:98:de:4f:79:38:cd:42:cb:34:b0:fc:9c:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:03:43:28:08:1E:B0:11:BA:BF:C0:A7:E4:8D:DF:4A:B4:94:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66033ad1-726a-3437-8f68-99c3cc48061f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:647::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:71:57:d7:b4:31:8e:7f:d1:c8:e5:c7:f8:55:f5:c8:bd:87:
         ac:0a:15:59:c1:7b:5d:71:2d:34:4d:e1:0b:2e:9a:44:9e:4c:
         bc:ac:4f:c8:b0:aa:d5:08:21:51:d2:c1:dd:c1:da:0e:9d:6e:
         d4:86:bb:50:cd:c4:6c:19:7e:84:f3:b0:c9:97:f5:6f:5f:94:
         c0:82:95:3f:d4:8a:70:92:d7:22:54:48:1d:36:3c:c6:61:98:
         82:6c:01:9b:9e:68:9e:8c:b6:c5:f1:6b:88:c4:c2:3b:94:95:
         78:28:28:0f:ad:fa:f7:7f:98:cb:9e:c3:6e:4e:43:f0:50:6e:
         13:a3:19:23:ed:24:1d:22:34:a5:b3:02:2d:b9:ed:14:2b:af:
         48:fa:aa:9b:3c:79:46:0a:ae:38:1f:e6:ad:58:92:5c:b4:db:
         80:8b:da:03:07:2b:22:66:fb:63:4e:7a:18:73:3a:04:61:e5:
         20:5f:05:43:ce:40:04:98:e8:00:ba:c7:a9:1a:7a:54:bf:88:
         e5:6d:e1:ca:91:1f:1f:bc:c2:07:50:38:3e:94:ec:09:cd:78:
         94:10:5b:ad:0e:aa:f7:59:55:bc:c0:3f:4c:bd:5b:d6:c1:c8:
         10:e0:c9:1d:d7:c7:32:ec:4b:53:2a:00:2f:07:5e:7a:0c:89:
         72:17:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:17 2026 by rpki-client