Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79868aa9-4ef7-38dd-8866-fc1849dcc21b.roa
File:                     79868aa9-4ef7-38dd-8866-fc1849dcc21b.roa (raw, json)
Hash identifier:          L91wRy3nT/dh6nRDNDv83INYYpVvFV4o6q+9hlN2UxE=
Subject key identifier:   31:3C:9B:BD:7F:20:EA:9F:30:1C:64:AA:DD:46:11:8A:6E:8A:97:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE5B9FFFE27E8B433A5A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79868aa9-4ef7-38dd-8866-fc1849dcc21b.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     397468
IP address blocks:        2001:470:26c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e5:b9:ff:fe:27:e8:b4:33:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=687c7486-cc58-49eb-8fd5-3a798a750d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:73:5b:54:f5:b2:25:81:fc:fb:7c:dd:8d:
                    de:8a:a3:e7:ab:f2:98:d3:34:f6:05:85:09:ba:c6:
                    5e:97:e9:34:9a:fd:52:de:ed:d6:48:34:3e:93:8c:
                    6f:ce:34:c7:e8:e1:9f:a0:74:01:24:af:d5:6a:be:
                    c0:77:bc:eb:a0:79:12:91:f4:00:d2:5b:69:e1:c5:
                    c6:51:f5:c1:c9:9c:94:91:80:91:0f:2d:0f:01:ee:
                    c6:fc:cb:4d:0a:40:b2:e1:c1:9b:67:42:12:a4:48:
                    96:9c:23:b6:11:2b:0d:db:5c:29:6b:f8:24:90:60:
                    d9:9f:16:ba:c8:3e:60:43:d3:79:30:a6:d7:2d:76:
                    26:f5:5a:16:8e:ff:e9:4a:18:f5:fe:06:31:56:82:
                    f6:01:0d:33:bf:af:05:ba:bb:de:c5:03:39:76:25:
                    98:e1:0e:34:1f:b0:e8:81:90:54:df:81:e0:45:3f:
                    52:42:22:24:6c:6d:c7:bb:e8:f4:8f:ab:c6:09:b3:
                    fa:7a:e8:c8:52:58:38:59:8d:15:c1:16:9e:c4:28:
                    fc:67:bf:ab:93:38:44:04:d8:cb:72:91:94:c9:4c:
                    6f:70:93:a8:52:3f:90:97:9a:6b:c2:52:38:24:d3:
                    15:8f:7f:11:9c:8c:fe:e3:a0:4a:df:f9:08:94:15:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:9B:BD:7F:20:EA:9F:30:1C:64:AA:DD:46:11:8A:6E:8A:97:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79868aa9-4ef7-38dd-8866-fc1849dcc21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:91:e0:3d:65:81:4a:eb:6b:dc:e5:cb:98:12:7e:bb:bc:
         e9:eb:59:d9:24:e6:b5:ed:69:10:6d:61:d7:9a:01:48:55:0a:
         eb:af:6c:af:26:2e:fe:ac:ba:4e:9c:a5:1b:87:0f:ba:4d:b0:
         23:fe:de:e7:70:33:7d:34:71:ac:c6:d9:f6:e1:d0:e6:72:73:
         b5:f5:0e:13:3e:c9:46:1f:84:1b:db:54:e5:7c:2a:c7:2b:cd:
         7c:52:bc:a8:b0:5d:cc:16:18:b7:4d:f8:81:6f:7e:0d:36:9f:
         33:9e:a9:2d:d6:c8:fb:2a:5c:69:a6:6c:5e:16:ef:f1:3a:9d:
         6b:c8:03:37:83:18:90:52:7b:6e:d7:ad:f4:b2:3f:43:94:de:
         9a:0c:e1:d3:9d:7a:c4:4e:b4:98:12:53:8f:f5:3c:22:a0:31:
         c4:14:97:75:88:ac:3f:ca:9a:b4:de:ed:88:bf:0f:8f:a6:e2:
         18:25:8d:96:21:b2:8f:4f:f2:3c:b6:c1:69:ca:dd:13:67:02:
         7f:0d:bc:1c:ae:8b:d2:04:a3:44:af:2a:02:28:52:f4:bd:ac:
         f3:5f:d6:c6:45:13:e3:3d:63:19:aa:82:44:e4:cd:5a:de:20:
         3f:59:ea:d6:bb:a9:7d:8a:9d:6c:84:a5:c6:48:d8:8c:8b:c0:
         6e:72:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:00 2026 by rpki-client