Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa
File:                     85985089-2f5a-32ff-85ee-dc5151c11388.roa (raw, json)
Hash identifier:          VqRunsCfnW88y7Fb2GQf1qX647MV21+3XoxEHmYn+WU=
Subject key identifier:   C3:20:F1:8E:85:45:19:A2:C3:BD:E0:28:7A:1A:03:06:74:9A:7C:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9223C5D2AFD375EE37C500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     135069
IP address blocks:        2001:470:1d9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:23:c5:d2:af:d3:75:ee:37:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=09bc7ecb-3225-47a4-8853-899e85f9b7f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d7:e9:b3:81:87:00:d9:32:66:23:a9:dd:6a:
                    34:65:15:02:e7:ef:9a:ba:02:e0:6e:aa:c2:7f:20:
                    87:99:2b:88:b7:a6:43:0c:58:98:0c:2f:89:f7:9e:
                    ae:18:21:9f:c6:89:70:fd:9f:a3:93:42:0a:d1:69:
                    40:fc:44:b0:eb:c9:74:cd:5e:2b:31:53:48:c3:a3:
                    27:2f:61:21:85:1c:27:e1:b3:87:93:59:a2:3c:c8:
                    62:1c:44:18:b0:d6:01:66:d1:aa:33:36:a0:17:1c:
                    68:5b:66:8c:4b:2d:4b:c7:7d:a5:bd:6d:1a:39:1a:
                    f9:85:de:9c:ae:3e:ac:01:f0:47:2e:10:3c:77:da:
                    96:c9:15:5c:ae:ae:1f:a0:03:58:27:97:7b:b3:0b:
                    1d:a1:01:e8:e0:75:63:60:81:e8:04:c1:6c:be:e5:
                    ef:a4:50:53:e5:97:fe:43:36:51:55:f6:03:f8:d8:
                    06:9b:65:b8:4f:5f:8a:c9:af:78:3e:59:bd:a5:b2:
                    f5:d1:60:fe:f4:5f:20:86:43:89:b6:47:ce:26:87:
                    82:bc:5b:97:fe:95:ac:04:93:f9:84:a2:42:f5:f4:
                    b8:fd:8b:ad:76:4e:e5:f3:b9:17:b1:af:cc:a8:cf:
                    62:a0:6b:aa:4f:1f:eb:02:06:e9:2b:34:94:62:0c:
                    f5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:20:F1:8E:85:45:19:A2:C3:BD:E0:28:7A:1A:03:06:74:9A:7C:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:d1:0c:81:7f:e8:96:e5:66:1f:57:ea:ba:45:33:96:44:
         96:0d:01:0d:01:b0:96:d6:4e:91:6c:32:02:37:c0:67:b4:06:
         18:92:cf:22:d8:f6:fe:bd:1f:5d:10:46:ac:05:69:4c:3e:be:
         c4:b8:ec:c2:70:4a:78:cc:8e:99:c0:9f:49:d3:57:6c:49:e6:
         ee:33:92:5a:af:75:49:2d:b3:72:1a:1e:c5:6e:c0:7e:39:d5:
         b6:b4:f0:8e:7d:07:fe:1b:95:5d:26:4c:43:55:0d:ea:1a:19:
         77:f4:64:77:70:c1:11:32:46:76:6e:66:e6:2e:cd:f1:bf:80:
         18:61:15:1c:ec:1f:a3:e2:dd:70:2d:64:85:9b:5c:f2:93:70:
         5d:9c:96:ce:06:17:42:fd:12:d7:5c:c3:e9:dc:74:aa:ef:1e:
         9c:55:7a:24:d7:56:12:67:4d:a0:25:84:37:0a:8b:af:81:61:
         ec:6d:c4:36:23:d7:d6:6b:d6:2b:db:2f:a2:b2:ab:d7:dd:37:
         94:1c:37:84:9e:de:66:25:24:65:bc:bf:78:de:0d:53:43:4a:
         45:bd:45:14:4f:14:fe:e3:ef:52:b6:03:48:34:aa:50:77:5a:
         c9:b5:3c:47:39:52:84:c9:6d:33:79:40:6f:bb:00:05:38:97:
         50:7c:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:30:32 2026 by rpki-client