Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa
File:                     936d625b-5325-341b-9d17-0a6a9aea1999.roa (raw, json)
Hash identifier:          VUIH9ZdOyHHVBL9EGMigDjx3Xk9Puf7een1iwrSQiqo=
Subject key identifier:   74:02:BE:CE:35:25:B6:79:47:34:4F:88:14:75:A8:BB:BA:5A:10:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DC565BFBDDD879C6CBD07C100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     21699
IP address blocks:        2001:470:2f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:bf:bd:dd:87:9c:6c:bd:07:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=bf2a88b6-8556-4d56-a9a0-601192596b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:08:af:4e:46:a7:a8:93:61:fd:30:4e:0b:ad:
                    86:ce:1b:72:7d:39:8b:3e:5b:75:c5:20:f3:bb:0d:
                    d4:68:37:ba:66:0b:1d:75:47:fd:cf:99:f8:81:7f:
                    25:f5:37:35:b9:1e:1a:4e:1e:e8:80:53:b8:b4:03:
                    ed:b3:c2:3d:8b:4a:7c:8d:4e:2e:0e:6d:7f:1f:3c:
                    d4:e1:fe:24:13:ba:8d:c7:44:2c:36:d8:63:12:eb:
                    70:2e:f5:0d:7c:62:34:72:9d:6a:49:1e:9e:15:06:
                    05:64:cc:83:f7:4a:51:f8:5b:3d:cd:92:b4:88:eb:
                    2d:e0:e6:4f:f5:d0:20:51:35:4b:9e:df:a7:95:f0:
                    af:2f:de:b7:ec:a4:b4:51:b9:4b:15:37:65:fb:a3:
                    ec:cd:58:5b:86:3e:73:4f:50:b9:ba:e9:9f:16:97:
                    57:5f:60:c7:b0:9e:21:1f:aa:16:86:de:8d:2b:ce:
                    e7:d8:3b:25:11:5f:35:7d:31:5d:94:88:60:67:a1:
                    aa:87:58:fc:66:f0:cf:96:31:b0:ab:c8:5b:be:c1:
                    1a:91:4e:52:79:69:08:3e:86:5e:08:da:87:13:1f:
                    65:a4:07:f7:18:94:de:ff:24:e0:b6:1e:5a:40:c9:
                    6a:68:cb:e3:78:c3:84:69:40:9d:bc:61:2f:eb:ca:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:BE:CE:35:25:B6:79:47:34:4F:88:14:75:A8:BB:BA:5A:10:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/936d625b-5325-341b-9d17-0a6a9aea1999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:ea:f3:e1:14:df:09:d1:54:d0:43:6c:a5:46:98:83:43:
         e0:9f:8f:7c:bc:6e:45:c9:37:39:a3:73:ff:38:86:ce:58:23:
         93:99:2d:4e:78:78:cb:1b:01:a9:37:ef:e0:2f:44:6b:2d:14:
         a5:49:bd:ac:6a:13:58:f5:9d:1b:d1:f4:1c:4a:42:16:50:33:
         ec:dc:2d:69:96:e8:e8:0e:74:f4:d8:18:d8:51:fe:e8:76:bf:
         11:79:f0:46:dd:50:d9:1d:bc:9e:9e:d2:d7:b1:13:31:05:8c:
         98:1b:d6:3b:0d:1d:96:c9:9b:6c:04:5e:94:9f:29:2f:9c:79:
         47:af:20:ec:c8:e4:e6:39:1c:dc:ef:a7:99:33:26:ae:b8:c6:
         16:a9:d4:5a:fe:fc:5f:70:55:bf:80:7e:19:95:53:13:a6:01:
         f4:53:46:a4:eb:6c:84:3d:a6:47:38:5a:16:ae:05:54:d9:e9:
         27:83:64:38:12:93:cb:8d:cb:44:c2:dd:35:60:6c:c6:ed:ff:
         9e:a2:18:52:5e:05:bc:ad:0c:13:b7:2c:f4:0d:3c:00:a3:80:
         58:1d:95:a1:9d:98:18:6f:0b:c0:73:64:5d:f1:98:8f:a5:9d:
         47:06:73:c2:c1:c7:13:6f:35:d9:9a:d9:23:04:37:e2:35:d6:
         cb:1c:b3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 02:00:47 2026 by rpki-client