Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa
File:                     9abe08a3-894f-3656-a420-d1dae8ad45e6.roa (raw, json)
Hash identifier:          b/06G5jiK9vhDerqYfpJz7i3jAlfEp8sNbd04KM7/bY=
Subject key identifier:   B8:14:B6:C3:14:AC:13:EF:A4:D3:26:00:D4:94:B7:02:0C:2F:70:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9226E1A0C2CFA8F2BBEC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     30886
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:26:e1:a0:c2:cf:a8:f2:bb:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d28cde68-f32e-488c-8d37-6d90338637e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:dd:61:b0:92:08:57:0c:b3:4a:97:37:21:
                    fe:2f:d6:d1:57:91:35:28:99:13:0e:56:6b:fc:2f:
                    1e:4a:0e:5b:de:24:6f:66:f1:7b:b1:af:f2:75:fb:
                    f6:b9:60:78:09:2b:92:73:e6:02:65:88:b3:92:f1:
                    0e:48:3f:86:6e:8b:04:5b:7b:8e:58:5f:31:dd:86:
                    b5:6e:e3:eb:c6:72:90:8d:ad:5f:e9:73:15:0b:5b:
                    81:a2:0d:4a:75:6b:82:bc:c3:5a:2d:96:97:f9:86:
                    42:56:d3:ad:6c:d7:14:de:ef:72:42:11:cf:3c:23:
                    85:fc:3d:41:fc:f6:95:c8:23:cb:9f:0c:19:31:9b:
                    80:1c:c6:73:75:d6:c6:09:f0:13:a9:4c:6c:c8:f5:
                    9c:2f:57:8f:64:03:53:d4:ee:99:d0:24:62:9b:ec:
                    25:d6:9a:6e:39:31:d0:40:93:14:eb:3a:10:bd:04:
                    bf:fb:bf:94:b5:03:ce:27:43:41:5e:67:0c:05:de:
                    45:ab:da:da:41:8f:87:4f:eb:d2:43:2b:2b:08:92:
                    48:03:9e:a4:c2:9b:f7:b2:ac:e8:48:11:cc:9d:d6:
                    84:8a:b0:7a:7b:ee:b3:4d:8d:67:94:02:f3:77:da:
                    ba:69:09:8d:fd:47:ec:90:91:1c:61:9d:cc:33:65:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:14:B6:C3:14:AC:13:EF:A4:D3:26:00:D4:94:B7:02:0C:2F:70:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:99:b2:9c:48:60:ee:7b:cc:32:46:da:9f:33:96:6a:05:
         a8:6a:76:65:b9:fa:62:a7:3d:70:5a:0e:c5:af:99:e4:a7:32:
         a3:5e:6b:14:0e:6b:0d:15:ee:73:f4:fc:0d:d0:61:5e:ea:9a:
         45:33:6e:10:8a:6b:88:23:92:05:ae:5b:0f:c3:81:5c:4b:81:
         e1:25:46:96:13:d8:48:62:0b:05:b5:1c:0f:46:a9:b8:85:33:
         dd:fd:8d:38:46:42:8e:22:9c:9d:80:4d:96:eb:99:3c:5a:8c:
         80:d2:f7:a3:38:17:98:ab:97:07:05:02:01:d4:64:0e:ba:94:
         07:9a:62:48:2a:2e:ab:ad:32:42:f7:85:47:d3:be:db:42:d9:
         8e:c5:e2:78:98:19:32:2f:15:ab:cd:f2:4b:ca:94:b0:2a:a9:
         d6:e1:0f:2a:ab:84:df:a5:b7:f3:f4:82:c2:12:01:82:f9:0e:
         e5:b3:24:30:a1:c4:69:5f:2b:6d:fc:72:92:dd:9c:81:48:ff:
         a2:33:c8:5c:74:94:d9:22:0b:88:e8:18:b5:f7:82:24:c8:a6:
         31:e9:74:4e:95:ea:82:35:46:ed:15:a3:9d:db:90:15:86:ab:
         ab:6a:ca:17:1c:a8:37:f8:7e:fe:6e:ab:a6:34:84:18:e8:7d:
         3a:cc:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:35:09 2026 by rpki-client