Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa
File:                     9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa (raw, json)
Hash identifier:          G7DoS6FYc7wnm78aSoTEcUCVCq2HWpTqVvN3b+lOt6A=
Subject key identifier:   A5:3D:DD:52:84:B1:A7:58:B0:90:F1:53:59:DC:BC:DC:1C:18:16:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F4C3ED8EA0038C5F56340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     17117
IP address blocks:        2001:470:151::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:4c:3e:d8:ea:00:38:c5:f5:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=b6c59b25-67cc-48da-95f5-df7382546046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:a2:1e:c6:56:f2:b5:b3:71:73:f7:a3:76:
                    78:99:03:5e:ee:03:08:dc:df:66:4e:82:7b:5d:83:
                    c5:22:d7:71:38:2b:af:38:d9:7a:45:56:90:e8:98:
                    b9:83:63:c2:c9:93:5b:ad:cc:5d:be:e3:9a:f3:17:
                    67:58:12:a3:d0:b1:c0:04:63:f4:74:23:80:21:25:
                    fb:fd:aa:de:6a:91:c5:4d:a9:ac:ec:42:66:3b:b7:
                    37:31:cc:9b:a9:77:3d:7e:ba:5c:99:c7:ec:4c:ab:
                    c4:8f:1c:45:d9:ad:e2:e1:a5:cf:2a:31:f7:3d:44:
                    ed:2f:a7:78:8f:70:a6:2c:e3:81:65:9a:c0:6b:3e:
                    57:13:bd:12:42:4e:30:97:5f:51:5f:f4:41:b1:50:
                    b3:b5:4e:5b:85:80:30:fe:5b:d7:fb:df:7b:4f:ca:
                    f2:5d:5d:e3:1f:5e:7a:3e:60:10:3f:7f:08:89:2c:
                    a0:0c:d5:81:aa:da:1a:74:1b:e8:8c:59:da:ea:72:
                    0e:7b:24:61:cf:e9:5b:51:72:85:ae:5f:54:5d:41:
                    1b:2f:7f:a5:06:cc:0e:9a:02:b7:43:60:e4:6c:4d:
                    ea:dd:7d:ad:d2:b3:5d:9f:a1:1a:3f:de:6e:b3:73:
                    8c:32:3f:30:7d:d8:c1:5c:88:4a:94:5a:69:b7:da:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:DD:52:84:B1:A7:58:B0:90:F1:53:59:DC:BC:DC:1C:18:16:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9cf4f9a6-9334-396b-b3c5-0026b90361cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:151::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:fa:03:d3:79:fa:c4:4f:0f:7e:4c:99:fc:66:87:2c:cd:
         04:6e:65:66:59:67:90:e8:4f:31:c1:d2:7e:cc:50:b3:e0:71:
         4e:7f:10:d6:53:b3:ce:bd:6e:15:70:bd:b2:e2:2d:3b:3f:e8:
         b9:65:ca:9e:6a:b3:18:ef:a3:5f:a7:65:81:71:f8:be:85:07:
         9c:e3:bd:71:ee:16:d1:49:26:8a:c9:b3:a8:ea:81:01:ec:03:
         94:e3:60:84:f5:5b:0d:6c:7c:ab:dc:74:44:d1:01:09:ea:2b:
         47:7c:16:74:78:61:c1:25:0c:82:73:ed:7a:50:91:56:1e:84:
         48:ad:19:3f:23:20:0e:47:ad:52:c1:83:a4:85:f6:1c:eb:68:
         f3:1a:98:d8:a8:d0:e3:4d:c8:b2:23:a9:fd:f6:59:e0:7f:61:
         fb:22:84:9a:56:62:11:ae:e4:a3:b9:f9:7e:63:07:86:a7:97:
         23:e3:d0:bd:da:18:db:66:50:16:ae:a9:c1:92:f5:78:3e:b8:
         0e:d1:d7:d2:0f:da:77:b0:55:4e:7f:2d:41:2a:1d:e0:09:6d:
         c7:3e:19:07:29:81:80:f6:de:e2:99:97:b3:47:63:27:eb:27:
         15:f3:55:58:f7:9b:b5:e2:11:e5:b4:c2:64:8c:47:25:a8:45:
         df:fc:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:13:56 2026 by rpki-client