Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a779032c-6d1e-3566-a382-936870eb955d.roa
File:                     a779032c-6d1e-3566-a382-936870eb955d.roa (raw, json)
Hash identifier:          4jVecP4Q0nmIQ556g/1Uv66mYVdUBlQd3varagP0oH8=
Subject key identifier:   F9:AA:41:12:7A:74:06:B5:C9:72:16:6D:E9:DF:7C:7A:D4:96:F4:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7945EDFCC3C329472713B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a779032c-6d1e-3566-a382-936870eb955d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400566
IP address blocks:        2001:470:379::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5e:df:cc:3c:32:94:72:71:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a481d98c-72e1-4ac3-850e-ecaf7f0adcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:18:cb:79:bd:4b:d0:a3:44:36:2d:70:4f:
                    73:ae:dd:3d:f8:6f:82:09:f2:fb:93:d0:4e:a7:1b:
                    d5:a7:0f:51:dc:71:d6:f7:86:9c:08:ee:e4:9b:13:
                    0f:9c:e9:48:c7:2f:47:11:36:f7:11:9f:f1:08:a8:
                    8a:a6:20:66:51:67:aa:8e:fa:ea:ad:a9:9d:05:ec:
                    e5:28:22:8f:4f:c4:48:ed:37:60:eb:ee:9d:66:8f:
                    38:ca:35:4d:32:44:6d:65:2b:16:52:f1:19:88:b0:
                    7c:aa:df:10:d7:c3:eb:8b:c4:dd:43:70:34:59:1a:
                    b0:93:3d:23:37:19:34:45:01:b0:0e:c4:62:56:05:
                    fb:5c:27:75:c6:6e:00:a9:57:89:9e:6a:c8:0e:69:
                    70:16:32:ce:77:bd:b1:48:44:1e:d7:9f:79:2b:da:
                    76:9d:17:9f:f5:fe:98:49:1a:33:e9:9a:b2:67:4a:
                    01:67:cf:71:43:56:a6:45:79:bd:0d:f3:75:eb:b0:
                    d8:fc:22:36:f7:fb:a1:2e:58:21:5d:64:5a:09:c2:
                    a1:f5:0c:92:18:a6:32:3b:4d:85:c8:4f:44:8c:92:
                    36:01:f9:a5:de:33:04:c6:d1:31:7e:f6:e0:63:76:
                    94:34:87:8f:3d:5a:54:db:31:49:a5:eb:e0:75:6a:
                    44:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AA:41:12:7A:74:06:B5:C9:72:16:6D:E9:DF:7C:7A:D4:96:F4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a779032c-6d1e-3566-a382-936870eb955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:379::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:1f:f8:44:92:5d:cb:11:27:2d:68:68:95:22:f5:97:94:
         a9:03:b1:2c:a8:7c:21:5d:46:a8:61:48:39:72:5b:46:29:92:
         2e:a2:e4:4b:4a:30:cb:74:ff:f9:3a:83:cf:e0:46:fe:6c:1f:
         54:f1:7c:b9:af:df:fa:69:66:99:77:c4:80:e8:94:c8:6b:33:
         2c:57:e6:48:ad:23:8a:c2:bd:c1:d7:b9:1a:03:00:cc:36:25:
         1e:5c:a2:7a:12:ea:85:29:67:9f:ca:07:05:61:2b:d1:d4:26:
         6e:76:3d:77:27:b6:ad:28:ea:5f:75:8b:c0:2a:50:5d:f8:c9:
         4f:62:21:03:47:14:b5:b5:e8:94:f4:ef:0e:57:3c:55:1d:a5:
         f8:cc:61:f8:87:87:96:af:a4:8a:7e:ee:40:18:df:46:fa:f2:
         36:07:8c:7f:d5:e9:7a:36:f6:21:64:5c:ad:50:11:3f:10:cb:
         d9:c1:17:23:0e:4e:68:6a:dd:0c:2c:c7:7a:c1:53:8c:4d:cc:
         45:14:b7:23:8b:28:64:fe:b8:93:1b:74:34:85:6a:8b:d2:86:
         82:13:09:3b:a0:d4:72:d2:25:2d:03:43:35:d7:55:b5:6d:17:
         9a:07:43:84:6d:c0:2a:c7:19:c0:63:f2:38:67:91:e5:e0:34:
         25:24:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:23 2026 by rpki-client