Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1339674-646a-3917-b480-9447fddcfbba.roa
File:                     b1339674-646a-3917-b480-9447fddcfbba.roa (raw, json)
Hash identifier:          W+BLvf30XXajXhBnu9xjMZAtPqX2JvOPTI5yY8zNG3c=
Subject key identifier:   2A:9C:C1:F9:C2:6F:2E:F7:4D:93:9E:57:08:C4:AA:5A:A4:09:38:34
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7872505620F68FC421D6480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1339674-646a-3917-b480-9447fddcfbba.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33302
IP address blocks:        2001:470:3f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:25:05:62:0f:68:fc:42:1d:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bad72930-0892-4679-b241-29f85f9c4e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:d0:06:19:0b:7d:81:1b:85:9d:3a:b1:fe:
                    c6:ad:a3:d7:25:d1:4f:a1:97:01:a3:fd:19:97:8f:
                    99:96:7d:c3:e0:7f:af:fd:de:17:3d:52:b3:15:68:
                    45:0d:69:59:ff:ee:d0:8e:b6:8b:7a:91:16:10:45:
                    7e:2d:aa:ce:47:1b:59:f7:b8:3e:3b:e5:74:a4:43:
                    ea:0e:90:e1:40:53:0b:fb:db:24:dc:09:35:e7:5b:
                    58:df:a7:00:38:79:b7:8c:71:e7:c3:37:50:d2:bf:
                    cd:6a:7b:6c:9f:8d:83:3d:a0:61:72:78:43:16:26:
                    26:ab:c1:a9:20:92:c1:0e:eb:b8:aa:11:5b:00:8a:
                    e1:63:0a:02:e2:fe:df:dc:18:57:39:57:42:c5:46:
                    d8:91:44:22:7e:75:b4:eb:32:c0:a2:9f:88:65:ba:
                    d0:7f:68:bf:a4:d3:95:c1:84:ea:0a:e9:7d:8d:24:
                    6e:03:67:51:52:2f:86:9f:9d:79:a9:c1:bf:13:2e:
                    0c:ca:69:28:47:85:79:38:ae:71:c3:b1:45:49:83:
                    81:a8:75:c4:23:fb:5a:07:10:4b:21:6e:a5:e9:d9:
                    60:7f:93:1c:be:d3:88:9b:7f:40:4a:e5:76:9e:6e:
                    c6:73:c2:f8:ca:42:0b:a6:93:b3:e4:38:e7:5b:f6:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:C1:F9:C2:6F:2E:F7:4D:93:9E:57:08:C4:AA:5A:A4:09:38:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1339674-646a-3917-b480-9447fddcfbba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8c:8d:c7:80:b0:6d:1d:b7:07:65:32:92:d1:a4:24:70:7c:
         52:40:e7:24:e0:a6:2c:68:97:c1:2b:cb:49:75:62:0b:27:b3:
         aa:51:75:fa:a4:08:e9:ec:e6:8b:00:5f:2f:af:9a:af:68:74:
         a4:22:19:fb:c4:0e:4c:6b:08:d1:90:0a:d9:fb:ca:e6:dd:9c:
         37:20:78:55:28:04:44:40:98:a1:d0:cc:a9:8d:06:6f:d1:6d:
         7f:00:43:8c:68:a6:ea:8f:c3:da:e9:38:59:d1:23:62:de:49:
         82:d0:2f:ac:ac:df:74:23:98:dc:f4:fb:ef:9b:ef:23:54:af:
         fd:3d:d0:3e:4e:cb:1d:03:73:21:91:a5:17:d5:8c:42:6d:cd:
         f8:1c:09:a7:83:2c:5f:05:01:df:c1:07:aa:47:a6:8a:2f:10:
         b2:94:db:e6:ac:3d:1a:ee:23:76:6c:a4:a1:18:a4:21:6f:85:
         fd:9b:0f:11:fd:54:a9:41:22:84:a0:4a:cc:a0:49:3d:e0:a6:
         8e:98:37:66:8f:52:9a:e1:e1:c1:68:e7:a9:b1:9d:cc:b6:f6:
         ec:43:a2:f6:4b:db:10:f9:4c:f1:69:b6:12:0d:e6:49:1f:3b:
         03:80:37:25:03:b1:e9:11:d2:6a:97:d8:af:8b:61:d4:40:39:
         73:68:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:35:43 2026 by rpki-client