Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa
File:                     b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa (raw, json)
Hash identifier:          g0BSCSp+kKsXLXlztOnVdZk00Atq/0qZ4gbU2C9URKw=
Subject key identifier:   59:0A:2B:26:C7:64:13:72:39:5C:0A:37:0A:7B:DF:E7:C5:A9:32:EC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9224AE60133F8F5D926720
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     30860
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:24:ae:60:13:3f:8f:5d:92:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=4125f23a-e3c2-4516-a2d7-32f69daf1474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:e9:6d:7d:22:f9:3d:89:0d:54:45:5a:6a:
                    f0:ce:6a:63:d8:27:94:9d:ed:e9:b4:9a:2b:f8:6b:
                    99:cc:9d:24:f9:2e:60:4c:2c:5a:8c:b3:59:d7:06:
                    54:e9:d0:d7:0b:6c:ea:2b:20:de:79:2d:9d:fa:80:
                    71:b2:f7:2b:6f:a9:d5:05:0c:d3:68:50:31:ad:49:
                    fc:63:31:d9:a7:d6:65:f1:22:69:e0:7a:b0:b0:c1:
                    5c:53:7a:4a:90:ed:ab:b9:1e:fb:cf:4f:41:6b:85:
                    5b:b4:68:0d:58:cd:dc:5c:ac:20:47:5f:d0:87:13:
                    fc:fe:3c:5a:3f:48:c0:f0:0d:b3:61:25:51:96:f0:
                    60:a3:cc:0b:6c:9c:0e:60:07:2a:40:20:13:c9:13:
                    45:c0:71:d2:03:ce:7c:41:04:fb:60:4e:23:da:38:
                    18:d2:e7:76:15:29:56:9d:37:50:c7:ad:1c:30:fc:
                    26:d5:7b:11:82:c6:85:27:1b:c4:f6:be:85:82:f2:
                    a8:62:34:95:11:3f:92:0c:7f:52:e7:b3:3e:e1:f8:
                    05:5a:28:e6:f0:42:c7:d9:66:a1:2d:ec:33:8b:e4:
                    cb:be:77:74:05:ff:c5:e3:50:8d:28:e9:41:da:0f:
                    c3:e5:b4:e1:8f:15:7a:ce:b5:6e:88:47:95:73:d5:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0A:2B:26:C7:64:13:72:39:5C:0A:37:0A:7B:DF:E7:C5:A9:32:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b73ebbc4-9d85-39ee-b155-c20191a35f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:97:3b:57:e1:77:17:3c:9a:ec:26:f7:8e:0b:74:5b:da:bd:
         87:01:a7:b3:ee:64:ff:35:05:44:ca:66:d1:f6:b1:b8:30:3f:
         7b:b3:a7:4f:5d:52:09:a7:40:be:21:1b:ff:f8:84:59:c4:84:
         04:46:42:92:98:04:90:17:df:28:9a:50:8c:61:db:dc:c1:6c:
         4c:be:a6:1d:30:04:70:82:e3:8e:e7:e3:30:2e:90:73:57:6a:
         10:fd:07:8d:a9:71:5d:a0:6e:c4:17:e5:51:5d:52:37:08:33:
         ac:51:6f:35:a8:62:3f:a7:ed:b4:04:5c:e3:37:10:ce:59:df:
         86:01:f1:63:01:b8:9e:46:d3:79:56:25:36:b5:e8:9e:ec:b4:
         d7:50:8b:48:92:9e:24:48:d2:4a:c2:3e:61:50:f4:4d:3a:fd:
         1f:35:a3:24:ac:11:3b:11:c4:bd:65:13:12:30:31:8d:27:1e:
         9f:7b:6f:8e:31:65:28:53:4e:c7:38:25:7f:77:33:fc:4a:c5:
         e6:92:26:b2:ce:3f:19:86:0b:fa:a3:e5:07:8b:57:56:08:81:
         25:5e:0c:ac:71:a5:85:c4:20:cd:14:f4:da:74:ea:b0:3d:3d:
         d9:71:2b:8d:89:f0:9b:76:19:4b:13:1a:ac:d1:86:66:c9:d9:
         7f:7f:bb:0c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckiSuYBM/j12SZyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NDEyNWYyM2EtZTNjMi00NTE2LWEyZDctMzJmNjlkYWYxNDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZDpbX0i+T2JDVRFWmrwzmpj2CeUne3ptJor
+GuZzJ0k+S5gTCxajLNZ1wZU6dDXC2zqKyDeeS2d+oBxsvcrb6nVBQzTaFAxrUn8
YzHZp9Zl8SJp4HqwsMFcU3pKkO2ruR77z09Ba4VbtGgNWM3cXKwgR1/QhxP8/jxa
P0jA8A2zYSVRlvBgo8wLbJwOYAcqQCATyRNFwHHSA858QQT7YE4j2jgY0ud2FSlW
nTdQx60cMPwm1XsRgsaFJxvE9r6FgvKoYjSVET+SDH9S57M+4fgFWijm8ELH2Wah
Lewzi+TLvnd0Bf/F41CNKOlB2g/D5bThjxV6zrVuiEeVc9XcAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFkKKybHZBNyOVwKNwp73+fFqTLsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjczZWJiYzQtOWQ4NS0z
OWVlLWIxNTUtYzIwMTkxYTM1ZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJKXO1fhdxc8muwm944LdFvavYcBp7PuZP81BUTKZtH2sbgwP3uz
p09dUgmnQL4hG//4hFnEhARGQpKYBJAX3yiaUIxh29zBbEy+ph0wBHCC447n4zAu
kHNXahD9B42pcV2gbsQX5VFdUjcIM6xRbzWoYj+n7bQEXOM3EM5Z34YB8WMBuJ5G
03lWJTa16J7stNdQi0iSniRI0krCPmFQ9E06/R81oySsETsRxL1lExIwMY0nHp97
b44xZShTTsc4JX93M/xKxeaSJrLOPxmGC/qj5QeLV1YIgSVeDKxxpYXEIM0U9Np0
6rA9PdlxK42J8Jt2GUsTGqzRhmbJ2X9/uww=
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:30:39 2026 by rpki-client