Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa
File:                     b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa (raw, json)
Hash identifier:          Gr3pObdt0ia1mRhQeqzP8ScCuAoeOb3gfl1WFLIPtLw=
Subject key identifier:   2D:8B:F8:07:3C:7C:85:51:F9:1B:E2:74:51:D7:65:1C:7A:31:5D:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA79C824F8A87C080CB63AF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46288
IP address blocks:        2001:470:449::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:82:4f:8a:87:c0:80:cb:63:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=732b8d7d-3b48-4bd7-bac7-b38d5ba3b1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:b2:74:45:03:3c:36:5d:30:5b:02:fe:48:
                    c9:e9:ce:c6:8f:71:ac:ed:c4:7b:f8:4d:a4:5a:89:
                    18:64:a3:6a:2c:a3:09:33:9d:e5:c8:1c:c9:95:e3:
                    c3:c3:40:f0:dd:ed:5e:58:74:11:98:73:9d:e6:bb:
                    3a:4e:23:4d:7a:75:9e:c4:a2:98:5c:c9:33:98:03:
                    41:ed:1d:1d:05:07:b2:09:de:23:d0:76:fd:eb:d5:
                    1b:03:76:69:9e:3d:d7:46:86:7c:ec:ba:7d:3f:b0:
                    a3:10:af:7f:68:b5:29:75:95:8f:16:99:4f:ac:64:
                    68:d1:cd:9e:d7:1e:6e:0e:a7:29:39:21:c8:15:e5:
                    6c:1f:27:f6:78:d9:39:57:36:e5:e9:76:92:ca:db:
                    7c:f5:e1:41:ac:14:76:44:de:2e:24:10:a6:15:08:
                    23:8c:2f:c0:bf:86:f4:5c:d8:b1:ea:9c:68:68:16:
                    3b:bf:1a:cd:4e:96:f1:0a:df:e2:a0:e3:9e:c1:57:
                    94:cf:67:08:6e:be:96:cd:47:27:ff:34:d3:9b:cb:
                    5d:5d:d0:68:07:25:36:9d:08:e1:d6:f3:8b:20:bf:
                    dc:0e:f6:f9:a1:ed:ea:86:b2:e2:cf:3c:a8:94:9e:
                    16:da:99:42:47:e6:e5:bb:5a:ee:f6:d0:5f:ce:36:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8B:F8:07:3C:7C:85:51:F9:1B:E2:74:51:D7:65:1C:7A:31:5D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:449::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:2b:b5:92:de:c7:d5:a9:83:0c:d7:1a:e9:37:01:04:92:
         b8:0c:31:48:d0:22:2b:57:ed:be:5f:5e:a9:34:c0:29:39:6f:
         e9:45:a9:ad:ce:8a:7f:72:28:70:4e:54:68:b2:56:f5:54:fa:
         04:79:f7:bb:09:15:26:c2:79:0e:1b:fe:5f:7b:af:f9:bf:57:
         50:d9:ad:5a:07:88:6a:a0:76:69:15:01:43:be:6d:95:8a:83:
         6f:a4:ce:75:63:48:8c:a2:50:65:87:e8:84:a9:ab:f1:27:29:
         29:49:55:6c:96:07:fb:9a:26:03:8f:d8:31:8d:60:44:a8:8a:
         d5:09:f9:9b:b4:11:d6:85:9f:bd:0b:8b:c4:7c:c0:7d:af:4f:
         72:55:30:43:eb:3d:f6:93:b8:fd:aa:20:f1:6c:64:53:7c:b1:
         bd:15:c0:ac:33:28:e6:a4:18:2e:e1:1b:f3:2e:bb:2a:45:46:
         b6:57:98:8c:ee:96:70:f6:c5:09:1c:be:14:69:77:7f:e4:35:
         29:63:1f:56:34:56:dd:18:72:e2:2a:0c:19:da:ba:7b:94:7a:
         8f:d5:0a:75:14:a2:88:3d:44:54:43:af:3d:59:54:f6:66:27:
         34:44:f2:c2:f4:a0:67:b4:39:62:67:7a:45:a4:05:16:aa:67:
         a2:de:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:46:25 2026 by rpki-client