Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa
File:                     c1c68e55-3a72-30e3-b490-7849f1da5895.roa (raw, json)
Hash identifier:          poraWDF9bRxxX2LK58tslqdHZvIA+vgZbv2PtWLwl10=
Subject key identifier:   94:59:71:AC:C7:DE:83:50:D5:9C:EE:9F:13:3A:9C:C3:94:42:D3:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3CF9C53252F6F5F54977D580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     43633
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c5:32:52:f6:f5:f5:49:77:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=3bff53f1-d551-41ff-879c-5728e2ff12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:8b:21:bb:a1:8d:94:27:99:52:20:36:ec:
                    5c:ca:b1:a6:9c:e2:8d:15:08:27:96:bd:53:06:3e:
                    1a:9b:6c:5e:44:21:a4:d7:ad:59:06:a6:8e:98:b1:
                    3c:68:05:e7:2c:e9:fc:ed:df:2c:7e:0a:49:d2:93:
                    3e:32:ec:8c:d6:a2:24:fd:82:76:63:f0:aa:49:ce:
                    a6:f4:a0:c1:dc:0e:73:fb:33:6c:58:de:2c:80:a5:
                    13:2b:b9:ec:c1:b7:75:bb:0a:f6:fd:2d:2e:9a:63:
                    e1:78:b0:3e:63:61:a7:ba:a4:e8:ef:12:fd:dc:75:
                    4e:38:6b:74:50:f3:13:74:86:e2:cb:b0:96:eb:74:
                    55:41:ef:de:a7:97:c6:75:f3:1d:7a:0f:31:ba:cf:
                    22:bf:b6:d6:a3:55:4f:52:b4:43:21:36:3a:41:2b:
                    e1:da:56:d7:38:cd:aa:d2:8c:98:b9:35:3f:b3:36:
                    fb:ea:11:61:4e:7d:4c:26:19:d7:e7:ae:a4:4d:40:
                    c1:8a:4b:f5:9b:67:da:3e:b6:d9:2d:7a:2e:a5:e2:
                    82:a1:84:ab:24:8c:07:ad:2f:e4:6e:d7:d9:94:dc:
                    a5:b7:39:79:0d:c4:97:b3:90:19:99:6b:ff:16:f0:
                    4a:e2:68:d5:27:f4:9d:32:84:fd:4b:3a:69:16:1f:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:71:AC:C7:DE:83:50:D5:9C:EE:9F:13:3A:9C:C3:94:42:D3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1c68e55-3a72-30e3-b490-7849f1da5895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5a:fb:3a:28:23:59:51:02:80:c2:31:57:53:58:24:d9:23:
         6a:b8:cd:26:5c:b8:e8:84:cc:ea:e0:71:2e:b0:fc:a2:fb:66:
         16:a7:55:8d:8c:72:75:c5:a0:4a:fa:b3:87:00:c9:fd:c2:2a:
         1e:57:e0:8b:e7:89:47:13:23:a2:d0:26:af:dd:ae:8e:12:3f:
         b4:be:2c:1a:f3:a1:20:54:d7:94:29:c9:83:9f:f3:0f:8a:3b:
         dc:e6:19:dd:a9:34:f9:84:b6:82:c9:06:8d:24:45:68:77:f2:
         ff:ef:61:7d:de:20:41:f1:b7:39:2b:0e:10:03:29:38:cd:90:
         a4:cb:7b:7a:dc:a2:11:8c:3d:b6:95:7f:ab:0c:bb:26:71:c5:
         1a:b0:ce:33:6a:7a:2a:52:03:77:e1:5c:37:4f:fc:26:d3:33:
         f2:3c:1f:23:e2:15:a4:09:7f:eb:6a:4c:2d:41:9b:ed:a6:3c:
         ad:55:7c:a6:0c:9c:d9:3f:8b:89:00:98:f7:69:f6:f4:6e:3e:
         41:21:9e:2d:ee:aa:a0:67:9d:cf:8b:15:2a:5c:dc:f9:a4:3c:
         db:d5:cf:07:c2:c4:17:35:75:9c:a8:ad:ce:6d:c0:66:ae:23:
         28:12:9f:9d:b2:48:42:2b:8e:6a:8b:dc:ff:11:40:d0:b2:67:
         15:db:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:44:26 2026 by rpki-client