Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c604b17c-deaa-3502-9c7d-e82ec72b6783.roa
File:                     c604b17c-deaa-3502-9c7d-e82ec72b6783.roa (raw, json)
Hash identifier:          187NyX4lSs8tIepOsgM4+f6KZNGblsSII+UUmb7YSco=
Subject key identifier:   35:E9:0A:01:FF:6F:94:F7:D8:F8:11:BE:63:F7:87:5F:D7:56:13:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA79BA95EE173BAF3B4DBE9C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c604b17c-deaa-3502-9c7d-e82ec72b6783.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     201699
IP address blocks:        2001:470:3e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:a9:5e:e1:73:ba:f3:b4:db:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=da013141-512e-44e2-993a-23d2a0f003d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b3:6a:26:86:f5:11:95:2e:54:a9:93:75:6f:
                    ca:2e:fc:69:f9:bf:d3:68:de:6b:77:2d:c9:3f:ea:
                    5c:50:62:f6:2f:55:f1:02:53:52:52:03:02:a8:c6:
                    05:5e:3f:ee:93:37:8b:14:56:b5:09:fc:17:2b:20:
                    48:d3:3c:f6:fc:69:68:b3:44:77:1c:2b:47:8f:4b:
                    fe:c5:d5:50:a9:80:69:7b:0a:a0:42:53:dd:e2:33:
                    7d:1a:db:4d:6b:b2:88:73:00:3a:13:a7:84:be:74:
                    90:31:be:95:71:e5:48:67:21:3c:cb:71:7c:f0:ab:
                    51:03:be:70:60:a6:57:a1:bf:06:03:dd:ae:e1:48:
                    1c:05:de:d9:fc:5c:2d:d9:63:98:66:ef:99:34:c1:
                    42:d5:d3:70:48:c4:65:c6:01:0a:c0:da:1a:8f:37:
                    4b:34:38:9d:53:17:3d:c9:a5:93:37:4d:76:2c:65:
                    c3:5b:49:d7:77:e6:3a:bd:79:95:00:af:c1:a5:76:
                    71:cb:f0:a0:0d:cb:b8:76:29:b3:ef:ac:ed:29:fa:
                    0e:14:66:cb:b6:b5:8a:88:01:32:bf:f7:bc:22:83:
                    7d:da:4d:27:0f:48:48:20:4d:3e:9b:9c:2a:05:43:
                    76:bb:6e:e2:35:77:02:55:77:70:3a:d8:c7:df:bd:
                    4c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:0A:01:FF:6F:94:F7:D8:F8:11:BE:63:F7:87:5F:D7:56:13:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c604b17c-deaa-3502-9c7d-e82ec72b6783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:fe:40:92:58:7b:b0:ba:e1:17:e0:f2:01:73:35:4c:32:
         72:fc:68:b2:16:43:5c:c5:c0:00:89:6f:57:4a:59:f2:de:10:
         5b:d7:de:27:29:c4:ee:48:41:f3:69:46:a5:6c:4c:4c:54:0a:
         7b:58:e5:93:75:c2:a1:14:df:60:a5:f9:7e:fa:c9:9e:40:99:
         d4:d6:8a:7a:42:29:85:3c:cf:aa:5a:8f:0c:c7:71:7d:5f:35:
         3b:b9:4b:c7:76:bb:66:df:46:5a:2d:35:c9:8a:90:a4:3c:9b:
         99:e9:6c:a8:36:19:3b:40:05:e3:01:81:59:a5:60:c8:f2:1b:
         2c:07:0d:37:80:86:9f:85:27:84:60:6c:9f:cd:e4:72:48:a5:
         a7:20:a1:3c:6e:5a:df:01:ce:43:c1:64:80:58:13:04:e1:c0:
         48:19:bc:23:ce:7e:e9:bf:38:11:9c:b0:53:08:8c:09:a6:2d:
         7d:79:ab:be:bd:8a:cf:ec:00:f3:54:2e:49:b3:7f:a7:3e:3a:
         ba:d5:df:40:c6:69:b0:d9:73:de:6e:09:66:9d:29:73:57:56:
         e7:95:6a:9c:c9:69:a5:5a:01:3f:05:80:36:f0:b4:90:98:ea:
         33:f0:00:b6:14:56:f9:01:ab:12:ad:ef:61:51:9a:66:55:1b:
         ad:61:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:46:02 2026 by rpki-client