Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa
File:                     d189f356-fc80-36a2-a374-23df4af2446f.roa (raw, json)
Hash identifier:          adEhyspR8NOXROg4KE3MziNEjnSAiD8Tl7Q2ZxEmKQg=
Subject key identifier:   47:27:C2:F2:40:46:21:4C:DE:C8:99:0C:49:35:26:E8:2F:5C:0D:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DF4DB8382F714D2EFA712D400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     212054
IP address blocks:        2001:470:486::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:83:82:f7:14:d2:ef:a7:12:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=761b0767-6c93-4f0f-80e3-dfbbac69b47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:ee:7a:c9:5d:f2:b7:47:6e:53:e5:c5:c5:
                    92:15:c8:a5:4a:a9:4a:bd:5e:7d:af:14:0e:9f:08:
                    54:19:f6:1a:7c:0c:c6:8c:fd:c7:cc:ba:2f:20:92:
                    85:30:6e:6c:45:54:1e:93:e9:34:5a:64:cb:da:da:
                    1a:07:73:b2:95:4c:ff:a6:c0:65:07:6f:77:fd:dd:
                    4c:38:0e:52:65:20:68:94:f9:0a:41:7d:33:17:94:
                    b5:d1:a2:87:e5:ac:58:7e:ed:fe:50:4b:de:df:01:
                    40:f1:2c:a2:82:85:44:00:e4:66:ec:91:ea:a3:8b:
                    49:08:b1:59:82:00:92:b1:30:ef:f3:71:e9:4a:6c:
                    06:d8:8d:f4:e7:18:4d:57:3c:31:81:1b:7d:76:44:
                    18:1c:d0:bb:ea:70:22:c0:19:93:cb:94:d6:8b:ab:
                    18:54:4b:12:d6:03:b7:22:cd:cd:d0:08:1d:a9:53:
                    39:68:1a:f2:1b:07:3c:26:69:7e:04:56:95:60:29:
                    dc:b9:a1:4a:6b:6f:7b:07:74:73:fc:ca:99:31:ca:
                    7c:5c:e4:ad:75:a4:44:c1:a0:8a:92:13:29:ed:16:
                    db:39:3e:e7:7b:25:c2:8f:e4:1a:8e:ea:8d:19:a9:
                    df:51:cf:80:17:57:d9:d2:e5:a7:d3:07:aa:51:2a:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:C2:F2:40:46:21:4C:DE:C8:99:0C:49:35:26:E8:2F:5C:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d189f356-fc80-36a2-a374-23df4af2446f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:486::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:99:49:2c:3b:da:a8:2b:e9:94:35:f2:94:cc:b5:c3:e7:
         75:8a:ea:b3:99:f0:6a:c0:8d:4d:08:e8:81:3c:b8:17:52:50:
         f3:52:cc:21:c3:54:2d:bb:ee:4a:54:22:22:4f:da:4d:cd:68:
         b8:ca:e8:41:1b:86:15:10:2b:e8:eb:d4:af:eb:b5:a6:9b:45:
         95:f5:b8:4a:8a:07:c3:06:b2:03:c8:5a:eb:ba:ed:43:6e:3e:
         dd:ed:c2:90:49:78:86:5f:26:00:1f:a5:6f:85:e9:06:e8:51:
         1a:2c:fb:c6:ad:96:f2:3e:4c:60:39:99:de:e7:31:7c:5f:05:
         0d:db:25:21:f8:82:cc:e5:18:4a:04:e1:70:4f:8e:62:7e:5f:
         25:bb:69:92:48:56:95:c5:0c:ff:2a:4e:48:4c:52:1b:7d:fd:
         a6:ad:cb:16:0b:67:6d:a4:dd:a5:c3:1d:c7:de:2d:c9:d9:38:
         02:54:f5:1b:92:f5:10:2a:56:b9:f5:86:b9:f3:ae:d2:c6:4e:
         e9:0e:43:af:d9:4d:3b:2e:e6:4b:e8:e0:fe:4c:24:b8:ea:bf:
         a6:a1:6e:78:c5:24:bf:45:15:42:c0:74:cc:37:f6:de:76:55:
         93:ed:34:29:51:5e:82:82:98:22:9a:bf:85:21:a9:f5:50:4c:
         af:7b:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:38:27 2026 by rpki-client