Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de6d9336-99d9-3483-9c80-684ecbc29289.roa
File:                     de6d9336-99d9-3483-9c80-684ecbc29289.roa (raw, json)
Hash identifier:          sgOzwD0rjncEbaYp+jBD3FYRzE4Smk2KMypR8I6Unqw=
Subject key identifier:   22:8A:8A:C9:13:51:11:7E:B5:E4:02:90:20:49:62:27:65:1A:18:18
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86EC808E5A55631709210500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de6d9336-99d9-3483-9c80-684ecbc29289.roa
Signing time:             Sat 17 Oct 2026 01:30:17 +0000
ROA not before:           Sat 17 Oct 2026 01:30:17 +0000
ROA not after:            Fri 15 Jan 2027 02:30:17 +0000
asID:                     15461
IP address blocks:        2001:470:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:80:8e:5a:55:63:17:09:21:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:17 2026 GMT
            Not After : Jan 15 02:30:17 2027 GMT
        Subject: CN=d0d6c3fe-2741-4e69-a834-1814a6e91f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:ac:76:80:2b:24:47:d7:f6:75:07:f7:ea:
                    f5:77:a1:74:1d:d7:7a:e4:00:7c:26:ee:57:b9:e6:
                    76:c8:62:b6:be:64:d3:16:ef:1e:53:26:05:59:6a:
                    0f:4c:ba:12:5c:1d:8a:bc:59:7a:75:db:ee:f3:9f:
                    a3:3d:ae:3b:48:a8:b8:d1:0b:98:77:56:8c:30:fa:
                    d3:14:33:65:e9:ba:db:b6:fd:60:fb:e8:4a:72:1f:
                    49:33:16:f5:21:4f:23:cd:0b:ab:6d:8b:8b:ad:95:
                    55:35:6f:c4:a1:6b:4b:9b:d9:bb:17:cb:a4:32:83:
                    64:ba:82:d5:ad:5a:9c:d0:2a:c9:20:44:de:64:af:
                    6f:41:21:8c:db:f9:bc:8d:3a:88:60:62:f9:43:98:
                    84:d7:13:19:45:8c:32:20:79:be:35:89:12:84:35:
                    e5:4e:ad:12:2c:8c:6f:2d:7b:98:f7:45:6d:fe:a2:
                    e3:36:f6:0c:97:b4:e8:49:d3:2e:02:11:3d:73:1e:
                    d6:3b:1a:f0:e9:96:ac:21:8a:ca:ba:08:5c:f7:70:
                    e7:d8:af:de:22:21:e0:eb:56:6e:c8:6d:a5:1c:f7:
                    8f:82:aa:0d:f9:07:21:ab:e1:8f:32:f0:ad:63:34:
                    27:d4:81:91:b1:6c:2b:57:c4:b7:9f:f8:38:0e:f3:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:8A:C9:13:51:11:7E:B5:E4:02:90:20:49:62:27:65:1A:18:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de6d9336-99d9-3483-9c80-684ecbc29289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:647::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:54:e4:ff:71:1c:3b:27:25:3e:fa:5c:3b:a0:e8:8f:02:
         e8:38:f8:7e:cd:ed:7e:a9:aa:38:1b:09:42:2e:5e:90:f6:44:
         04:8b:81:3a:95:40:f6:6f:34:c1:2d:75:4f:b6:09:e8:87:cb:
         ab:ce:86:5e:ea:d0:d3:54:5d:42:f6:28:25:93:46:ea:1b:20:
         53:94:97:7b:a8:e7:38:eb:f7:87:94:5e:25:c8:20:a8:01:b4:
         aa:87:87:7f:e9:b9:1d:52:28:5a:20:4c:8b:00:0d:80:b0:b4:
         45:17:a2:64:df:f1:29:53:5f:80:50:59:c5:0d:b5:95:a5:d8:
         c5:5d:d5:5b:51:52:5a:9d:da:ef:3b:42:e1:ec:04:0d:fa:b0:
         35:4a:de:5a:57:de:4a:82:c7:ae:ec:e5:42:4d:42:33:4f:76:
         76:7c:18:bc:61:ac:c2:c9:dc:81:58:62:1d:3c:d2:65:c2:f9:
         16:dd:7e:6f:12:b1:68:de:04:42:59:b3:ce:aa:db:cc:66:a9:
         6d:9b:49:2a:67:0e:cc:19:58:c0:3a:32:43:e6:85:92:95:13:
         3d:12:c5:a9:7d:2d:b9:82:33:69:78:79:7d:f1:87:55:71:64:
         9b:01:0b:a2:f8:68:27:e0:b9:8f:92:cb:ce:b4:7f:b0:31:b5:
         d3:27:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:29:34 2026 by rpki-client