Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa
File:                     debb647b-be5a-3ec9-8894-bc03d616d417.roa (raw, json)
Hash identifier:          9aQuHiWnzhr+QAxNed4imLLwU3/VJla+kwnvVyGSGoo=
Subject key identifier:   BA:89:69:92:18:06:29:A5:87:E4:EB:B5:4A:FF:25:2E:F0:3F:55:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DD35B17219D9B12B9A05CC120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     12243
IP address blocks:        2001:470:3b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 17 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:17:21:9d:9b:12:b9:a0:5c:c1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=9c4d57f7-8d58-45c0-9ead-057e39aede99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:ab:99:8d:5d:78:8d:4c:b5:fc:6b:b5:66:
                    46:00:87:01:a6:2e:a9:49:f0:b4:8c:cd:d1:5b:27:
                    84:c7:39:77:32:76:9b:b0:1a:a3:e7:e4:74:a1:b4:
                    09:30:17:0c:32:44:1e:20:52:a6:9c:89:78:20:2c:
                    7c:7d:ad:fa:02:4a:1c:ff:cc:26:21:1a:fd:78:d6:
                    0d:f1:00:1e:b8:60:5b:9a:ba:21:99:c2:17:64:cc:
                    01:81:06:a9:23:c9:8a:52:81:33:b6:73:6b:e9:63:
                    3f:7e:af:e3:c2:5c:80:5d:06:ac:8a:4d:89:48:ce:
                    8b:89:26:81:a3:93:36:e2:c7:1c:5e:d0:60:7b:59:
                    ad:3d:ea:5c:77:e0:b8:fa:de:c2:a7:56:44:dc:ec:
                    77:eb:ec:82:56:88:f9:d8:e4:5b:8c:2c:ea:8e:c0:
                    f1:b7:29:64:51:a6:a8:ef:55:98:9f:dc:ac:fa:2d:
                    5a:33:6b:1f:b0:91:d8:42:a0:2f:73:9e:e7:20:7c:
                    d6:8f:95:dd:06:b9:6e:76:b7:ea:fb:9d:58:41:ac:
                    06:b8:71:b7:e2:03:0a:ac:d1:fe:19:cc:98:1f:6a:
                    a4:7e:d9:ca:75:49:81:c7:81:b2:5c:4c:c0:8f:ce:
                    d8:dc:9d:bf:ce:d3:9f:b9:71:fe:8f:06:ef:ea:e9:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:89:69:92:18:06:29:A5:87:E4:EB:B5:4A:FF:25:2E:F0:3F:55:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:96:48:b9:e5:d7:ef:b0:5a:fd:e6:0e:18:94:bf:dd:bf:4e:
         3e:d0:e2:0f:59:a1:1c:01:11:37:16:e7:e9:fd:31:5e:a0:81:
         8f:9e:56:dd:12:d4:3d:cf:0e:5a:72:a6:4a:75:fe:0c:d9:26:
         d8:23:80:f5:61:ba:9d:cc:85:2d:b3:89:75:b4:3d:d9:d9:a2:
         8c:d7:e4:07:e8:be:50:5e:41:1f:2c:df:b5:61:8c:06:b2:94:
         14:a8:a2:2b:b7:ff:e8:7e:e0:07:cb:fa:03:ce:bc:46:c2:7f:
         ce:a0:5e:da:4c:6b:60:87:18:8e:bc:58:36:cb:b9:b3:b9:4d:
         7b:21:63:f4:77:3a:f9:34:8f:8a:96:34:e8:60:ff:8e:48:7f:
         3d:1c:73:fa:3c:75:d8:e2:05:2e:3c:92:8c:7f:9c:8f:d3:82:
         64:f6:1a:be:c6:5f:6b:8f:11:e1:0e:3d:ab:7c:4f:72:0a:e0:
         fc:31:25:f8:d8:ea:dc:fb:f8:12:88:94:d4:d6:af:6d:b0:55:
         b6:ec:70:03:7a:8f:21:ef:24:98:d8:84:19:ef:cd:bd:7b:6a:
         d7:7e:32:5f:6b:a5:1f:ff:fb:25:ea:78:23:be:56:90:85:70:
         aa:fe:75:7d:94:c0:ad:6e:5b:bb:18:11:0b:7e:ef:86:a2:6e:
         75:f3:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 03:12:46 2026 by rpki-client