Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f740fea2-cb8f-3a42-80fd-03c908dcff7c.roa
File:                     f740fea2-cb8f-3a42-80fd-03c908dcff7c.roa (raw, json)
Hash identifier:          p8DXde3BJZJ3sZwfLADMGNPtQ81ugKVEZxdiuW0nMBg=
Subject key identifier:   B0:98:CA:C8:EF:84:2E:6E:0A:5E:56:DC:69:B9:03:BB:6F:AC:BB:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF999A0FB9CFE1A2F5840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f740fea2-cb8f-3a42-80fd-03c908dcff7c.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     10561
IP address blocks:        2001:470:1b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f9:99:a0:fb:9c:fe:1a:2f:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=519360cc-9857-4d57-9920-916afd0ced70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:fe:e7:22:5f:0a:9e:a3:a4:e2:7a:cf:03:
                    16:0d:81:1e:2f:10:c5:ad:8b:dd:72:b9:38:86:12:
                    d8:48:d1:50:1d:96:d4:fb:ba:a5:98:42:f2:5e:34:
                    1b:02:d5:53:32:5f:30:51:f1:ff:ad:40:92:38:1b:
                    70:7f:2b:3e:86:1c:1a:a9:d3:b4:9e:94:e0:e0:f8:
                    8b:95:0e:4b:44:3d:df:22:8f:f7:86:7e:fd:84:66:
                    98:d0:65:a3:47:6b:01:73:0a:ff:bc:31:c7:e2:e2:
                    94:8c:89:a2:0d:52:4f:68:20:66:64:81:26:44:ce:
                    6f:c9:bb:65:ef:da:4d:63:af:41:e6:13:ea:83:5f:
                    31:8a:3c:d6:19:6f:5d:d6:5b:6b:b5:d6:09:81:2a:
                    0f:7d:95:60:81:26:3b:9d:39:0c:ef:54:bf:4b:0d:
                    f1:93:d2:29:cf:b1:70:68:19:fd:c5:c0:04:a9:f6:
                    91:d4:6c:dc:76:29:0b:97:1e:6f:90:5b:05:e2:c3:
                    79:f1:f1:cb:b4:df:93:71:98:1d:cb:b9:2f:9c:f0:
                    24:6e:37:65:f6:eb:f4:d8:38:68:21:f2:10:eb:38:
                    c7:5f:0f:ae:cc:0a:74:fa:3c:3a:62:fe:8a:6a:2b:
                    a6:43:5f:9b:51:18:4a:38:ce:93:d6:0d:37:6a:7d:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:CA:C8:EF:84:2E:6E:0A:5E:56:DC:69:B9:03:BB:6F:AC:BB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f740fea2-cb8f-3a42-80fd-03c908dcff7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:40:6f:8d:15:aa:3b:5b:96:f4:a6:1b:92:be:b3:ab:fb:aa:
         b7:c1:84:8b:c5:2c:7c:7d:db:ec:5b:3f:40:1e:fc:d4:64:54:
         39:00:cd:25:27:d8:e3:63:7f:b4:f7:e4:20:4d:cd:53:c5:fc:
         2c:f3:ad:17:7c:61:ad:5d:d2:72:72:8a:95:f3:79:95:50:7d:
         ea:03:34:76:2d:24:4d:bb:9e:d6:24:77:7a:99:cf:cc:20:86:
         e5:94:5f:90:fb:37:44:bf:10:97:50:5c:55:1b:ac:48:4f:5a:
         91:b7:60:a0:fc:0c:15:53:f3:c2:f3:56:c8:03:b9:84:05:7c:
         0d:42:77:d5:19:16:58:af:01:08:27:ca:d2:59:7b:3a:56:94:
         b8:d6:44:16:9a:41:21:35:f4:cb:47:11:d1:fd:3c:50:d3:5e:
         24:7c:ef:a4:ce:cb:5d:c1:98:f1:e7:d1:76:87:b4:8a:e5:2a:
         b3:fe:29:1f:9a:f1:b4:f0:0f:94:e4:9c:eb:b9:33:89:4c:35:
         07:b1:ec:8f:57:cb:0b:86:d6:43:0d:bc:11:c9:93:9e:d9:92:
         5a:cb:fc:e2:cb:20:3f:ba:38:10:ec:72:02:9e:53:86:d3:f1:
         63:04:48:08:1f:4c:67:5e:16:3c:88:4f:2e:73:f1:bb:44:58:
         a5:e8:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:31 2026 by rpki-client