Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbb3b77d-7c38-3cfa-9ba0-c231a75eb223.roa
File:                     fbb3b77d-7c38-3cfa-9ba0-c231a75eb223.roa (raw, json)
Hash identifier:          uaOALFXPkZ9v41rLPbn5VpOnbu4vm7TQCKrSsoBhsfY=
Subject key identifier:   FD:4D:C9:5A:DE:86:64:E8:A0:EA:EC:16:76:79:BB:94:0F:F6:75:6E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F81483E13D363B1BE19CD7300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbb3b77d-7c38-3cfa-9ba0-c231a75eb223.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     212955
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:3e:13:d3:63:b1:be:19:cd:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=db448154-503d-4562-802a-dd77b7bb02de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:35:b5:ec:e7:13:01:54:0a:6a:33:0d:3e:
                    46:95:88:03:97:d8:9d:bc:c5:9e:d6:30:df:f1:e4:
                    8e:5d:ed:51:cf:1b:2b:dd:d3:78:51:0f:af:8c:fa:
                    94:58:07:0d:d3:23:3d:b6:c2:e0:3e:e8:f1:4c:21:
                    43:3e:8e:a1:4b:f9:1d:0f:fd:d7:db:e9:b2:80:d1:
                    76:96:ae:e0:56:47:23:9e:d7:e3:16:91:38:01:15:
                    08:a8:66:af:e0:51:5c:2d:71:02:6c:32:76:7d:43:
                    f4:51:09:6f:2d:16:ff:84:30:43:e9:c6:34:16:fc:
                    de:54:66:f9:8e:31:16:65:e8:58:14:72:66:21:cd:
                    e0:88:ac:af:bc:43:b3:d4:ee:d0:8f:2f:6d:26:97:
                    40:e9:bf:40:ca:d1:b4:3c:7b:ea:9c:07:b5:8d:5b:
                    75:9b:f2:a4:0e:d7:2a:ba:29:43:e1:d5:45:c8:d6:
                    fe:47:45:e2:09:4c:8c:c0:e7:bc:90:9e:e0:f6:29:
                    bc:f4:fb:72:32:33:43:65:04:a7:b7:fe:4d:78:bb:
                    8a:c7:55:78:1a:6b:9e:f3:80:0f:f6:7c:04:e0:3a:
                    e0:1e:9d:6d:27:55:ab:e2:46:f7:e7:ef:9a:0b:41:
                    2c:a7:e3:76:4d:27:d1:25:69:3c:c0:ae:55:9f:06:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4D:C9:5A:DE:86:64:E8:A0:EA:EC:16:76:79:BB:94:0F:F6:75:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fbb3b77d-7c38-3cfa-9ba0-c231a75eb223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:ec:68:8c:c7:82:1b:8c:e0:9a:46:78:9f:bc:dc:16:8b:
         d3:39:15:16:0d:5b:a9:1e:47:21:8b:a7:2a:7b:fc:f1:a2:98:
         9d:c3:73:c2:19:ec:06:30:a3:08:79:e0:0f:e7:19:9b:20:75:
         9e:73:33:5f:18:3d:e9:8a:26:cd:f7:4d:70:d0:e1:03:80:14:
         e6:b6:45:fe:1a:e2:b0:05:ca:23:6a:e5:78:a7:41:eb:9e:68:
         3c:67:a0:49:b9:4a:a1:1c:e5:01:79:e7:58:7b:5c:b2:a8:b3:
         35:2f:6b:43:f0:92:f4:36:29:ca:1e:2f:e1:8d:23:d2:8d:eb:
         5d:22:dd:41:46:3b:f2:52:4c:29:55:63:3f:1b:18:48:14:04:
         4d:c0:89:a2:b9:58:5b:ce:1d:11:e1:d5:1b:a9:66:98:1f:87:
         49:29:a5:c0:01:6e:f7:fb:ba:ca:8c:98:57:c8:c3:4a:f1:fa:
         e7:dc:c9:77:48:59:69:60:dd:0c:fe:ce:c7:da:54:45:98:fb:
         1d:8d:04:9f:f4:a9:35:a1:54:11:9f:01:2b:f0:28:28:39:0a:
         55:75:26:f3:e0:04:ca:07:45:16:be:66:77:85:7e:54:25:fe:
         c0:7f:ec:d8:26:35:12:3a:44:2c:5f:b2:9b:22:a5:cc:dd:6c:
         89:01:51:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+BSD4T02OxvhnNcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNTAxMDAxMloXDTI3MDExMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZGI0NDgxNTQtNTAzZC00NTYyLTgwMmEtZGQ3N2I3YmIwMmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qg1teznEwFUCmozDT5GlYgDl9idvMWe1jDf
8eSOXe1Rzxsr3dN4UQ+vjPqUWAcN0yM9tsLgPujxTCFDPo6hS/kdD/3X2+mygNF2
lq7gVkcjntfjFpE4ARUIqGav4FFcLXECbDJ2fUP0UQlvLRb/hDBD6cY0FvzeVGb5
jjEWZehYFHJmIc3giKyvvEOz1O7Qjy9tJpdA6b9AytG0PHvqnAe1jVt1m/KkDtcq
uilD4dVFyNb+R0XiCUyMwOe8kJ7g9im89PtyMjNDZQSnt/5NeLuKx1V4Gmue84AP
9nwE4DrgHp1tJ1Wr4kb35++aC0Esp+N2TSfRJWk8wK5VnwbKWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP1NyVrehmTooOrsFnZ5u5QP9nVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmJiM2I3N2QtN2MzOC0z
Y2ZhLTliYTAtYzIzMWE3NWViMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDP7GiMx4IbjOCaRnifvNwWi9M5FRYNW6keRyGLpyp7/PGimJ3D
c8IZ7AYwowh54A/nGZsgdZ5zM18YPemKJs33TXDQ4QOAFOa2Rf4a4rAFyiNq5Xin
QeueaDxnoEm5SqEc5QF551h7XLKoszUva0PwkvQ2KcoeL+GNI9KN610i3UFGO/JS
TClVYz8bGEgUBE3AiaK5WFvOHRHh1RupZpgfh0kppcABbvf7usqMmFfIw0rx+ufc
yXdIWWlg3Qz+zsfaVEWY+x2NBJ/0qTWhVBGfASvwKCg5ClV1JvPgBMoHRRa+ZneF
flQl/sB/7NgmNRI6RCxfspsipczdbIkBURs=
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:42:00 2026 by rpki-client