Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd1f7986-7600-3402-ba01-f13876af099a.roa
File:                     fd1f7986-7600-3402-ba01-f13876af099a.roa (raw, json)
Hash identifier:          jFurIabwnxt2zvB3QOXUAyCiQqKihLJIT2OtUX8Ds2A=
Subject key identifier:   A4:B8:06:77:3B:5F:32:BD:D0:50:2C:12:B9:05:51:88:47:E9:F5:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE5D0C726EC0F0159EEC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd1f7986-7600-3402-ba01-f13876af099a.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     211826
IP address blocks:        2001:470:26e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e5:d0:c7:26:ec:0f:01:59:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=701f8efe-dbbc-4d4e-bb72-7b0a58505a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:a6:ee:ea:2d:bf:68:9a:97:4d:36:3d:43:
                    c7:c5:3c:cc:c8:7f:f5:09:f1:e6:d8:f8:cb:c7:d2:
                    bd:73:6b:98:da:f5:47:4a:b1:c9:36:e0:fc:ff:71:
                    72:c1:f9:77:00:90:7a:ad:54:fd:ed:9c:d0:8a:2d:
                    d2:c1:57:25:7e:c0:7e:45:d4:f4:de:c8:64:d2:80:
                    1e:0f:0e:5f:61:3f:65:99:ee:43:4b:73:0e:2f:ec:
                    f2:89:89:68:c9:2f:95:b0:54:31:2b:e9:1f:d0:1b:
                    b8:59:6b:62:00:84:93:26:d1:e1:a8:6c:2d:35:21:
                    c7:b6:f6:a6:18:75:dc:db:f8:b1:f8:f4:c3:b6:3b:
                    b5:ec:26:7b:36:b3:9d:a7:04:8b:b7:fb:47:d8:f7:
                    b7:12:d0:b7:fd:7b:09:a7:1a:a7:c1:b0:62:f9:85:
                    ea:89:aa:90:d2:db:15:9c:a7:6b:aa:c4:4c:b5:7d:
                    e7:10:01:68:11:0f:e4:87:26:e8:84:45:32:a7:c8:
                    23:5c:6e:a1:0f:96:5f:7a:96:42:cf:c3:b6:c4:15:
                    fd:2a:82:80:ac:2b:40:8e:d4:df:26:28:82:d7:75:
                    f5:03:e6:c0:4d:10:b0:d8:6b:b6:bc:b0:35:cd:1e:
                    6a:fb:60:10:85:e8:4c:9d:b6:e0:ca:fb:91:43:e6:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B8:06:77:3B:5F:32:BD:D0:50:2C:12:B9:05:51:88:47:E9:F5:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fd1f7986-7600-3402-ba01-f13876af099a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:4c:25:a4:d2:d1:10:0f:2b:b8:1d:04:df:19:00:aa:0d:
         d5:5c:d3:6a:b2:e6:60:38:37:03:3c:d8:b1:46:5e:7a:80:b0:
         de:b2:0f:78:fd:60:a2:d3:c7:4e:10:54:37:dc:18:3d:cd:0c:
         bd:4f:de:b0:86:da:4a:29:67:cd:a5:0a:d3:41:1f:4b:84:b4:
         a7:d3:75:35:e0:60:28:3f:fb:8a:15:5a:82:57:85:07:bd:52:
         11:c2:7a:b0:db:91:45:29:81:15:f1:ea:af:d8:3c:ae:8f:34:
         e4:1b:6b:52:66:d7:03:7b:56:e1:b7:6b:4d:74:af:f0:0a:9d:
         c0:c6:50:19:62:f6:43:69:2e:69:c4:be:64:e7:54:05:f8:f6:
         31:bb:cb:15:0c:4f:ac:96:28:4f:f5:b1:6a:43:35:7d:82:ca:
         2f:f0:c8:d8:f9:fa:5f:50:d6:5d:11:8f:78:1f:b5:5f:c8:61:
         7c:69:9d:f0:47:33:0f:da:11:f3:46:4b:f8:ee:ec:69:70:13:
         46:63:38:9b:92:c3:6c:44:59:a4:f9:0a:8c:9f:c3:97:d8:bf:
         ba:d0:99:56:70:56:2e:e4:2f:9d:a3:d1:20:f2:87:bf:a7:de:
         45:3c:26:19:2e:c2:a9:2e:e8:ef:80:64:ac:87:48:05:37:b2:
         69:2e:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:04:46 2026 by rpki-client