Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa
File:                     02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa (raw, json)
Hash identifier:          0m3x/8khVJb7Eh35IbEm4wSL9Q/G4LJG4p6TRt0/km4=
Subject key identifier:   CA:B4:06:60:3E:F7:4A:59:42:16:98:39:C1:E7:FB:BC:42:BB:BF:6A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204C212FDB41012415CE600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     206186
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c2:12:fd:b4:10:12:41:5c:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=711bb2fd-e743-4a13-b050-57afb6494311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:02:76:91:11:e2:73:7d:e6:e7:47:6d:68:
                    ee:95:3c:54:28:10:17:3c:5f:09:e7:9c:81:9c:56:
                    ef:c6:43:25:a5:5c:6e:48:5d:94:4e:a5:c6:f9:5d:
                    d4:c6:2c:dd:4a:ce:fe:e2:39:68:69:7b:7d:95:c5:
                    cb:eb:13:fc:44:7c:94:fe:8c:e2:44:f6:9e:c0:b8:
                    4c:0a:06:57:fd:05:40:e8:54:fd:34:e5:4a:fb:5d:
                    db:37:a6:40:6a:e4:f6:9b:46:62:dc:8a:85:d2:aa:
                    b3:67:47:0f:d9:58:5c:0b:44:45:68:99:eb:e6:5e:
                    8d:54:c7:94:f3:f8:de:26:e0:bf:51:aa:d1:e1:cb:
                    d4:d4:15:fb:0f:bb:b5:e9:c2:19:b2:e5:49:5f:eb:
                    67:d0:4f:e7:1c:7e:87:5b:35:ec:3d:0f:86:97:77:
                    14:4d:d6:c3:cc:c5:e5:d8:9f:0f:4a:22:a0:9f:1d:
                    65:39:30:d6:99:f6:dd:c3:3a:4b:18:33:68:27:57:
                    6b:5f:a2:9f:bb:db:bf:c5:7f:98:1e:76:31:b2:ff:
                    53:27:03:a2:e4:53:a7:fb:60:37:54:c3:79:76:dc:
                    b5:95:27:65:1f:70:06:93:6b:b4:6e:e9:36:4c:19:
                    93:70:cb:ff:77:55:22:b1:a3:17:c7:82:e4:02:3c:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B4:06:60:3E:F7:4A:59:42:16:98:39:C1:E7:FB:BC:42:BB:BF:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02fa560f-a2ed-3b6f-a5a7-67d8b8e5c098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:b3:63:39:42:e6:85:ab:79:8c:9f:2e:18:91:ee:97:70:15:
         9e:8a:54:7c:5e:08:61:c3:50:f6:6d:13:8e:ff:48:c5:54:29:
         1b:76:0c:c6:f6:27:e2:d8:39:36:70:03:98:ed:97:b5:40:7b:
         c7:70:3a:fd:09:39:ba:5e:39:b4:ab:4c:c8:35:90:fa:97:0c:
         08:81:08:0a:44:98:e1:96:37:85:c3:c8:05:f9:3b:4e:0e:1c:
         30:53:c4:3b:94:de:06:40:d0:82:34:71:3b:a7:6a:7d:bf:08:
         16:fb:08:8f:41:62:9f:b3:e5:84:0b:7b:6d:8a:86:0d:0f:43:
         75:04:ad:70:8b:5c:df:4d:8e:ad:55:e7:db:78:ba:6b:1e:92:
         6f:1b:ee:e8:64:a2:9a:12:95:40:bc:5a:e2:0c:b1:ba:ee:e9:
         0c:c2:17:1d:90:24:7c:15:26:da:f0:17:7a:8e:93:ff:6d:48:
         74:dd:b6:fb:fb:49:3f:50:88:a1:b6:2a:55:91:ff:9c:67:82:
         87:90:3c:d2:3c:05:82:5d:ae:c9:cf:5a:b7:b2:4c:1e:e5:b3:
         3c:85:29:80:98:85:1c:fa:ad:1a:5e:2b:d3:0f:b4:c4:49:3e:
         b1:45:c9:0e:c8:ca:16:1e:2c:f6:20:84:51:83:b8:67:b6:2c:
         1c:72:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:00 2026 by rpki-client