Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa
File:                     26e0fa97-271c-3323-a7e2-a35d479057da.roa (raw, json)
Hash identifier:          YUwNNY+n+9/482PMSeXJfuznUUvUp7dxosi2a53ahiI=
Subject key identifier:   44:99:29:40:BC:57:E4:87:1D:FC:66:3C:4F:3A:53:07:65:80:86:BB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B6A61E3D8FC50FE548E2D2200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     206735
IP address blocks:        2001:470:155::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e3:d8:fc:50:fe:54:8e:2d:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=1ec69d6b-6e33-4a8c-9eb1-addf617b98db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:3f:14:6d:f5:4a:72:6e:be:cf:0d:10:85:
                    68:37:10:bf:fc:2d:fa:ec:e8:53:09:fd:09:a4:6c:
                    be:74:25:bb:69:fe:e7:8e:b3:d4:74:66:22:42:f0:
                    e8:c9:71:fa:5f:0f:24:6b:21:5e:57:fb:ea:8f:ce:
                    b3:fc:8d:82:19:0b:d7:19:46:0a:ce:8e:70:ec:4e:
                    d6:d8:be:2e:76:d7:02:fe:c7:65:b4:c0:e6:1c:9c:
                    75:93:b4:2e:08:bf:c8:16:04:6d:f1:9d:be:93:c9:
                    7c:8f:9c:a2:85:8f:3e:0e:f7:02:7d:f8:8c:70:b8:
                    70:b0:17:47:07:08:48:e2:d0:07:ac:b3:18:97:6b:
                    b0:0c:39:21:a1:c4:92:35:de:41:a3:b1:eb:86:73:
                    57:81:d2:2a:c8:79:c3:33:0c:2a:2d:6a:d6:3e:1c:
                    ed:ce:d6:a8:4f:70:ac:42:91:45:26:5f:72:72:dc:
                    36:33:3c:cb:fc:be:ff:31:62:cf:e8:fe:45:0e:6f:
                    70:0c:ee:d7:d8:ae:2f:c7:17:43:be:c1:58:a3:00:
                    04:1d:60:75:bb:37:3a:6c:1b:b9:ab:30:45:0d:3a:
                    55:a6:ac:df:ad:87:5f:96:bd:9f:a7:8b:96:72:c0:
                    89:9e:06:33:a6:3a:29:4e:7b:cc:aa:cb:3c:24:85:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:29:40:BC:57:E4:87:1D:FC:66:3C:4F:3A:53:07:65:80:86:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26e0fa97-271c-3323-a7e2-a35d479057da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:155::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:66:0e:34:30:7a:73:27:79:e8:34:43:b8:04:87:d6:3a:c6:
         6d:52:bd:17:8f:55:75:e2:f2:56:18:c8:90:f7:ce:05:04:d4:
         75:35:51:13:1d:dd:9d:bd:0f:6b:24:e4:c4:f3:d6:c8:a5:82:
         ab:fc:46:86:34:1f:6d:f4:1a:8c:9e:5a:4f:89:49:43:cf:0a:
         b7:fa:08:31:27:a2:0c:54:af:ec:1a:bf:63:f6:61:76:d4:23:
         92:81:ac:06:ca:f7:02:69:81:7e:60:bd:7b:49:92:74:42:c7:
         3b:fc:a9:15:93:bb:27:37:6b:4a:1e:cb:a3:ea:dc:b0:d7:1a:
         16:4f:f4:57:3a:5f:38:1f:2e:25:31:2d:71:cb:03:81:e5:be:
         34:2b:f8:9e:a5:c2:78:78:fb:f6:ba:1a:2c:3d:1a:18:f0:00:
         e6:41:90:60:c6:f9:76:7d:f9:11:5a:10:1e:31:09:e9:5f:fa:
         f9:bd:13:9c:65:d7:21:2c:12:1a:ef:5d:94:54:85:93:2d:4f:
         bf:a3:ce:3e:13:46:bc:c8:38:c4:df:1f:ae:50:94:c2:46:e5:
         85:2e:d8:4e:7b:ee:c0:65:63:06:ae:e4:7c:40:04:20:63:ab:
         2a:ae:de:6c:f5:33:82:51:e0:03:6b:67:38:47:49:a8:89:58:
         eb:0c:35:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:20 2025 by rpki-client