Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa
File:                     340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa (raw, json)
Hash identifier:          jhgImm6FGtvnMAQt0583x4XKyrUlA0HuuUZXjjfFhw8=
Subject key identifier:   B8:4D:E9:83:22:32:70:BC:83:48:68:4F:D4:3D:52:E5:2A:A7:07:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F4586C1DF304806C74E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     21589
IP address blocks:        2001:470:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:45:86:c1:df:30:48:06:c7:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=3e812e58-e528-4267-b1d1-26da307d1fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:92:9b:e6:24:94:09:b6:53:3a:87:90:5d:
                    5d:ec:7f:43:b6:1f:f6:fe:5e:c3:86:ef:2a:3d:da:
                    19:d2:c8:1e:44:61:94:7d:d1:eb:b8:88:4c:ec:87:
                    00:a7:56:57:19:3f:9b:04:09:a3:cc:24:45:ee:f3:
                    30:b0:22:8d:0f:02:db:d6:17:84:32:84:1b:4b:7c:
                    a6:44:3e:9e:85:d8:92:0d:6b:1e:c1:ef:79:89:43:
                    af:e3:c0:9c:71:19:c9:fc:51:57:90:c1:ad:9a:89:
                    cc:12:43:da:33:a2:37:3c:18:93:8d:0d:33:d8:88:
                    04:f3:ea:6f:e8:78:45:1c:5f:c6:3d:01:5c:8d:1b:
                    a3:0c:ca:84:63:fc:bf:73:da:3d:16:30:80:a6:0b:
                    ae:91:b3:32:d4:9d:3a:b8:ce:72:11:30:08:6f:8e:
                    21:b7:4e:e3:25:b8:6b:3b:64:f7:3a:3d:0a:42:2c:
                    ba:aa:d4:1b:a7:6b:f8:85:1b:82:87:94:38:06:3d:
                    8d:c1:65:fb:ed:d9:cb:d5:02:eb:7b:18:7b:59:76:
                    c0:91:30:1b:f2:8f:2a:d5:47:73:f5:b1:f3:68:7e:
                    34:8c:35:6a:9b:46:cf:81:0f:ed:00:d9:7e:69:71:
                    16:4c:7f:b8:ee:c1:fa:29:f6:75:4b:a9:63:18:93:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:E9:83:22:32:70:BC:83:48:68:4F:D4:3D:52:E5:2A:A7:07:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/340bb89b-bff7-33c5-9516-1f6aefbb7b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:44:c6:3f:b5:1a:c7:31:38:ed:7c:10:56:6e:89:68:8f:a7:
         b0:a4:1c:98:31:88:1b:57:22:7f:3b:5c:c2:56:e0:0f:6e:ca:
         2b:1b:cf:24:ff:03:0a:bc:87:bb:cf:b1:b3:27:08:52:11:0b:
         3c:8a:a2:77:b6:f7:62:cd:69:5f:0e:80:ca:5e:cc:1e:93:8d:
         2f:15:a9:40:10:64:3e:c4:10:63:a8:b6:57:75:a7:b7:d5:b6:
         c6:68:12:fe:57:88:75:a7:21:0b:78:18:b9:4e:94:8a:18:81:
         62:90:de:aa:0f:52:3a:88:2b:33:b3:88:5e:b7:7a:2a:71:84:
         49:58:e8:cc:88:f5:53:30:24:05:42:b1:44:73:51:23:6a:af:
         ec:d8:33:c8:f7:34:db:bd:28:ab:4e:2b:6c:45:8b:d0:73:fb:
         41:81:59:00:2d:1c:e5:22:cd:0c:5d:ec:fd:4c:a1:4f:bb:ff:
         48:54:7e:8f:54:94:1e:27:a2:46:24:b7:83:7e:cf:99:35:d4:
         0c:2e:ea:c2:09:64:43:4b:8c:ca:29:db:88:92:f0:81:81:4f:
         e1:e0:7c:ac:c7:e8:d0:14:5b:ea:45:87:1d:5e:f3:68:94:cf:
         95:bb:70:61:ff:45:29:a1:4a:dd:59:01:ab:ee:e1:18:e1:1b:
         ce:75:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:19 2026 by rpki-client