Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d55cde7-782c-3ee4-877e-873e829201e6.roa
File:                     6d55cde7-782c-3ee4-877e-873e829201e6.roa (raw, json)
Hash identifier:          J9n/rT0NVJ1DGoT2ZJh3Cn97RvfrkrGX1qIgpdNQ+hc=
Subject key identifier:   34:15:93:95:61:55:21:FA:56:E9:4A:54:03:FD:2E:2E:15:D5:C3:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F62F7948955F542A18770
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d55cde7-782c-3ee4-877e-873e829201e6.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     40170
IP address blocks:        2001:470:fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:62:f7:94:89:55:f5:42:a1:87:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=61b95873-f247-43a1-be9b-f5b5bd824004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7c:47:79:90:ab:b4:30:7d:52:55:e2:f7:fd:
                    14:8b:dc:77:86:bc:4d:bf:1a:85:d2:f6:64:e1:29:
                    45:f0:28:41:6f:61:9b:14:1d:61:38:01:dc:d7:30:
                    1c:38:f8:17:ed:3a:c4:13:49:44:01:9c:32:b5:f8:
                    7f:da:57:3e:89:52:5f:80:a5:a3:45:c9:57:2e:3e:
                    c5:93:ec:78:42:69:33:12:08:bf:42:04:e0:39:e8:
                    e7:83:db:0a:ab:91:76:77:69:2f:f3:9e:9c:09:35:
                    18:22:f3:24:19:66:95:2c:20:2d:b3:99:2e:85:6c:
                    9d:6d:78:7c:3d:4f:3c:b2:3e:c7:7c:e6:1a:99:39:
                    76:aa:35:9b:46:a7:33:50:17:e8:ef:fb:e4:cb:0a:
                    8e:f0:9d:43:64:e0:01:7c:84:d4:df:b5:9b:34:9b:
                    52:8f:9f:8c:e8:91:63:eb:0d:ce:19:2c:75:b1:cd:
                    39:aa:b7:14:6f:35:80:3f:0e:61:ee:e9:0a:a2:aa:
                    85:6e:8b:c8:7c:a5:cb:01:e0:4a:48:40:76:aa:7f:
                    ab:8b:d5:ab:0a:d6:bc:4b:1b:f5:46:73:d7:5c:60:
                    3a:b1:7c:18:d9:66:22:47:71:3f:47:8a:b4:31:f0:
                    47:66:46:d1:76:e6:0d:3b:6e:88:b3:c8:fc:60:db:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:93:95:61:55:21:FA:56:E9:4A:54:03:FD:2E:2E:15:D5:C3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d55cde7-782c-3ee4-877e-873e829201e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8b:08:dc:d8:09:da:3d:33:75:22:2c:c9:ab:d4:83:29:98:
         66:fd:a0:dd:fa:d5:72:23:3b:3a:bb:07:a5:66:8d:03:c9:4b:
         e2:35:0f:37:94:bb:28:40:e7:1f:2e:25:c1:e4:14:23:03:8b:
         17:68:1f:8e:53:d9:82:6a:b2:69:17:cf:54:d9:48:0a:01:b9:
         d3:a3:68:db:d2:82:a8:eb:cf:39:3d:0c:dd:2d:f0:13:bb:71:
         a3:2d:1c:cb:5e:61:bf:50:e5:68:cb:5e:ee:94:55:05:75:55:
         a3:b6:b6:62:85:41:c8:bf:2f:e9:a2:0f:10:a5:9e:92:a7:40:
         74:ff:0e:e4:b2:fc:9a:dd:c0:cc:4e:21:d5:59:f7:c6:f2:b5:
         6c:aa:50:fd:d8:bc:99:9e:c6:f7:36:08:c9:f3:c8:ad:25:60:
         53:22:5e:20:40:97:6c:d2:9f:25:49:60:49:25:f0:fe:e2:ef:
         03:ee:a5:28:3b:be:ec:a4:41:df:fc:55:54:23:76:6a:32:2b:
         4c:a1:ba:03:62:4a:ff:03:af:54:e2:4c:06:d0:4f:87:ac:c0:
         b0:8f:af:34:7d:bc:7f:7c:36:46:c0:62:2c:7c:86:2e:33:dd:
         5c:a1:ba:1d:f5:5e:e1:84:2d:00:fb:f8:5b:7d:83:6a:11:79:
         27:64:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:12 2026 by rpki-client