Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa
File:                     82ce25f3-897a-34cf-a89d-61072f96bae7.roa (raw, json)
Hash identifier:          qp/SOmV3NQVIPlxGa6C1OIwfOaEstxhQSK78TUDym8o=
Subject key identifier:   94:6E:1E:2E:F7:B2:B3:54:53:E4:C0:F9:93:34:C0:5B:96:50:64:C8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3764839B9A93B242F248EF40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     395517
IP address blocks:        2001:470:15a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:83:9b:9a:93:b2:42:f2:48:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=5970615d-dd1b-43ba-94bc-67233b386e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:df:79:ad:5f:b6:51:a2:b3:40:5f:6a:97:
                    6b:7f:9a:d4:05:7b:3c:3e:72:19:a7:76:b7:7f:8e:
                    99:ac:7c:f7:6d:50:02:11:80:29:28:08:ad:6b:c9:
                    85:fc:7c:6f:0f:0c:7b:05:9c:f3:f7:51:9a:2f:c0:
                    6f:e2:7c:a7:7b:5b:22:ff:f4:37:b9:ed:e5:d4:10:
                    c2:07:56:b6:1c:d4:42:06:4f:04:15:0f:db:5b:05:
                    47:23:39:ac:c4:5a:b1:2a:5d:19:08:49:93:58:3e:
                    1c:d8:42:c6:74:91:d9:89:b4:a6:67:df:44:7b:44:
                    f8:ff:36:2f:e6:1f:8d:23:b1:c2:da:63:23:8a:13:
                    19:91:7e:49:88:1f:8a:ae:cc:0a:3b:0c:82:87:a2:
                    e5:23:57:27:a2:f4:4d:37:db:b8:cc:3f:cb:60:2b:
                    ee:99:9b:60:1c:b0:c7:a5:e4:bd:e4:11:1c:d6:dd:
                    92:a7:ec:0d:20:e6:be:9c:93:0d:f7:6c:be:e8:c3:
                    99:e5:17:ed:35:15:33:ce:6a:fb:43:e3:92:2c:1b:
                    cc:15:68:46:42:f0:4d:21:ab:8b:9c:b4:f0:bf:e9:
                    d0:6a:b8:98:b8:e8:55:85:21:51:5d:dd:0a:42:03:
                    69:c2:c3:74:c9:69:dd:b1:13:56:fb:b3:a2:98:92:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6E:1E:2E:F7:B2:B3:54:53:E4:C0:F9:93:34:C0:5B:96:50:64:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82ce25f3-897a-34cf-a89d-61072f96bae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:2f:36:17:77:8e:fa:a6:98:fc:e0:3f:cd:76:f8:9c:17:
         67:a4:fe:b6:34:49:fe:cf:1d:88:7a:21:5b:36:f2:af:32:a6:
         f7:64:0a:12:17:64:81:87:e5:9d:f2:dc:25:1f:86:4f:75:db:
         2c:49:e4:61:e7:18:db:c3:30:d8:08:c5:80:62:c2:a3:66:bc:
         32:d2:07:b3:6d:78:75:dd:28:84:21:e9:a6:01:23:d0:1c:e7:
         1d:11:15:0d:79:2d:b3:05:d2:bb:eb:0f:1d:57:49:18:be:5f:
         27:a2:c5:3f:9e:ab:ee:37:81:ed:20:21:45:ee:69:10:57:4d:
         19:b1:ed:37:7e:df:f0:6a:00:47:df:67:5a:26:e7:18:c5:3a:
         83:a4:30:e9:73:df:17:9a:4c:93:7b:71:f2:c9:99:09:b6:06:
         9b:0a:66:93:e8:42:c4:d6:32:80:f5:5d:a3:37:74:2b:a0:ad:
         c6:dd:1b:de:80:b4:57:4e:41:e4:d4:2c:f7:b7:83:38:8c:68:
         8e:de:c9:1e:35:4c:ad:0f:a9:29:ba:29:b1:56:b1:b2:07:70:
         27:57:3f:e4:d8:c0:20:3b:f2:2d:aa:1b:45:04:7b:a1:2a:d6:
         a2:cf:b6:74:5b:66:09:19:fb:62:29:1e:ff:33:45:0e:51:3d:
         6c:0b:3a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:38:54 2026 by rpki-client