Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa
File:                     9bba28d1-1f66-3411-a1e8-0ea918076404.roa (raw, json)
Hash identifier:          78218tknWoQsvmuNeiL2XjZKxjozdyaKLKZsUOjkKC0=
Subject key identifier:   41:99:FF:A0:B3:96:75:C4:DF:B0:A1:D5:8B:56:58:7C:C1:42:0E:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6BB67C3BD3D3A813D700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     11123
IP address blocks:        2001:470:17e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6b:b6:7c:3b:d3:d3:a8:13:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=e2f860c2-ea24-4adc-b9e9-9a9a2d0db956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:af:64:b4:db:38:8c:c5:58:56:8e:b8:06:
                    1d:9a:99:ff:c1:82:9b:e7:77:ff:3b:fc:ec:72:0f:
                    59:d3:87:24:4a:7b:42:73:ad:dc:24:7e:d6:ae:bb:
                    c0:6f:01:f7:d2:c9:59:20:b1:5f:da:cd:de:a4:63:
                    50:5f:ec:3e:af:53:03:f0:ba:8c:96:2d:5d:9f:1a:
                    7c:5f:80:fc:55:db:fa:9f:0f:11:96:2a:fb:66:86:
                    ba:af:30:3c:d8:82:0f:b6:07:34:7b:e5:ca:4e:54:
                    5f:89:6b:8c:bb:fa:4c:a2:13:db:0a:76:12:96:03:
                    c9:0d:97:89:c7:a2:d7:4e:a1:5d:4c:5f:8e:72:32:
                    ff:2a:be:8a:da:db:d0:d0:15:7d:6a:83:98:0a:b1:
                    ce:12:d1:80:4c:1b:de:a7:28:1f:76:b3:56:e5:fc:
                    9f:99:2c:71:71:a2:5a:bb:4d:cd:8e:49:91:07:7b:
                    c1:17:6f:99:21:1c:21:7f:0d:db:12:20:f9:d5:c5:
                    41:19:64:41:85:8d:9a:61:fe:25:62:2f:2c:d4:a0:
                    da:c8:77:8b:e0:8c:9f:59:bc:75:a9:1f:db:d6:6d:
                    65:7e:b2:8c:1b:1e:d2:cb:c4:6a:16:8c:d7:58:f5:
                    09:05:24:61:16:b0:ab:c6:89:7a:c0:03:c5:15:1a:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:FF:A0:B3:96:75:C4:DF:B0:A1:D5:8B:56:58:7C:C1:42:0E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9bba28d1-1f66-3411-a1e8-0ea918076404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:17e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:10:2f:15:d2:e4:f2:28:39:f9:83:7b:da:31:c4:b4:6c:
         40:2f:8b:41:e6:ae:74:c2:6c:e1:fc:57:33:df:86:10:e3:39:
         ca:da:87:6f:c2:c8:42:ec:26:98:ac:44:7b:b9:fa:ea:4c:fc:
         02:e0:a4:7a:12:4b:28:0a:a8:f0:2e:4e:ea:d4:6d:f5:9b:da:
         84:42:ba:13:b5:ba:07:30:54:8f:95:e1:0d:24:e0:da:a2:c8:
         9a:da:1d:60:b1:56:8a:14:70:c4:93:aa:a6:57:87:0d:90:10:
         f8:59:22:f1:85:9e:c4:fb:50:20:c2:f2:b3:57:5e:ed:5f:2b:
         60:52:98:70:7b:51:eb:52:71:51:d0:dd:4f:37:16:06:e3:6e:
         8d:94:3a:14:8b:b0:7f:ae:31:18:3e:48:70:1c:2f:17:7a:88:
         51:b0:f4:13:7a:71:fe:b2:f5:48:82:9e:56:34:d6:a9:7e:bb:
         d9:61:7e:90:63:32:ff:ee:6a:d1:ea:9f:42:73:68:97:19:d7:
         96:c9:c6:e5:bb:b0:50:7f:6b:23:cf:ea:95:34:10:4f:e9:73:
         82:20:9c:1b:b1:f7:62:45:fc:2a:97:81:66:68:03:8c:8a:77:
         21:e6:2c:25:e4:df:d7:c1:fc:6c:8f:e3:9b:1f:86:62:06:5b:
         48:69:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:22 2026 by rpki-client