Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b577ef89-8820-38a4-9df4-742a6efee474.roa
File:                     b577ef89-8820-38a4-9df4-742a6efee474.roa (raw, json)
Hash identifier:          WEQwltH8OPVQJ/BGO/kqcgKjqS6wWfmyz1ZBYiquEoI=
Subject key identifier:   E1:8C:C6:6F:A9:98:48:7A:9C:C6:29:01:4A:15:C2:81:54:F1:03:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3B948BF5B9405E085EB10E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b577ef89-8820-38a4-9df4-742a6efee474.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     40933
IP address blocks:        2001:470:3f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:8b:f5:b9:40:5e:08:5e:b1:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=384b752b-2b1a-491f-be7b-b456ecfc1a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:64:c1:66:e9:41:69:4a:1b:bd:9e:42:a5:
                    e5:72:80:05:0a:0e:f7:4b:5b:1b:0e:83:2c:49:f3:
                    5f:e4:f7:51:42:f3:3a:5e:13:14:41:6a:74:6b:ec:
                    ff:4d:8f:f6:17:45:9a:58:5c:99:e2:d2:3d:54:d1:
                    dc:19:51:37:a3:0a:18:f9:89:28:1a:82:a7:76:49:
                    30:50:f8:c7:f0:f0:5e:06:8d:30:ec:ef:08:55:d6:
                    3e:b9:dc:da:34:46:78:6c:e0:8b:bc:a6:9c:f0:78:
                    ba:0f:21:eb:55:89:84:2b:f7:e7:ff:f3:f3:30:07:
                    2b:85:6f:bc:21:cf:f5:72:09:a0:31:ec:f1:7d:95:
                    27:e2:73:0c:6f:f1:36:3c:7c:44:1c:da:a4:6a:7e:
                    7a:95:bd:0b:ca:f0:c0:7b:4e:88:da:b0:78:14:d8:
                    03:96:ae:99:bf:8f:0f:82:84:3d:25:8a:3b:03:c9:
                    c8:4a:1f:63:97:89:56:ef:1e:0b:fd:e7:74:0c:49:
                    8e:a1:7d:45:59:5b:18:ab:8d:d4:44:e6:b7:ad:11:
                    f7:c1:28:79:de:35:c0:2a:5c:e5:69:10:35:89:ae:
                    4b:7a:cd:1d:4a:2b:5f:5b:41:a1:f2:eb:10:68:fd:
                    8f:2a:c4:63:b8:ea:66:34:ad:7d:2b:d0:1e:c6:0f:
                    f6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:C6:6F:A9:98:48:7A:9C:C6:29:01:4A:15:C2:81:54:F1:03:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b577ef89-8820-38a4-9df4-742a6efee474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:3c:2a:35:9d:02:aa:64:4f:5e:c8:a0:a6:a0:75:79:04:
         5b:a3:1e:f2:f6:db:fb:7b:ef:9b:e6:be:25:40:db:f6:b5:de:
         94:f1:cc:e5:b0:bc:a8:45:63:44:b9:c3:79:ae:b7:d2:9e:7f:
         b4:89:8b:28:a8:d6:21:aa:6b:a2:a0:5a:5a:ac:be:fa:38:07:
         3f:a4:cf:2c:47:a7:b5:fd:a6:60:0e:ab:e5:fe:7d:ea:0f:f4:
         7e:f1:31:57:0c:1c:07:ff:3e:4a:d3:f0:dc:7a:5b:1b:57:57:
         02:7b:7a:ca:f4:f2:a8:20:5d:77:54:bc:99:ad:28:0a:57:11:
         a3:4e:78:1e:a8:9e:0d:0e:f9:73:aa:b7:bc:cd:33:39:55:9e:
         79:b5:84:5b:78:fb:e6:70:d7:71:12:c7:48:4e:26:2f:12:94:
         08:97:ee:4e:ff:b7:d7:04:dd:ec:4d:fa:60:7d:d2:fe:c2:4a:
         76:44:66:e7:7d:32:d5:fd:c4:1b:1c:af:42:0f:65:e3:60:4c:
         79:66:ea:54:79:83:0d:53:58:3c:51:43:43:88:d2:be:5a:aa:
         6e:56:c9:4c:2d:ee:17:a0:10:fd:ab:68:c0:c3:4a:37:b9:de:
         d9:5c:a5:d3:06:e3:af:33:17:19:62:a4:63:19:cf:ff:69:32:
         ae:a9:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:10 2026 by rpki-client