Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99f9528-f9ec-3f69-be9b-17e5e01b2e35.roa
File:                     b99f9528-f9ec-3f69-be9b-17e5e01b2e35.roa (raw, json)
Hash identifier:          S3hMJlaRCqQZxwMx1Ro+NXCFSruQJJ3bMdUcUItULNU=
Subject key identifier:   71:66:54:D6:48:E2:54:20:9B:04:B8:43:9A:D5:D5:24:A9:DB:99:18
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7FFA35E84C4AE6540CC6FB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99f9528-f9ec-3f69-be9b-17e5e01b2e35.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     327697
IP address blocks:        2001:470:2a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:35:e8:4c:4a:e6:54:0c:c6:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=f635b540-b716-4db2-97aa-5e19a2342163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:43:e2:54:03:ea:9c:66:fd:76:40:33:0c:
                    61:c8:f4:4e:4a:4f:6e:0d:3e:ef:b7:3a:37:2f:76:
                    f3:7c:4c:c3:2a:03:28:65:70:19:28:37:68:11:23:
                    ba:51:c0:2f:eb:2e:72:2c:d9:ae:81:d8:16:ef:1d:
                    b3:65:3e:7a:2f:02:20:a9:15:09:cb:c3:79:93:5c:
                    71:83:2d:fd:c8:89:b1:cb:2a:66:e1:79:9e:6c:59:
                    3d:f5:2a:cd:b3:85:01:3f:7e:5e:37:52:8b:e6:6f:
                    56:54:8f:3a:a7:1c:6b:8d:74:f7:06:14:af:11:9c:
                    89:6f:c4:98:af:c8:a0:dc:a3:e0:cd:94:c1:8d:19:
                    e1:2b:10:b3:03:ba:39:d1:f4:78:95:a3:ff:af:67:
                    b6:84:f7:c2:e8:6f:a4:5b:a2:94:0f:c0:52:52:9b:
                    57:5f:4e:eb:a4:1c:d0:99:52:b7:e3:89:cd:db:30:
                    ee:01:ab:59:19:f1:69:96:f3:fc:18:65:2c:46:c6:
                    73:82:99:f4:0a:a7:a3:56:ec:bb:77:07:fe:4d:64:
                    fa:92:24:46:d1:44:52:08:a3:b5:64:bd:5b:98:87:
                    e1:cb:6c:94:37:b2:81:c9:63:55:e5:98:0d:8f:18:
                    99:8e:6f:92:ad:85:b6:2e:38:e6:45:6c:db:a7:46:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:54:D6:48:E2:54:20:9B:04:B8:43:9A:D5:D5:24:A9:DB:99:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99f9528-f9ec-3f69-be9b-17e5e01b2e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:db:f7:e2:a8:f2:52:39:a7:69:3d:c5:fe:26:7a:64:7d:36:
         3e:26:54:45:ed:2e:7b:30:4b:b1:5b:10:66:41:75:95:99:a7:
         bc:87:5d:67:5e:0c:8e:8c:5d:5d:34:d9:89:53:28:5a:a9:b5:
         2f:c4:58:4b:48:48:26:5c:6e:98:da:bb:ba:0d:15:d6:37:c4:
         1e:47:41:92:52:b9:51:d5:6f:d2:46:86:5e:16:4e:25:a7:1d:
         35:5b:2c:44:67:09:d0:3c:48:c3:ed:46:c4:d1:14:31:1a:a7:
         62:29:09:a9:3b:75:5a:84:57:d3:e4:79:ea:bd:40:84:a0:1c:
         09:05:58:6a:4c:c4:eb:8c:90:51:69:03:b8:32:d1:41:98:46:
         16:2d:9b:d4:ef:e8:74:1a:79:55:d4:02:49:bd:e0:25:94:69:
         d7:ab:f9:a5:b4:7f:ed:22:b3:6f:f2:64:36:8d:9a:c9:a0:34:
         56:a1:55:9c:1f:7a:77:91:0d:9f:b0:d1:13:ae:76:96:5f:2f:
         1b:0e:b8:e9:24:f1:d4:af:8c:ba:9b:3b:a1:4c:1e:4a:c5:3a:
         3d:9b:c8:d1:e0:de:5a:b1:c0:c3:d3:3f:12:ee:62:10:83:95:
         97:97:8c:65:96:02:3e:79:eb:6b:a5:9d:32:95:c7:18:48:7a:
         1a:f4:67:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:23 2026 by rpki-client