Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa
File:                     bf7b163f-eb7d-38a7-804a-f09031da09e1.roa (raw, json)
Hash identifier:          1E0nhkKUxsCyc/6mQKHy5JnIujxf9tJo1LBnKySZEuo=
Subject key identifier:   B0:28:74:87:A3:6F:27:EA:2A:F6:33:87:46:66:71:8F:BD:07:AC:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204C340EEA6F83ED0CC0860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     30860
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c3:40:ee:a6:f8:3e:d0:cc:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=98602240-31b5-4170-8c1c-2d8bd8b4cb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:2f:de:af:4f:35:6d:2b:39:c2:b4:15:fa:
                    0d:8b:6b:0c:bf:82:38:21:cd:89:f9:45:ac:c7:9f:
                    ae:42:96:6b:ea:b3:4d:44:a7:78:ce:a1:d2:a6:7a:
                    d3:ef:a2:64:12:af:19:20:96:2e:3e:8a:5c:b0:eb:
                    d3:d8:38:37:08:9f:51:ec:5d:e7:ad:19:16:c6:49:
                    13:38:4f:37:5b:16:58:70:05:bb:83:73:f5:e4:92:
                    3e:91:6a:c3:06:63:bf:90:78:10:b4:95:26:ab:4a:
                    9e:0e:0f:b3:56:d9:56:91:46:45:5e:87:b5:4b:11:
                    3d:6d:a4:f5:66:87:ad:bb:a4:da:d4:ed:6c:48:b0:
                    00:6a:8b:1e:20:59:55:14:0e:3c:da:73:d4:9d:8c:
                    fe:86:2f:2f:5e:25:e4:70:55:93:da:35:19:fb:96:
                    b0:58:99:c8:cf:36:42:84:4e:07:f8:96:dc:75:e7:
                    8e:ce:a0:3a:e2:c2:1d:aa:f3:cc:14:df:27:bd:08:
                    82:21:91:62:6f:ff:0d:59:23:07:fa:9b:d4:ab:a6:
                    10:e5:41:92:8a:73:63:c2:fa:94:8d:96:ef:70:f1:
                    a1:44:bd:d0:cd:6c:33:ae:a5:82:68:56:4f:10:ab:
                    25:6d:41:e8:69:29:e0:b4:ce:16:5d:36:33:ea:29:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:74:87:A3:6F:27:EA:2A:F6:33:87:46:66:71:8F:BD:07:AC:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf7b163f-eb7d-38a7-804a-f09031da09e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:e2:2d:6a:97:00:24:c1:0d:5b:d8:8e:bf:81:6d:0e:63:
         99:4b:33:7a:79:7c:22:72:11:e9:b0:8e:56:ea:20:2d:75:e3:
         a6:6a:34:f8:44:45:33:aa:04:f2:93:32:aa:0c:e1:0a:56:2b:
         b3:ef:6b:5c:e5:e0:04:d3:81:f5:98:e2:74:7b:4d:b3:5e:2d:
         35:79:23:a2:f3:7c:3f:ce:0a:28:80:ab:2d:5b:ea:f4:e6:a5:
         5f:b4:58:a3:6e:1b:3f:b5:d3:cb:20:43:d8:b0:94:05:35:cc:
         36:f3:0f:28:34:ca:a7:77:d7:1d:70:4c:03:0c:d6:38:e5:63:
         ac:d1:64:c9:62:7c:c2:38:af:3d:b7:e2:7f:d1:26:f2:61:e2:
         98:f7:dc:37:3b:df:1b:8e:e1:11:4e:75:fe:e9:d6:c9:42:14:
         f7:36:9b:12:c1:bd:51:c2:0a:c3:71:75:52:c2:db:88:fb:fb:
         1e:3d:5b:1b:9f:1a:5a:8c:c3:fc:27:38:0c:af:9c:c5:8c:b2:
         71:4e:a3:b8:44:9f:80:ac:a4:ba:25:92:f4:10:ff:a4:70:b8:
         1a:45:92:7b:69:d8:5f:af:c8:ea:9b:93:72:c2:b8:0a:72:78:
         9e:1c:8b:eb:f0:96:a2:06:1b:04:55:dc:17:38:7f:25:76:7f:
         7b:1e:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:35 2026 by rpki-client