Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa
File:                     d3c63619-0663-302b-a5d0-9538d77b81f1.roa (raw, json)
Hash identifier:          f1wZnttWcEIWBU2h1fJtplxu4YCERQnlDh6SKMIynR0=
Subject key identifier:   A5:63:5B:FC:56:FC:A9:A2:E7:CF:BB:A3:AA:5D:F8:5E:59:41:97:78
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E5E7A033A1DAAC4CAE0A76D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     21488
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:03:3a:1d:aa:c4:ca:e0:a7:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=7df58ceb-03eb-4785-b8f6-d8c55576ed95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:eb:65:7d:eb:e4:93:bc:9b:ec:25:0c:40:
                    3e:a6:0a:10:15:ec:fc:0a:c6:2f:ae:40:f8:5a:f1:
                    93:22:55:07:15:30:59:25:2c:97:ed:62:a7:81:b3:
                    22:5a:36:c3:7b:89:bb:ac:18:a7:06:58:0d:8e:2c:
                    ef:81:8c:7c:ac:d5:cb:99:7f:4b:2d:84:ac:16:ef:
                    62:a4:37:77:3a:47:31:f3:51:e5:ca:96:3e:ed:14:
                    34:13:30:28:4c:a4:cc:bc:8e:da:c6:b9:f4:2e:23:
                    f3:dc:f7:95:cd:1b:4d:80:87:ee:85:c5:ee:c6:06:
                    83:53:b1:6e:d5:3d:e4:c2:20:db:82:ed:c9:20:26:
                    00:8b:2d:99:eb:71:7c:a7:03:ed:df:e2:02:e7:15:
                    56:e7:43:87:92:34:b3:a8:d7:0f:3f:7d:53:95:e5:
                    e7:35:2a:48:26:3e:ac:ca:54:07:dd:e5:ff:ab:ef:
                    b6:52:19:ff:52:a5:c6:c2:38:b4:14:68:47:5e:29:
                    40:b9:04:9e:d2:7f:82:e3:1c:a3:84:ea:12:60:9d:
                    27:8b:53:88:68:15:67:c9:0e:5e:51:fe:64:e6:35:
                    97:f4:6a:1f:47:ce:17:ca:c6:6c:f7:23:e0:7e:41:
                    e6:4b:be:5c:5c:67:28:dd:d9:a4:f7:5f:ec:90:9d:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:63:5B:FC:56:FC:A9:A2:E7:CF:BB:A3:AA:5D:F8:5E:59:41:97:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3c63619-0663-302b-a5d0-9538d77b81f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:3a:2e:9e:90:ca:1e:d7:b8:3f:59:0d:ce:aa:74:1d:e7:
         c3:ca:74:64:8f:97:a3:eb:02:85:9e:65:d4:84:c2:4e:e2:e8:
         35:8c:51:00:d8:d1:81:97:15:36:50:e1:3a:7d:04:fe:2c:97:
         cb:b3:5e:7c:14:21:f0:c3:57:39:84:3a:85:37:79:08:16:04:
         2b:ea:79:be:79:a0:7a:eb:e2:09:38:49:70:d8:c4:6d:bc:7b:
         69:c1:14:9e:12:7d:0f:a9:e8:ab:21:52:7d:66:3d:f8:e2:9f:
         58:8a:6b:9c:dd:12:7c:f3:a8:b6:35:c5:d4:5f:d2:53:b1:75:
         02:ba:c8:f5:cd:8c:59:6d:23:e8:ab:cf:a1:5e:2d:e3:b0:ba:
         69:59:d5:0f:7e:ef:2c:da:93:ec:9b:90:b1:cd:ae:07:1b:2d:
         69:bc:65:fd:fd:39:7e:87:66:a7:4d:5a:b0:50:34:18:45:7e:
         f1:b1:41:dd:ae:74:f6:ab:a1:59:96:73:01:66:06:5c:5f:2f:
         cf:dd:ed:02:ef:74:d1:d7:f5:41:86:9e:3b:df:10:c5:99:1f:
         87:d7:c3:2e:cb:1d:61:e9:79:bd:c1:22:33:ba:b2:8e:ed:57:
         61:8a:a4:f3:9f:1f:9e:65:16:3e:06:13:fe:40:77:6a:7d:37:
         ac:5b:d4:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5eegM6HarEyuCnbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
N2RmNThjZWItMDNlYi00Nzg1LWI4ZjYtZDhjNTU1NzZlZDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/XrZX3r5JO8m+wlDEA+pgoQFez8CsYvrkD4
WvGTIlUHFTBZJSyX7WKngbMiWjbDe4m7rBinBlgNjizvgYx8rNXLmX9LLYSsFu9i
pDd3Okcx81HlypY+7RQ0EzAoTKTMvI7axrn0LiPz3PeVzRtNgIfuhcXuxgaDU7Fu
1T3kwiDbgu3JICYAiy2Z63F8pwPt3+IC5xVW50OHkjSzqNcPP31TleXnNSpIJj6s
ylQH3eX/q++2Uhn/UqXGwji0FGhHXilAuQSe0n+C4xyjhOoSYJ0ni1OIaBVnyQ5e
Uf5k5jWX9GofR84XysZs9yPgfkHmS75cXGco3dmk91/skJ0Q9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKVjW/xW/Kmi58+7o6pd+F5ZQZd4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDNjNjM2MTktMDY2My0z
MDJiLWE1ZDAtOTUzOGQ3N2I4MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJbROi6ekMoe17g/WQ3OqnQd58PKdGSPl6PrAoWeZdSEwk7i6DWM
UQDY0YGXFTZQ4Tp9BP4sl8uzXnwUIfDDVzmEOoU3eQgWBCvqeb55oHrr4gk4SXDY
xG28e2nBFJ4SfQ+p6KshUn1mPfjin1iKa5zdEnzzqLY1xdRf0lOxdQK6yPXNjFlt
I+irz6FeLeOwumlZ1Q9+7yzak+ybkLHNrgcbLWm8Zf39OX6HZqdNWrBQNBhFfvGx
Qd2udParoVmWcwFmBlxfL8/d7QLvdNHX9UGGnjvfEMWZH4fXwy7LHWHpeb3BIjO6
so7tV2GKpPOfH55lFj4GE/5Ad2p9N6xb1FM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:17 2026 by rpki-client