Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa
File:                     d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa (raw, json)
Hash identifier:          enlWfOto76Hafgf6WakhpesoWsUsigCZ2xdIyhbPTGE=
Subject key identifier:   6E:07:9F:9D:D6:FE:4F:ED:EA:1F:9D:6E:D8:B4:92:0A:7B:E1:37:1B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E561A0A5C55FC88371038E400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     394740
IP address blocks:        2001:470:391::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:0a:5c:55:fc:88:37:10:38:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=1c7adb29-d0b4-487e-8d7e-2a6e22e154c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bc:4d:e1:56:4d:ac:f5:6d:2a:ff:7a:34:82:
                    3f:43:fd:0c:86:d5:b6:29:df:2e:16:df:d2:f5:e8:
                    0d:64:14:e9:a8:3e:a6:f0:19:30:d0:78:75:c7:ec:
                    cf:b1:d4:73:75:fd:9e:40:df:bf:4a:27:38:1c:dc:
                    f0:d4:a5:37:cb:12:8d:23:50:4b:42:b6:e5:14:f1:
                    ad:b9:77:3e:0c:23:58:6d:4b:6a:06:95:cb:7b:5d:
                    28:df:4e:bd:19:f2:c4:32:c5:23:bb:6f:43:cb:ea:
                    ab:de:7e:4c:a8:ba:8e:f6:26:60:8a:59:cf:44:09:
                    e7:a2:e6:7f:db:09:38:1e:36:d4:12:28:a1:0b:d6:
                    1e:f2:25:2d:5d:a6:5a:74:8c:e0:2a:cb:0a:5a:9b:
                    35:78:4a:38:00:09:99:66:57:5a:8e:de:d1:26:ce:
                    5f:2f:5a:ae:ba:90:83:55:d6:d8:33:02:4c:59:47:
                    97:f1:4a:2e:dc:70:c3:99:9b:e6:e2:d4:3e:e7:25:
                    b8:a6:16:e1:da:5b:55:44:cf:2c:39:ec:68:27:a7:
                    6b:68:6c:69:83:40:f9:25:b8:3f:f7:de:d1:c1:5c:
                    5f:b9:a0:74:47:e3:c2:ee:51:79:b1:5f:11:c7:51:
                    8d:e7:51:53:5a:f6:62:a4:1b:e9:62:3a:fb:67:f7:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:07:9F:9D:D6:FE:4F:ED:EA:1F:9D:6E:D8:B4:92:0A:7B:E1:37:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d64a49f8-1f6b-37da-b9d1-fde4e7f8013c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:1d:9b:9d:64:a4:e2:ac:da:f3:34:a6:05:65:53:3f:6f:
         fc:62:83:2a:b9:58:a8:10:89:9d:f4:f5:22:f3:75:29:09:50:
         fa:f1:41:fe:dd:3c:f9:fc:d1:90:af:f5:54:aa:87:a8:fe:b9:
         12:70:d8:95:c0:c1:c8:27:74:9b:02:34:12:e5:db:df:ce:ae:
         b0:e0:b8:71:eb:4b:3b:53:37:2c:64:8d:07:53:8f:32:0a:35:
         3b:77:5c:26:77:46:e6:47:ca:f9:5d:ab:fc:d5:f1:a8:03:f0:
         39:c9:f6:b0:0d:6c:7d:a7:2f:aa:89:37:91:14:fb:68:03:8c:
         87:2d:ce:b0:cf:91:fc:22:88:94:12:98:e0:80:92:cb:dd:9e:
         22:34:ee:f5:c2:97:fa:bf:e8:76:a5:cc:e8:43:af:4d:9f:16:
         a8:fc:e9:83:74:97:69:d8:7c:6e:d8:33:e4:4d:19:e2:e9:ed:
         7d:1c:9c:22:c4:60:b6:00:93:09:7d:aa:a9:cb:fe:84:f1:ad:
         77:5c:7d:89:b2:a9:e5:3f:ec:7b:24:17:d8:e4:0b:57:00:cd:
         06:14:9c:ec:ac:8a:17:1e:48:7e:1c:67:91:94:9f:4e:20:ad:
         ea:b6:52:68:b8:70:73:29:e4:e3:f6:91:35:da:fd:34:6e:a5:
         3a:8f:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:38 2026 by rpki-client