Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db243722-8c99-3751-9550-e2b7c4953a65.roa
File:                     db243722-8c99-3751-9550-e2b7c4953a65.roa (raw, json)
Hash identifier:          vOJ7ncd4eah1+B9nSs1q5ke5IIRn/UR9jLomOJ7IcKI=
Subject key identifier:   F5:C5:82:D5:B7:5E:AD:C9:D1:1D:2C:CA:02:3E:88:0A:AB:BD:76:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E90BA4A6AD8AD3A9256DBEC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db243722-8c99-3751-9550-e2b7c4953a65.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     17053
IP address blocks:        2001:470:56c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4a:6a:d8:ad:3a:92:56:db:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=2053601b-8839-4750-9562-ca5c8a33ac84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:6d:d5:3a:92:9f:e7:ce:02:5c:bc:bb:29:
                    d9:5a:35:23:20:77:5d:c0:cd:21:89:96:d5:20:f3:
                    f1:91:98:3e:fe:69:6a:8d:fc:8b:b4:a7:e0:29:c9:
                    3b:a8:70:6c:93:af:5f:c6:32:91:0d:5e:f7:d0:b1:
                    3f:8f:0d:97:f2:ba:2c:04:25:a9:33:bf:4b:31:c5:
                    84:4d:d1:6f:d0:1e:ea:e3:0e:5a:6a:e4:98:65:9a:
                    51:88:6a:15:fa:0e:24:7e:59:64:7a:49:18:9e:f8:
                    63:3d:9d:10:5f:ba:df:d5:93:87:09:6f:8f:18:e1:
                    c6:1b:c1:cc:eb:85:d1:78:5d:fe:3e:51:32:f3:b0:
                    f1:67:c0:23:30:be:45:ec:5d:1a:cb:93:f0:7d:a7:
                    4c:fd:6f:29:4d:52:f9:86:4b:c6:48:5d:b2:77:52:
                    91:79:fa:77:cd:f6:4f:4d:48:29:9d:73:8e:33:49:
                    20:d5:39:63:d1:ef:f9:a1:35:8d:86:74:be:ee:d8:
                    a2:83:c5:07:8b:b7:f5:70:99:a4:65:bb:e6:10:bd:
                    da:0f:04:99:c9:ce:c8:1c:ec:79:f2:f8:64:be:15:
                    df:cd:e5:5c:31:82:27:4d:73:a4:71:f7:fd:a8:a2:
                    0c:38:51:7a:09:98:8e:db:d9:bd:ba:fd:c5:75:0c:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:82:D5:B7:5E:AD:C9:D1:1D:2C:CA:02:3E:88:0A:AB:BD:76:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/db243722-8c99-3751-9550-e2b7c4953a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:56c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:59:2a:d7:07:27:58:ec:5e:18:4f:3e:03:89:75:63:cb:9a:
         ff:cc:61:64:56:90:09:47:76:70:c5:be:a3:21:d7:aa:54:e1:
         17:38:69:ec:9b:40:88:6e:1a:f8:b8:59:4f:6b:b2:f4:18:d5:
         df:d9:f3:ac:ef:af:5c:e8:d6:18:29:5a:1d:d4:22:d8:60:47:
         29:dc:53:4c:2f:94:53:d2:21:29:25:01:2d:14:b1:9b:21:41:
         84:48:21:5b:5c:fe:86:8e:48:77:43:43:a8:5f:f0:fd:af:cd:
         a5:0b:76:bb:74:80:02:d9:70:54:b8:49:f7:0d:c7:7c:d6:16:
         bf:33:b5:8f:5f:2d:f4:b7:4d:f3:86:14:db:19:85:8e:af:6b:
         ed:c1:20:9e:1c:d0:b0:6a:33:ee:2c:26:96:50:f2:cb:94:59:
         b3:05:1a:05:c0:79:76:37:3a:d2:02:94:9f:73:f2:c8:1f:c6:
         82:7a:86:33:31:8c:e1:90:e3:7f:d0:16:0a:3b:b1:6e:4e:da:
         02:17:f0:5a:e2:78:e7:1b:55:8f:1f:25:63:13:04:d7:4f:58:
         b6:54:03:70:9f:d1:c5:68:1b:c1:e0:c8:33:2d:f6:5d:d0:d8:
         38:84:ff:de:66:17:05:6f:24:cd:3f:05:32:d8:b4:5a:da:8e:
         85:c3:6d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:05 2026 by rpki-client