Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcee4ece-cc7a-39c4-8f3e-215bd491cde6.roa
File:                     dcee4ece-cc7a-39c4-8f3e-215bd491cde6.roa (raw, json)
Hash identifier:          A3IgVlmImdVJ8cni6ZjcwAPnedFRv6l1u/xuuu4w5nk=
Subject key identifier:   A6:4A:95:DA:5E:20:E9:A8:D8:F9:C6:54:9D:6E:C9:60:47:25:D3:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E95704F21141920291B316D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcee4ece-cc7a-39c4-8f3e-215bd491cde6.roa
Signing time:             Wed 22 Jul 2026 13:30:15 +0000
ROA not before:           Wed 22 Jul 2026 13:30:15 +0000
ROA not after:            Tue 20 Oct 2026 13:30:15 +0000
asID:                     402516
IP address blocks:        2001:470:5eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:70:4f:21:14:19:20:29:1b:31:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 22 13:30:15 2026 GMT
            Not After : Oct 20 13:30:15 2026 GMT
        Subject: CN=eeda3b00-c59d-4d3b-b20a-0e60e9ebfbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:cb:b1:d7:ba:52:6d:9f:4f:bf:b6:a6:f4:
                    fd:13:1f:b3:20:ec:01:f9:76:d6:32:7d:66:9b:97:
                    6b:ba:1f:b4:ce:88:bd:1b:b4:f8:93:b3:20:28:e7:
                    9b:1f:fb:31:96:ae:8e:8d:34:8a:e0:28:70:18:73:
                    6a:27:8d:b3:95:9a:b3:8a:1d:22:cb:9b:c7:69:3e:
                    53:68:ac:36:a5:75:2d:dd:38:0a:69:03:f8:5a:5a:
                    13:a5:03:01:73:e6:a3:10:19:23:a6:e5:46:ec:54:
                    53:96:55:f9:d4:55:03:5a:5e:51:5f:e9:7f:62:fa:
                    1c:fb:f5:80:7b:31:bd:99:a0:f2:a0:5c:76:cc:9c:
                    14:28:72:db:0a:6f:15:27:66:e0:ce:5a:27:0b:55:
                    ab:89:9a:72:de:8f:5c:6e:f0:1d:5d:cc:df:9e:8d:
                    d0:f0:13:5e:c1:d5:38:c0:7c:46:6f:f1:6e:99:9e:
                    13:da:9e:f4:f5:93:79:06:17:8c:97:d4:85:40:33:
                    f6:82:60:9b:b5:d1:95:39:f1:5f:3b:a4:a7:67:4d:
                    d7:39:35:37:08:de:37:91:e0:17:1c:17:63:db:87:
                    03:67:5b:b4:7f:d3:a2:08:06:0a:cf:de:e6:a9:05:
                    6d:48:32:45:55:d9:22:01:00:0e:1b:c0:31:42:88:
                    7f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:95:DA:5E:20:E9:A8:D8:F9:C6:54:9D:6E:C9:60:47:25:D3:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcee4ece-cc7a-39c4-8f3e-215bd491cde6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:8d:eb:2c:01:23:08:a4:bf:9a:63:4c:0c:fa:0a:79:6a:
         cc:6a:79:93:6b:a8:97:de:a6:c5:83:51:53:cf:d0:75:88:16:
         21:3b:c2:86:25:96:5e:c9:39:00:f5:28:b8:1b:48:54:75:a6:
         cc:17:6a:ef:df:63:78:00:16:38:e5:6f:d9:4b:b0:d5:a3:e8:
         6c:cd:77:3c:0d:80:45:73:b5:a7:20:f7:83:aa:d5:25:97:1a:
         0c:c8:6b:ef:db:39:f5:92:6e:aa:e3:63:87:7e:ec:fb:63:fb:
         44:41:0a:64:40:4d:cc:58:4f:1c:04:4e:e9:46:c3:3f:17:ac:
         74:d1:23:25:09:bb:7b:48:6c:42:5a:90:24:32:49:b0:4a:3a:
         52:ab:86:42:51:e3:5c:47:f2:61:b6:0f:6a:4a:2d:03:0a:07:
         b6:37:73:97:c2:5f:f4:71:99:06:f7:1a:b1:53:1b:4b:e6:f6:
         89:46:fc:bd:65:3e:68:05:f2:c4:26:4f:a6:c1:8a:da:dc:86:
         56:54:83:6e:d3:d6:f3:dc:d9:19:21:bd:50:5d:8c:7c:c0:c1:
         22:c7:c7:9a:54:b3:2f:e3:01:29:9a:d0:ab:5a:92:b3:07:7d:
         35:92:21:79:6e:a9:80:7f:f5:3e:3b:dd:77:70:91:ed:78:24:
         e0:3b:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:03 2026 by rpki-client