Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa
File:                     d2221840-baa4-36e4-96aa-6942aeccfff6.roa (raw, json)
Hash identifier:          bzwPtBjt3z0ms+pDiDYXlGGvWCg6tte8JMbVxeuZ9zs=
Subject key identifier:   91:AB:28:8D:42:B9:81:0A:FA:DE:3D:A7:76:18:BD:16:7B:C5:72:B5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA787553C7B009DFA795CFE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        2001:4860:4840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:55:3c:7b:00:9d:fa:79:5c:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b81a6f43-52ee-4f87-84e2-9a76e0632b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:3c:c4:8c:16:1d:a7:e9:a2:d8:6b:23:21:
                    fb:29:e7:88:36:25:66:fa:df:70:30:2a:09:7f:c6:
                    cd:f7:bf:f9:26:0d:1e:41:42:13:b5:bd:3e:0d:cb:
                    be:31:23:7e:e6:ba:ed:11:a1:a3:9e:88:d9:46:13:
                    b9:34:e1:3e:66:52:15:30:a1:d5:f1:b6:da:fb:a0:
                    49:88:24:24:f9:e9:5e:cd:a7:04:00:e7:56:52:c8:
                    b0:91:4d:a5:21:a2:f4:e1:c2:bf:8c:46:92:b1:09:
                    83:c6:9d:2a:c3:72:af:43:e4:4a:72:4a:be:77:f1:
                    ee:cd:88:ce:cb:ea:dd:d3:28:f7:c4:33:b4:54:f0:
                    17:17:1f:4a:03:aa:4d:89:08:a1:f4:06:22:14:2b:
                    cf:fb:38:10:2a:92:78:51:f2:07:92:41:18:9f:8f:
                    08:eb:8f:16:3e:21:e1:b5:9c:9c:c2:e7:ee:14:3f:
                    f3:e9:0d:49:df:22:5d:6d:df:93:13:41:f4:13:9a:
                    62:fd:e4:7d:80:01:b8:18:a3:ba:67:c5:81:99:21:
                    40:70:81:ef:cd:5b:fa:9e:06:0a:88:28:3c:25:98:
                    fe:7e:6a:0e:33:55:1d:b2:90:01:da:f3:48:67:39:
                    24:16:c2:81:45:39:1d:ea:18:7f:eb:b4:98:9d:68:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AB:28:8D:42:B9:81:0A:FA:DE:3D:A7:76:18:BD:16:7B:C5:72:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2221840-baa4-36e4-96aa-6942aeccfff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:4840::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:c9:d9:34:10:f2:23:06:69:6b:3b:f4:93:0a:7d:17:ca:
         93:38:db:ae:a0:15:42:0a:6e:3e:d5:a5:73:9d:9c:7c:04:be:
         05:cb:66:8a:f0:c2:9d:fb:3d:93:fb:79:2c:1c:65:69:d0:be:
         18:42:64:fd:b1:c9:2e:f8:3c:8a:e2:7c:22:fe:88:0f:01:87:
         78:62:de:e3:de:26:9c:38:41:6b:42:2f:8c:c0:fa:41:8a:c7:
         19:d3:bf:df:9e:3b:64:ae:96:c1:59:74:5e:a8:74:ee:07:d6:
         fd:3c:08:49:8e:df:7b:40:f5:a8:0d:1f:95:b7:e5:b1:a2:3b:
         1c:f6:2c:1d:57:4d:d7:a8:6c:80:8a:fe:d0:d1:de:9a:6c:d1:
         63:de:24:96:ca:c3:43:dc:99:62:ac:4e:8e:e0:f1:9c:c5:b3:
         4d:bd:f6:fa:e0:a4:95:14:cf:af:a4:f6:1e:f2:20:43:75:6d:
         f5:a8:8a:ec:c6:b0:39:ac:7d:3c:df:83:d6:f6:f6:9d:8f:23:
         7e:ee:b7:0d:77:cb:08:56:12:d0:58:7b:f0:31:69:06:cf:5b:
         26:d6:78:ef:2d:84:1a:58:25:b2:a5:aa:45:b8:45:fd:b8:ab:
         4b:d9:5c:a7:19:8f:ce:fb:b7:3f:bf:25:2e:f3:10:65:78:3c:
         ec:2f:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:19 2026 by rpki-client