Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0760676d-56ce-3bd1-b945-69d3f41009f8.roa
File:                     0760676d-56ce-3bd1-b945-69d3f41009f8.roa (raw, json)
Hash identifier:          To7WEOHJ8SykEEMkbs6mXqF4+Bp5Meo7LPe+dP1Nlzo=
Subject key identifier:   D7:01:26:E1:92:2F:06:2D:0E:61:9A:33:27:A1:CF:CB:8F:89:FE:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F49746CB7465ACEE612559B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0760676d-56ce-3bd1-b945-69d3f41009f8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398668
IP address blocks:        2001:470:363::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6c:b7:46:5a:ce:e6:12:55:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cda9dc4c-dd21-492b-ba78-c0c80ff2e0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:52:2d:e7:30:22:52:e7:03:51:46:01:32:19:
                    a2:19:d1:5b:2f:60:11:b8:56:0e:46:45:c7:2f:c8:
                    6a:84:5a:3e:93:ba:82:66:fe:b5:a5:f7:49:e0:e7:
                    66:ba:1d:40:35:44:d8:8d:11:4a:02:11:e2:18:30:
                    4e:b8:78:2e:5a:ab:d0:d5:6d:6f:18:c8:7a:36:86:
                    9c:fc:f3:24:d0:af:ec:b1:d9:71:5d:b7:d3:f6:b2:
                    cf:93:b8:15:1f:90:eb:c8:10:64:25:bf:74:2b:a7:
                    c6:ad:be:1e:bd:26:ec:75:5e:da:b8:b2:e1:44:a3:
                    b0:cd:93:9e:56:a3:c1:ae:a8:bf:3a:dc:32:56:56:
                    1a:9a:a1:ec:71:e4:b8:3c:72:25:7e:47:72:53:d8:
                    c3:be:0e:97:ba:b5:5f:f0:7a:b3:83:c4:0b:d2:2d:
                    21:6a:4e:e7:2c:6d:3e:f5:7d:ae:99:d8:02:62:38:
                    08:ca:48:db:1d:31:ef:31:a6:7b:75:1d:d8:e2:1e:
                    a1:72:d8:b2:e2:17:c9:70:27:63:72:0d:fb:f5:9c:
                    6f:42:0d:04:1c:ca:09:c6:4c:25:ce:1d:ec:2d:d5:
                    4b:b1:65:ac:24:a4:22:ea:55:eb:3f:4d:ef:15:8a:
                    fa:cb:3d:e0:f8:5f:0e:b2:08:de:b2:61:e7:18:43:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:01:26:E1:92:2F:06:2D:0E:61:9A:33:27:A1:CF:CB:8F:89:FE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0760676d-56ce-3bd1-b945-69d3f41009f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:363::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:32:6a:e5:17:ad:39:c7:8f:50:67:3d:11:f6:4d:9d:d1:9d:
         22:2d:25:4e:0f:1c:b8:99:e5:b1:2b:1b:53:18:c9:47:ad:2e:
         60:b4:ae:88:94:6c:91:2c:b4:25:89:a1:d1:38:cb:2b:ac:b1:
         5e:e2:ba:5b:93:48:03:6d:16:1b:6c:b2:a2:f4:96:4f:29:37:
         d0:7a:06:bc:ef:f2:bd:65:60:7f:7e:ac:f7:8e:4b:db:91:05:
         1c:f9:e1:20:b9:0f:68:ed:b0:c8:15:97:cc:92:74:25:e7:ee:
         1e:48:5e:d1:e8:c3:b5:8b:11:26:6c:ab:af:3a:cf:31:c2:d3:
         b6:93:f0:b2:3b:24:a6:e3:ec:a8:ad:be:80:be:82:41:a2:51:
         ad:b1:27:a8:b2:d6:f8:93:2f:e1:cd:7d:ce:cb:5f:c2:78:ea:
         91:8a:1e:46:69:d7:bc:ea:6f:39:cf:60:31:38:eb:5e:69:66:
         7c:e6:f3:ac:61:4b:bd:40:ae:e6:f2:25:76:e4:87:a8:fb:a4:
         7b:87:b1:92:83:50:96:cc:79:bc:b0:84:74:bb:b3:7c:7f:ba:
         7d:ba:15:63:4e:dc:a6:89:d5:34:57:c2:c8:19:ad:1f:bd:bf:
         9b:0d:1b:55:04:c9:28:84:ae:cf:b0:20:7a:42:47:37:be:81:
         bf:7c:91:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:10:49 2026 by rpki-client