Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa
File:                     26b343c8-04b4-3d43-a7c6-e808491f83c4.roa (raw, json)
Hash identifier:          PpN3F6sYkpyJSFkApYNR7aQsDwGSgm2zrsp8kfKV7BI=
Subject key identifier:   D1:F3:71:51:F2:59:5D:6B:F3:F0:22:28:5B:1B:93:E7:E2:B5:A6:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BDA6441DB2BE66E562300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     51276
IP address blocks:        2001:470:2da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:da:64:41:db:2b:e6:6e:56:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=424ee608-921e-4c0d-a692-b9389e8580e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:ad:88:70:98:7f:03:86:8d:a2:43:7a:30:
                    95:b4:c7:dc:d7:60:54:c0:6e:ad:f2:63:51:71:d3:
                    04:d4:5d:6a:ae:73:6d:ff:50:f4:36:3f:70:fa:03:
                    59:70:34:f1:9b:4d:ff:e0:bc:fb:a5:5b:10:4a:16:
                    42:57:90:00:fc:05:74:16:5f:59:06:18:99:a6:dd:
                    91:f6:be:1b:77:bc:f9:71:c5:b5:26:eb:b5:ec:3a:
                    eb:a8:bb:58:3a:e2:7b:7a:cb:52:ab:dc:93:a5:ca:
                    2e:e2:2b:09:21:97:46:35:8e:d8:77:62:0e:ee:79:
                    47:b0:f5:66:ba:fa:d7:52:13:4e:4d:17:b2:e6:dd:
                    f7:bc:8f:2a:c5:ec:14:ba:b3:4b:31:7e:2c:2c:43:
                    e3:d1:67:af:3a:e1:d3:2d:9f:d4:85:6d:c6:27:be:
                    e8:55:cd:46:a0:0a:21:b2:12:3f:fa:99:58:3c:23:
                    fd:af:e0:f7:b6:00:73:46:12:cb:64:4e:bd:f3:58:
                    9e:22:fc:5f:7c:0e:55:b7:5a:c5:40:5e:75:bc:2e:
                    31:b0:cd:23:11:bf:a5:97:37:d9:71:87:28:2e:10:
                    06:2b:35:be:25:c8:c6:19:88:d7:22:0b:ce:62:d3:
                    82:b6:e2:37:2b:90:1c:2c:1f:df:3b:7f:30:e9:a2:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F3:71:51:F2:59:5D:6B:F3:F0:22:28:5B:1B:93:E7:E2:B5:A6:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/26b343c8-04b4-3d43-a7c6-e808491f83c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:20:60:a5:09:62:b1:80:0f:1e:ad:e9:2c:35:2f:fb:bd:
         76:68:3b:81:96:99:83:ae:87:6e:b4:a4:5e:b2:8c:8b:63:74:
         08:ca:d6:90:99:21:9a:26:41:ce:9e:d6:61:d7:d1:ae:10:34:
         7e:e6:09:04:2e:ed:b5:1d:43:c3:57:73:c2:f6:e3:b8:ce:15:
         71:5a:14:38:ac:c8:be:1f:6c:a2:5a:a3:98:48:50:55:a4:4b:
         7f:2e:dd:c2:c8:79:d7:58:57:da:46:e4:90:22:2a:a2:fc:8f:
         c0:2c:08:a7:23:15:ed:bf:8c:1c:23:c4:4e:72:89:dc:df:bf:
         e1:a2:bf:f5:79:32:42:ef:e9:05:9f:3e:eb:bf:84:3d:c5:00:
         af:9a:85:d9:da:70:97:10:ef:f5:90:fe:52:7c:01:73:b1:93:
         e4:be:44:35:25:83:70:57:08:58:2d:9d:6f:35:3c:66:b0:d9:
         c4:10:55:08:b7:df:e6:83:60:88:bd:92:29:64:2e:28:33:95:
         4e:3e:95:65:1f:e2:2d:07:16:31:b3:11:fb:e1:ed:3a:a0:cc:
         23:3f:d0:7d:83:5a:7a:ee:14:9b:43:d0:8e:3c:62:f4:2d:83:
         c4:3a:65:90:4a:b6:d7:b1:81:4b:ee:70:a6:22:eb:b3:2a:d4:
         c5:d9:92:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:22 2025 by rpki-client