Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa
File:                     348c76b8-ac1e-337b-ad26-d5caf73a137d.roa (raw, json)
Hash identifier:          ZtVcpyOJhvb8pGxeewz/gTqf8esqrdDwPxKLM1XqNH0=
Subject key identifier:   0A:00:34:2A:9E:E5:65:23:A2:CC:81:DE:5F:E3:41:1B:B2:3E:5C:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F2957C9B8853CC12F40DD6B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     399558
IP address blocks:        2001:470:3e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c9:b8:85:3c:c1:2f:40:dd:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=7b7cd0da-b3f5-4c78-86bf-cae140c3fd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:73:d7:52:3d:67:2a:4a:96:12:52:10:95:
                    82:c4:21:83:f2:50:00:10:dc:c6:6a:1b:5c:ca:91:
                    fe:45:86:a4:70:1f:51:b0:89:6b:6f:55:9f:8d:dd:
                    e1:24:1b:87:1a:16:43:b1:6b:e1:f9:73:b1:c3:d2:
                    15:40:28:db:41:fb:0d:96:78:18:ee:af:2b:9f:07:
                    90:32:45:50:08:c8:4a:03:85:2e:5c:c1:d1:26:6a:
                    3a:d0:9e:e5:33:c1:b0:98:7d:91:9f:a3:e0:5c:75:
                    1b:94:dd:0f:33:cc:47:96:33:05:82:a2:b4:09:1c:
                    b2:2f:54:f5:76:a3:4e:99:d2:36:50:25:1e:80:62:
                    2c:18:45:5b:83:7e:5c:f3:ef:04:e6:0d:1a:38:60:
                    d5:bc:6f:57:33:f7:b4:6c:a8:99:fc:ce:a4:8f:49:
                    66:74:2a:45:3f:64:47:01:3c:41:d7:aa:2c:79:0b:
                    24:e5:08:9f:28:f8:d0:63:8b:3a:c5:66:28:55:ca:
                    12:18:4d:e5:9b:48:f2:0f:f4:fe:3a:8e:0e:7c:fb:
                    4a:1f:da:68:4f:63:5d:54:63:8e:93:fd:e2:9d:cd:
                    0e:f1:11:dc:3f:e2:47:a3:59:19:35:86:96:42:fc:
                    b8:fb:3c:ec:dd:92:ed:1f:44:99:64:fd:bc:80:da:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:00:34:2A:9E:E5:65:23:A2:CC:81:DE:5F:E3:41:1B:B2:3E:5C:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/348c76b8-ac1e-337b-ad26-d5caf73a137d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:64:02:8c:66:39:e8:4f:a2:02:1c:19:95:18:0a:58:7b:9a:
         d9:aa:a1:22:fe:db:dd:a1:34:6c:68:8e:2b:cf:29:61:2a:e1:
         b3:8a:c9:cd:57:2f:31:cd:62:a0:e7:d7:a3:53:35:dc:4f:97:
         01:b7:61:15:15:81:51:77:4f:80:7f:16:d5:0b:55:97:19:e5:
         a6:42:e5:b3:0f:4e:d1:01:8f:0d:7a:35:07:e0:84:38:ea:2b:
         99:93:20:1d:c6:1b:64:ff:ee:1f:fb:24:86:ca:fe:9e:00:21:
         83:ee:77:30:73:fd:bb:0e:a2:a1:c5:0a:3a:57:26:d3:99:6d:
         58:6b:ff:db:11:6b:5d:64:d5:34:fa:f6:14:52:24:e2:ca:2e:
         3e:d9:89:d0:3d:c3:5b:a5:35:9d:aa:b8:f3:e5:73:de:db:18:
         d2:f6:a6:41:fd:30:95:74:8d:d4:50:2f:3f:a8:fe:a2:d9:61:
         7e:da:10:2e:25:fa:c9:78:fb:a6:d9:07:4b:e3:18:32:7c:4a:
         36:7d:36:0f:3c:61:59:f3:f1:c2:49:11:9d:b3:2d:90:04:25:
         4e:f5:8f:53:b9:a1:ea:2b:f0:d3:d2:a0:32:24:f9:9c:bf:18:
         e3:a2:45:44:a5:a3:08:64:08:bf:36:63:c4:8b:bc:95:ea:12:
         4a:14:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:49:03 2026 by rpki-client