Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa
File:                     4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa (raw, json)
Hash identifier:          21eHFUorDbp6YeqeBiH5UMc68FnmC0vR6gI5W/ia0AU=
Subject key identifier:   3C:30:47:C6:F0:85:A2:99:C9:F1:F2:74:9F:CE:CA:FA:66:35:EB:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF26A4DE53E21FDEBB780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     18638
IP address blocks:        2001:470:8c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f2:6a:4d:e5:3e:21:fd:eb:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=21e287b0-a367-40a7-8294-5542182fa5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:09:de:4c:27:fd:af:2c:d5:86:3c:3e:99:
                    d7:90:4c:c4:b5:a2:ba:e2:a8:f0:38:54:ca:3a:b0:
                    96:fe:10:19:69:93:1a:aa:92:46:10:d7:b4:92:07:
                    be:de:40:d0:7e:08:90:46:5f:1a:2b:0e:6d:0f:b9:
                    11:b1:e4:52:29:e2:e0:75:04:ee:b4:97:c9:60:65:
                    de:fb:4f:16:e6:79:c6:73:aa:87:23:c0:b4:e5:d0:
                    2e:9a:77:be:fc:c9:3d:5b:5f:1c:2b:c5:06:0f:fe:
                    41:0a:a9:30:46:32:67:e6:17:28:e3:ad:fe:b3:80:
                    4a:76:db:e7:dc:67:a0:bf:f9:c7:29:25:0b:02:7b:
                    91:13:57:12:49:28:f0:4f:5f:16:44:e4:df:52:4d:
                    ef:8c:95:af:e3:4c:c3:ae:fa:88:e5:10:9f:85:39:
                    1b:b4:ad:23:b0:5f:cc:c3:fc:1e:75:14:37:32:7f:
                    87:82:90:9e:25:8b:b5:2d:fa:dd:c8:aa:cf:0b:05:
                    b1:1e:dc:01:a4:16:cb:4c:e1:15:42:41:a5:7e:6f:
                    d3:84:70:d9:35:ec:ce:de:fc:b6:e2:96:fd:32:1f:
                    82:3a:0d:08:f0:46:8c:62:31:74:52:f5:98:2e:67:
                    ee:e6:9f:f0:f6:ae:a1:3e:e4:db:26:61:a4:61:86:
                    ea:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:30:47:C6:F0:85:A2:99:C9:F1:F2:74:9F:CE:CA:FA:66:35:EB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:8c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:d4:e6:b3:a2:99:a0:1b:42:62:d9:39:62:fb:b6:c9:9b:
         07:c5:72:5e:9e:bf:16:52:d7:e6:f5:3e:21:c5:84:f1:f0:c7:
         da:81:05:d4:d7:38:b9:74:8f:b9:fb:ad:f5:c6:28:52:5d:20:
         1c:0c:d5:8f:a3:57:22:b3:33:f0:89:e2:31:0e:46:68:25:6a:
         93:c8:6d:2f:81:b3:64:7d:6c:e2:0f:00:0b:cb:80:77:d7:3d:
         b2:91:7a:79:9d:03:a2:66:a0:ae:e2:14:0c:a1:73:a3:7b:4d:
         bb:57:7c:81:c3:8c:5c:43:b7:59:09:5d:7d:62:d9:a7:6c:3b:
         94:6f:20:ce:97:e8:d6:07:93:c3:42:07:c0:49:22:36:2e:2a:
         71:3b:52:de:8c:0e:c2:03:fb:51:b9:73:4d:64:bc:49:1b:8c:
         9a:f4:ec:48:dd:8c:51:85:af:a8:19:b6:62:1e:25:12:fb:5a:
         ab:fd:be:15:2e:bc:3e:bf:2f:be:18:c0:51:56:3a:eb:56:26:
         b9:26:6b:f2:b9:23:79:4a:e8:23:42:73:90:ab:1e:e7:64:50:
         48:db:7b:2f:45:a9:8c:18:51:6f:bd:70:3d:e0:f5:22:e7:24:
         c2:f3:2c:1e:63:e6:9a:55:19:dd:01:cf:2c:80:5a:61:29:29:
         fc:09:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:37 2026 by rpki-client