Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f056acd-3575-3d0a-b78e-766140025270.roa
File:                     5f056acd-3575-3d0a-b78e-766140025270.roa (raw, json)
Hash identifier:          qi/8qCdNKCUgQBK7Ux3E1Z7kEoprIeaVL3dyOYa45mM=
Subject key identifier:   34:54:03:B2:65:58:A6:BC:00:84:56:CA:79:27:91:D0:5C:67:35:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ED9C72D4C44A4A966573DCE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f056acd-3575-3d0a-b78e-766140025270.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     401712
IP address blocks:        2001:470:5d4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:2d:4c:44:a4:a9:66:57:3d:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=e00f664a-cc6a-4b50-8260-c152d871ed11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b5:03:1b:de:63:d0:a6:a1:c6:7d:2e:fc:f5:
                    b2:b4:d3:47:f3:65:1e:9b:05:74:3c:8a:2f:bb:90:
                    6e:ac:7b:e0:95:4f:3a:1a:64:ee:af:b1:d6:30:67:
                    91:33:a5:95:c8:41:39:1c:eb:59:db:19:7c:69:87:
                    01:ff:f6:f2:b9:b4:1b:29:90:c8:01:06:a0:f7:b0:
                    f5:ac:d0:38:0f:41:4b:da:5e:b3:48:93:ae:d5:ca:
                    b7:18:05:fd:82:eb:d2:66:7d:8e:92:6e:e9:7c:fa:
                    62:ec:47:f8:3b:d9:66:0c:3e:c6:f8:54:3b:af:6b:
                    b2:68:39:55:bf:bc:4b:65:61:a9:f2:ac:c7:13:91:
                    e9:cb:1f:31:ec:68:41:88:d2:67:8d:be:db:66:24:
                    c2:03:3c:14:32:76:0b:a7:69:d8:d6:49:3e:61:92:
                    ed:36:b6:37:1b:1b:31:20:9f:66:be:31:a3:16:e4:
                    2f:1f:e5:f2:2f:8a:30:d2:4d:d1:2b:df:af:eb:c0:
                    73:9f:68:f3:00:e3:63:9f:3b:97:1d:43:20:c0:9f:
                    0e:0b:df:c6:da:21:5b:3c:2b:65:a8:2e:20:89:bd:
                    1f:93:7a:77:53:c6:b0:59:eb:79:31:c0:dd:91:0c:
                    7b:4d:67:1d:75:82:e5:99:c2:46:1b:88:92:e3:ba:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:03:B2:65:58:A6:BC:00:84:56:CA:79:27:91:D0:5C:67:35:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f056acd-3575-3d0a-b78e-766140025270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:93:61:0a:84:3f:48:22:75:89:0b:2a:03:ce:d1:3a:29:9b:
         f0:cc:34:3c:ab:67:4c:2d:c6:7b:42:60:68:0f:07:3e:6d:b7:
         9e:af:c8:0c:99:c5:07:6b:b7:cf:77:7e:57:98:e2:76:91:ca:
         fb:bd:ae:f4:0e:30:74:3a:40:8f:9f:5a:5e:ff:70:40:84:e5:
         e5:84:0d:4e:b1:92:1c:e7:26:cb:74:9e:3f:70:6b:b2:cb:13:
         47:29:26:1f:e7:e6:a0:99:3d:51:fb:c8:ab:55:72:41:9f:19:
         1f:85:f7:d2:02:6c:ac:b1:9b:e2:fd:00:a4:ad:c0:27:3a:3b:
         f5:27:44:c7:91:ca:64:07:47:a0:ce:88:0f:cd:e7:56:ca:72:
         14:6c:ba:94:5f:2c:94:3c:66:e2:ce:96:46:aa:d9:78:56:3f:
         58:ae:d3:28:e9:43:83:da:68:13:ed:85:d5:51:40:0f:c4:aa:
         11:f0:11:22:b8:9b:f6:32:dd:f0:13:4a:77:b2:ef:35:38:41:
         40:7b:23:71:6a:c5:05:e0:d9:e8:09:c4:e3:80:05:3d:09:7a:
         47:cf:d1:63:10:de:6f:44:83:61:9b:04:32:c7:56:b2:fc:39:
         67:13:4f:29:d7:0a:6e:fe:5a:d5:2c:0c:37:5f:53:84:af:c1:
         9f:6b:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:12:17 2026 by rpki-client