Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa
File:                     b306bb69-5548-3022-b229-79ea8647eb95.roa (raw, json)
Hash identifier:          l257G/5+mC+eTI5sFvu+o6ier3nuAQNCjZr8YnCUjzw=
Subject key identifier:   15:59:31:A7:D6:3D:F5:95:A2:91:C6:02:09:AA:17:7C:A3:FC:40:F6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F51D2C56B0995BB96A34AE280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     30860
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c5:6b:09:95:bb:96:a3:4a:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=c1d22f36-d9c9-4a60-ab1d-39f4a4540d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:5e:10:67:6f:f2:e3:9f:c7:50:0c:e2:2b:
                    6c:f0:43:73:00:0a:30:f3:d0:71:26:3b:db:c8:42:
                    c9:fa:2d:70:c8:87:b7:b6:50:05:ed:72:36:49:cb:
                    7a:f5:45:58:a8:38:c8:f1:34:50:df:7f:9a:36:64:
                    96:92:f0:9c:46:ec:7c:19:ca:e2:3e:d0:c4:44:34:
                    27:d0:eb:dd:19:76:92:e8:a8:42:45:ad:fb:3d:ba:
                    61:c6:9e:4c:0a:4e:84:52:07:20:73:c3:1d:06:60:
                    e0:38:15:0f:d9:59:63:1c:6a:43:6b:36:83:29:75:
                    23:75:76:4c:46:e5:9d:60:33:19:57:76:bf:ee:03:
                    16:9d:fb:7d:28:11:43:f0:4d:a7:ea:01:be:9d:c0:
                    2e:f3:7b:67:2d:d2:26:6d:69:58:a8:ee:8f:20:23:
                    0f:f7:81:f6:7e:f2:75:62:a6:95:b5:64:ba:e6:f6:
                    09:bb:49:b1:14:2f:8c:6f:e9:13:82:c3:30:b6:c5:
                    64:9e:e5:be:c3:64:b5:47:61:5f:7e:e4:70:59:af:
                    5b:8a:bb:9d:12:36:36:d2:04:26:33:e5:62:d5:35:
                    d2:6f:4d:c7:2a:47:57:8b:de:cb:12:53:a9:6c:a4:
                    32:74:57:87:97:68:48:65:ee:42:84:d5:c2:cf:38:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:31:A7:D6:3D:F5:95:A2:91:C6:02:09:AA:17:7C:A3:FC:40:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b306bb69-5548-3022-b229-79ea8647eb95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:89:89:09:ac:50:1f:6b:48:3c:d4:c8:7f:8a:68:6f:bb:
         8a:7e:12:e4:04:4c:8c:56:2b:ff:c1:07:c3:7d:60:24:cf:5f:
         04:83:3a:0b:e5:b8:7b:7e:4a:bb:c4:84:35:89:3b:62:1b:70:
         6c:f9:c0:43:19:1d:ad:fc:99:a7:e7:6b:e3:4c:a4:56:8b:81:
         aa:cd:94:f6:b2:94:00:b1:10:6b:c1:b8:d7:be:cf:84:8e:59:
         ad:28:fa:ae:c8:39:31:b8:29:58:81:06:97:b6:d7:7b:14:b6:
         fb:02:45:8d:70:4d:f0:b7:d8:a6:30:96:cd:dd:c4:10:9f:c4:
         90:19:67:a8:00:67:35:88:cc:c5:d3:1f:16:d0:77:2d:4b:61:
         65:d6:ae:98:27:78:aa:4b:a8:a7:55:eb:6c:ec:2b:ac:49:8e:
         e0:91:78:41:eb:2e:9c:65:7d:5e:a2:c9:db:e2:24:33:b3:be:
         10:de:c7:de:28:e4:6e:d2:cd:5a:61:cb:d1:24:ba:6d:49:d8:
         45:31:33:6e:80:95:c3:f4:19:2e:b0:52:25:0b:b4:37:24:81:
         a4:21:5c:e8:69:98:eb:a5:40:a9:d3:2c:65:42:38:24:08:48:
         d1:96:82:2f:17:47:60:a6:8a:a4:aa:18:93:03:b0:95:e0:06:
         46:bd:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:27:50 2026 by rpki-client