Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa
File:                     c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa (raw, json)
Hash identifier:          PpHO5gt1sDklBYscD+YDMxd8EX1ve51RmT9esehJiqk=
Subject key identifier:   9E:9E:54:ED:8D:53:07:D3:2B:92:ED:00:EB:90:45:C1:45:CC:A7:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F3A17CAAEE7CFA87F37320460
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     22332
IP address blocks:        2001:470:42e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:ca:ae:e7:cf:a8:7f:37:32:04:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=e749f849-1750-409d-8140-e1fb05f76e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:f3:c6:b7:b6:a1:9e:35:c0:50:05:22:8b:
                    7b:c0:c7:40:65:5e:48:63:98:63:78:c2:d1:b3:2a:
                    85:8e:b6:45:e6:f6:b8:c2:58:d4:ed:cc:36:be:e4:
                    17:d3:6f:bf:e7:c3:de:ff:ea:10:5f:12:b1:fc:47:
                    7f:cb:7c:2e:42:45:eb:95:d2:8a:f3:c7:c8:19:ac:
                    8f:b8:88:c5:d5:ee:4d:98:ef:b4:88:da:12:5c:20:
                    e0:51:a0:2c:f2:95:df:36:9e:e7:73:6c:f2:eb:03:
                    7d:98:23:78:37:db:7f:e6:83:32:ae:77:69:d4:c3:
                    74:32:84:ef:aa:be:ea:58:8f:34:7a:d2:6e:93:5c:
                    48:79:84:1f:18:54:01:87:af:91:8f:8a:36:16:59:
                    8f:ea:44:a4:8d:82:6f:5a:2a:a2:39:a6:32:a2:12:
                    aa:6b:41:70:d2:4b:5d:35:bd:68:5c:9e:19:e8:82:
                    c5:fc:c9:15:9f:45:78:da:96:e8:eb:44:0c:3c:89:
                    05:4f:03:18:e3:4a:3b:9e:9b:a6:8d:b5:5e:69:23:
                    1e:af:d9:c5:01:49:d4:8f:28:27:80:0a:25:32:e2:
                    ed:a9:7d:95:4a:b5:c6:18:f6:ea:5a:7b:29:a5:ca:
                    2e:eb:27:54:ec:05:36:f9:91:7a:cf:3b:ff:19:40:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:54:ED:8D:53:07:D3:2B:92:ED:00:EB:90:45:C1:45:CC:A7:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c8f6eb69-28f3-3774-b876-02e7d1a2f54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:42e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:b4:f5:d1:34:54:de:bc:df:a1:9c:ab:7a:d9:74:69:54:86:
         8a:61:0c:34:fd:34:4e:fc:85:8d:f1:ce:6e:6b:a8:c7:81:f5:
         b7:aa:48:cb:64:09:bb:17:a4:85:56:95:8b:66:3a:28:97:6c:
         15:80:61:5a:89:16:66:31:a1:42:93:cf:62:3b:41:2e:c1:b7:
         3c:92:91:96:42:68:41:47:03:f2:19:91:5f:fc:37:77:65:ee:
         5d:f3:bd:d2:3c:7d:14:00:0a:e3:d8:ec:b1:59:ee:a5:6f:c5:
         1f:dd:6d:90:84:65:dd:ff:4f:d9:77:33:2c:fa:2d:e7:b4:3f:
         0e:02:59:93:95:c7:20:8b:36:b6:9d:14:73:ce:30:03:d3:8f:
         01:48:f5:44:60:23:b5:e3:d4:76:2f:a4:d1:bc:90:bc:4b:33:
         ef:22:4f:30:e1:6b:ef:96:cb:c9:84:3d:43:8e:dc:f2:e3:b4:
         00:6b:70:d1:61:1d:7c:58:40:d8:61:b5:71:10:f8:90:12:3c:
         8b:06:3f:e7:3c:91:50:23:04:f6:a9:c3:ad:cd:e1:74:55:df:
         29:3d:88:74:5c:4c:67:e4:af:66:25:9f:8a:87:82:07:c8:f1:
         33:38:1a:bc:0e:58:eb:15:c2:a9:17:4e:4d:3a:53:cb:d6:cd:
         2a:2d:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:31:50 2026 by rpki-client