Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa
File:                     d005a599-09d8-3026-ab5a-a41e08c768f2.roa (raw, json)
Hash identifier:          XLj2F6oSDN2U6Wm7um6KGD8EqHmoPZm8j5zVJKEEiM8=
Subject key identifier:   BC:74:C2:56:5C:1A:94:1B:77:15:B9:44:77:9F:A9:EB:64:7E:55:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA78860D6DDEC416C236836C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400950
IP address blocks:        2001:470:1b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:60:d6:dd:ec:41:6c:23:68:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1f43bce0-5a23-4c13-a463-acb97842c866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:ec:07:27:45:d5:e9:93:eb:48:88:d1:79:
                    4b:30:ce:10:35:3f:c4:c1:fa:c9:3d:03:86:52:27:
                    22:fa:f9:53:f3:fa:33:9a:ca:64:61:50:90:47:a9:
                    e2:10:c5:1c:b5:e0:8c:cd:65:00:71:ec:bf:be:44:
                    9d:ca:91:bb:7c:54:22:b0:18:ea:33:21:d1:c5:68:
                    11:5a:ae:11:9b:dc:e7:d8:4c:83:d4:4f:45:0c:1b:
                    4a:a8:03:46:6d:8b:12:64:3b:74:c4:b6:25:d1:66:
                    07:4f:43:01:67:9d:f2:b6:a9:5f:89:63:f5:b0:b2:
                    b9:c4:0b:d8:fe:59:88:33:48:8d:17:e7:99:84:63:
                    26:d3:54:8e:3f:f3:ab:9b:c2:b6:dd:9a:9e:4d:b9:
                    7b:01:29:fe:e2:11:00:b9:0b:7e:c8:73:64:c0:04:
                    64:3e:96:f6:fe:77:cb:85:cd:5a:d4:a5:a0:30:cf:
                    66:95:d2:00:16:04:3b:35:08:1f:c0:55:32:25:b4:
                    99:76:ac:92:17:68:b2:5e:12:0b:a0:01:c5:37:46:
                    46:ce:1b:a3:42:1e:64:9c:8c:31:0c:ec:77:fe:45:
                    b6:bd:9e:80:df:50:a0:7c:c3:68:ba:99:60:d8:09:
                    ef:1e:24:5c:32:fc:d7:d7:18:90:41:46:33:6b:47:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:C2:56:5C:1A:94:1B:77:15:B9:44:77:9F:A9:EB:64:7E:55:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:fd:3b:c8:d7:64:2f:a4:33:b5:a7:51:1f:d0:da:68:3c:
         29:99:93:7a:b1:6b:91:fe:bf:79:9c:78:56:7f:6f:29:a7:68:
         98:16:b0:98:63:31:ed:70:c1:e5:b0:13:d0:fd:71:a7:55:e9:
         be:38:15:71:82:4b:f5:87:96:c8:05:ed:ee:74:5b:fe:7b:6f:
         38:82:90:38:34:cf:48:a9:53:8d:c5:ed:ce:61:bd:88:3f:85:
         28:32:91:ea:12:1f:bb:1a:05:4d:5a:57:c4:ac:09:e7:4b:2a:
         e8:5d:26:2a:4c:62:78:2a:b3:07:50:ff:ee:c7:ed:72:32:c0:
         6f:7e:1c:60:a9:8e:9a:39:f7:08:97:ea:8a:63:29:d7:12:13:
         71:7c:c8:4c:65:f5:50:4f:83:64:2a:b3:d0:68:ba:32:11:87:
         bf:45:09:7e:ed:b3:f2:78:c1:24:0c:68:46:51:e4:8c:37:45:
         a9:80:89:da:b5:ce:69:7e:67:49:0d:cd:05:b8:36:f7:98:28:
         1a:3c:88:3f:e3:e4:c8:e5:82:ef:e9:19:35:29:07:72:24:f6:
         5f:c5:05:a2:ac:4f:9c:8c:df:b4:ec:08:43:22:d5:30:c5:8a:
         ab:ee:7e:5a:23:04:da:91:74:71:8b:04:16:db:5d:7c:57:22:
         1a:c7:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:12:47 2026 by rpki-client