Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9289f80-7fb0-3d93-bb11-60590c94e436.roa
File:                     f9289f80-7fb0-3d93-bb11-60590c94e436.roa (raw, json)
Hash identifier:          UX6hBrmnAaxMwLBbGQz1fHLxiG6QE3Rg2eBNrPb4i/4=
Subject key identifier:   B9:35:49:9A:4F:BF:86:55:58:DA:F8:09:B6:73:55:7E:71:D4:30:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F2ABD000E672AC7C7952C45C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9289f80-7fb0-3d93-bb11-60590c94e436.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     24521
IP address blocks:        2001:470:535::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:00:0e:67:2a:c7:c7:95:2c:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=5f4276d3-6bc4-4e3e-824f-03969fe9949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:94:c4:fc:8d:24:b0:30:8b:60:a1:81:d7:
                    62:78:c8:c4:ce:80:9a:78:31:4b:50:5f:4d:42:f1:
                    e5:b4:14:4c:b5:27:f1:bd:0f:e0:58:c2:97:b5:1c:
                    f1:5c:90:e2:72:b4:ee:96:cd:2d:91:52:fa:f4:08:
                    8e:d6:51:3c:31:57:70:29:65:8d:22:70:7f:7b:b9:
                    d3:a6:65:25:91:34:87:b5:a0:2e:e8:71:97:80:47:
                    bd:ce:20:c2:50:c4:db:d5:27:75:e5:4d:94:1e:4f:
                    5d:aa:ca:60:e7:79:54:b7:8f:e5:fd:98:72:5f:7e:
                    ab:a2:f3:f5:6d:4b:3b:80:95:8a:bb:0d:5c:61:46:
                    3a:50:15:fb:21:68:ca:80:a7:e1:34:7b:48:22:eb:
                    4b:e1:fa:5c:2a:98:82:f7:8c:c2:67:75:0c:ce:22:
                    5b:1e:4f:df:08:b8:c4:96:c3:c9:3c:0d:67:a3:93:
                    97:82:47:2c:96:d0:b9:ce:6c:6b:19:4f:21:5e:ef:
                    27:da:76:48:01:e3:0f:73:c6:31:8d:a7:38:ae:72:
                    b3:c2:21:d4:b9:14:d7:67:f7:e2:3e:62:be:c9:4f:
                    0e:5a:9a:e7:c6:1a:3e:e5:64:64:07:af:ae:33:9b:
                    62:aa:8d:ae:71:ae:28:0f:a2:f3:5a:13:82:0e:ed:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:49:9A:4F:BF:86:55:58:DA:F8:09:B6:73:55:7E:71:D4:30:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9289f80-7fb0-3d93-bb11-60590c94e436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:535::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:de:21:e8:ed:65:3a:9b:6b:3d:79:80:38:af:51:a8:1c:
         30:fe:34:b2:2f:a0:ca:6a:42:b1:e5:39:56:20:48:cb:2c:69:
         13:9e:1f:7f:8c:22:4c:63:66:63:67:38:36:33:50:2f:70:cc:
         46:98:97:a0:03:ba:d5:62:7e:01:3e:21:8e:af:47:cd:31:ee:
         8a:c7:6f:3c:0f:c5:bf:60:cf:77:4e:4b:d3:d9:6d:fb:92:19:
         57:ce:08:d2:ab:05:c5:d9:f2:9a:51:3b:36:8d:b4:9e:fe:07:
         de:84:70:b9:68:3a:5e:2c:1c:a4:37:d4:88:21:1a:2a:1b:a6:
         9e:88:6e:6a:dc:aa:cb:99:13:79:77:c8:c2:40:ae:68:dc:42:
         a4:94:e2:3f:28:f0:98:22:b5:5e:0a:99:e3:f5:68:e6:e1:e3:
         19:f8:5f:1e:2e:32:f2:bf:ae:af:fd:8e:a3:ec:78:07:67:23:
         b9:29:7e:3b:db:18:e0:b8:f2:72:32:60:ac:d0:17:ed:a4:39:
         ef:b4:97:03:bb:e3:ab:5f:f6:d1:57:db:e1:07:15:8f:71:56:
         61:0f:6b:ee:15:67:1e:5a:63:1a:af:35:6f:c1:69:4e:19:8b:
         a8:3b:2d:f3:e7:bc:28:ef:fb:8e:09:fd:31:9d:bb:06:0c:d6:
         a5:93:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:54:30 2026 by rpki-client