Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa
File:                     fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa (raw, json)
Hash identifier:          Uf0qAmTMGnKwBhvPONHfsa8IOZYkuWZqsbz26qlakUY=
Subject key identifier:   C8:43:70:2E:AB:82:3A:8A:A0:85:09:D6:AF:D6:84:CA:AE:D3:4E:7C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E1B7989B2DAC05D8ABD3E9C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     38439
IP address blocks:        2001:470:40a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:89:b2:da:c0:5d:8a:bd:3e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=b06a4e0b-c9ec-4735-8856-a1a8123ec421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:59:bf:b8:e3:07:8e:5c:b1:06:8d:4e:47:
                    78:e4:8c:82:a6:a6:16:c9:be:a2:8a:68:cc:42:12:
                    36:a3:09:f6:fe:49:57:05:23:c2:5f:55:e3:e5:6c:
                    5a:63:ba:1e:e9:c2:b2:dd:a6:8a:49:fa:41:1a:03:
                    60:0c:e0:68:a3:38:1d:83:43:a0:5c:32:51:7f:96:
                    c0:08:b7:90:dd:a1:3b:e6:bc:04:d3:8f:af:b7:de:
                    94:9a:99:e5:6b:30:02:0c:47:71:c0:18:80:a5:d5:
                    b0:78:ba:a5:59:cf:c1:b3:fa:90:66:ea:39:2a:38:
                    7d:58:fe:d4:08:02:d5:1b:4b:1c:b6:14:8a:e5:21:
                    09:5a:15:cb:7e:95:bc:00:6f:c3:cb:4d:6e:77:22:
                    5e:57:c4:e8:b6:58:54:bc:6c:d0:d6:66:1d:48:f6:
                    1b:33:7e:e4:81:15:8f:b8:be:b3:62:2f:82:51:dc:
                    35:23:bd:61:70:31:55:bc:58:a1:3d:ef:51:ac:98:
                    d2:11:54:aa:76:27:c0:a4:52:b4:d1:aa:88:2d:1b:
                    23:56:42:cf:4c:ea:e1:c4:03:74:93:e1:8c:72:cc:
                    9c:ff:6f:01:51:dd:4e:4a:b2:d2:53:a8:20:1e:28:
                    f1:62:52:87:25:4e:be:17:ac:14:8a:80:d2:17:25:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:43:70:2E:AB:82:3A:8A:A0:85:09:D6:AF:D6:84:CA:AE:D3:4E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:40a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e6:cc:af:87:2c:0a:64:39:eb:8c:fa:42:da:ff:55:a1:af:
         34:8a:09:87:24:5c:e1:1e:f1:5d:5a:a4:fe:f6:dc:e0:83:2b:
         0b:6a:08:42:cd:dc:f7:ed:b4:5b:43:3f:3a:64:ac:3f:e9:0c:
         32:6d:2a:01:4a:96:dc:79:db:09:d9:18:82:fe:b3:e4:77:68:
         51:ee:a5:03:90:d9:b0:20:02:ad:42:2d:14:c3:74:68:6c:95:
         b9:a6:c3:61:3b:c3:7c:0d:c0:f3:f6:7c:3d:0a:39:d7:b2:27:
         e3:8b:8a:30:4e:4c:b1:4a:c1:1a:d4:ae:68:b0:6a:83:49:4e:
         4b:85:0b:fa:47:38:8b:9a:ce:00:5b:4c:7c:64:de:5a:85:c3:
         c4:2e:a9:62:be:ed:76:d7:79:c5:74:b9:7e:77:e8:5c:89:0f:
         7c:33:89:37:42:69:c0:7b:d4:a7:d4:6e:b8:aa:ae:a1:30:bd:
         d7:df:d4:a5:0a:6f:2f:c1:38:fc:fd:f3:bc:e8:53:d4:9b:4c:
         59:2f:dd:95:ad:2d:62:34:0b:da:2c:da:7a:73:db:e7:3b:8e:
         06:7f:19:ba:c0:f8:93:eb:d8:f3:3d:26:b4:27:ea:db:0f:d6:
         d0:fb:95:61:ab:ee:ac:26:7e:13:5f:13:03:35:a8:1b:4f:12:
         c8:7c:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:37 2026 by rpki-client