Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa
File:                     0797caf3-86f3-359d-93a7-b915b3201297.roa (raw, json)
Hash identifier:          DkRjdXOluysnc6dS65JGvaTF5HUhGUeQugRnZR5T0zI=
Subject key identifier:   2F:D9:2A:12:52:A0:D5:A4:3B:27:53:AF:E8:F1:F3:45:AF:12:6A:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA6F34A4EC32D5C70AC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     395029
IP address blocks:        2001:470:21c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a6:f3:4a:4e:c3:2d:5c:70:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=08c04afa-6359-4983-b717-116b7bd65c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:68:00:0f:0d:74:b8:95:9a:ee:bc:94:38:
                    55:a0:25:59:6e:56:93:c6:4a:9c:16:29:f1:01:10:
                    4a:e6:31:df:bc:c0:92:24:ad:2d:18:66:19:11:62:
                    43:74:7a:62:b2:cd:71:95:6f:1a:5e:c6:a3:28:cb:
                    54:72:27:73:32:a6:e6:aa:f6:44:15:ea:25:84:dd:
                    c3:42:54:3d:78:46:d0:57:72:0c:40:1a:b9:44:ee:
                    58:11:08:d1:f0:d0:24:41:fd:c5:6e:30:83:43:03:
                    41:1c:ce:ba:8d:19:6f:a6:77:00:6a:2f:74:28:64:
                    6e:65:f4:4d:43:d4:f7:61:16:01:b5:2d:8b:dd:53:
                    09:4e:e4:a5:fa:f7:71:f4:97:74:18:64:83:26:b8:
                    25:13:97:5a:f5:b7:78:f5:2a:69:96:69:56:96:6c:
                    cd:ed:e1:55:73:c0:9f:f1:db:a7:1f:79:a3:e3:34:
                    12:34:ec:ee:f7:65:90:06:6f:c1:7b:2c:d3:d6:0e:
                    fc:9e:1a:0b:5e:91:e9:f7:ef:a2:8d:54:92:f4:24:
                    9f:60:ed:96:11:19:f7:c1:da:4f:5f:84:a9:ba:00:
                    bd:c5:3f:de:52:04:f5:f7:96:f8:71:4a:a7:74:43:
                    bf:c3:71:ec:b6:77:65:10:29:80:b3:51:7e:5e:82:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D9:2A:12:52:A0:D5:A4:3B:27:53:AF:E8:F1:F3:45:AF:12:6A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0797caf3-86f3-359d-93a7-b915b3201297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:8e:b5:8f:d1:cb:79:24:71:25:72:46:9c:59:7c:93:4c:
         47:6b:90:48:da:76:e8:70:23:c7:0f:60:fb:a1:78:39:5f:11:
         b2:40:78:03:52:2a:80:ba:04:24:49:c9:51:d2:85:7d:38:e1:
         3f:73:61:39:9e:27:0b:3f:f3:f4:7e:05:7f:e6:d5:12:f9:e1:
         7d:17:ba:21:0c:39:59:f6:02:5c:ab:de:b8:a8:d7:74:b5:a4:
         8c:d3:ac:c9:9c:54:6e:e3:e2:bc:fd:39:f8:e0:85:ba:89:24:
         f3:d5:3c:29:0a:5c:47:58:be:81:05:aa:2b:22:75:dc:a8:d2:
         7f:5f:96:db:31:7a:ef:83:94:68:60:f4:67:28:46:1d:d6:87:
         35:30:06:87:11:bc:0a:ca:ac:9f:7b:6c:6d:8c:47:71:8b:bf:
         85:3b:6b:ad:3a:d2:05:5b:5e:82:ae:69:69:d5:b4:aa:f1:85:
         ac:38:94:8f:55:f8:d4:9f:ee:8d:b0:1c:bd:88:e1:9b:d6:74:
         e8:aa:33:16:72:45:e1:df:a2:a5:96:a0:8c:fc:2b:29:1e:6a:
         9f:2f:e7:9b:57:f9:46:40:56:4d:b6:01:05:75:f5:9f:ec:be:
         85:ca:42:ac:7e:bf:3c:7c:8e:ff:d1:7d:6d:f3:3e:ac:fc:a4:
         1f:39:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:48:18 2026 by rpki-client