Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07adcf45-a1f9-3dc4-82ae-bc89dde87103.roa
File:                     07adcf45-a1f9-3dc4-82ae-bc89dde87103.roa (raw, json)
Hash identifier:          Z3UKgFZKSZr6vJjUJT0Iv2zX+QvShO1MUsam6xbJ4J0=
Subject key identifier:   99:24:65:36:80:92:1C:F0:F6:DD:6B:65:8B:BF:13:6B:00:9A:99:B0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CDF327BFDAA22419013D3BF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07adcf45-a1f9-3dc4-82ae-bc89dde87103.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     59953
IP address blocks:        2001:470:1da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:7b:fd:aa:22:41:90:13:d3:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=3ab033fc-0c5c-4adc-aa31-18b95b37e3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:45:a8:fd:7c:d5:d8:7b:23:60:28:62:00:
                    db:18:6a:1f:ee:b5:4d:67:4a:a3:5f:88:20:97:72:
                    67:14:82:44:5a:9d:97:84:7c:01:ba:36:f9:9d:d9:
                    41:82:f2:60:4d:b5:8e:a8:5d:ea:52:a7:8f:55:ef:
                    f0:51:a0:5b:29:77:8a:da:de:32:aa:e5:cc:65:18:
                    2f:88:f0:e4:65:e8:db:65:50:e6:d8:39:8f:e3:56:
                    77:67:d4:43:3b:10:8b:b2:a5:d0:1b:04:97:b2:29:
                    20:a0:5d:c8:83:c6:90:57:68:48:05:5a:e0:b3:c6:
                    fb:5e:0e:e0:fe:86:f9:2b:62:60:fa:7b:c8:5a:37:
                    e8:97:a4:92:1b:4d:4f:ef:64:aa:bb:e5:0b:8c:84:
                    10:5c:73:96:66:a4:f0:7f:5a:69:aa:91:0a:6b:4f:
                    5c:e6:ee:7f:3d:11:42:11:66:bc:1d:8e:f8:c0:84:
                    21:c0:f9:31:7b:b8:94:bf:62:42:4a:ed:be:c9:f7:
                    37:f3:23:08:94:c9:a5:21:77:1e:6e:1b:0d:ea:d2:
                    f7:96:74:b9:18:c4:dd:4d:d1:33:3d:6b:19:7c:cd:
                    97:33:ca:ba:e9:47:19:3f:2c:57:df:e8:73:6d:cf:
                    1b:63:d6:e0:c9:d2:64:89:c2:1d:56:a7:dc:d8:d9:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:24:65:36:80:92:1C:F0:F6:DD:6B:65:8B:BF:13:6B:00:9A:99:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07adcf45-a1f9-3dc4-82ae-bc89dde87103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cc:89:1e:57:61:32:21:5f:23:65:0d:54:1f:7c:a4:e2:2c:
         e8:77:43:aa:95:01:15:af:94:87:33:01:f5:83:94:3b:ad:96:
         af:2b:d1:98:32:0f:e8:91:30:b4:f9:ae:f1:c7:77:cf:56:73:
         0f:01:d2:f9:8b:83:72:46:c6:f9:b1:51:36:7c:20:37:aa:3b:
         51:35:42:fa:95:9d:4d:f8:fe:7a:80:7c:1f:64:ce:b6:b0:ce:
         df:06:4c:f6:59:9c:56:a1:15:ed:fb:ab:1d:04:43:43:1b:e0:
         12:c7:96:d7:43:45:1d:cf:b0:19:98:4c:e9:4e:5e:04:ec:c5:
         51:5d:d8:2f:c4:c7:71:55:30:91:a7:51:95:59:ca:b7:d4:5b:
         bb:44:21:d7:27:cc:a8:f7:70:5c:ee:39:93:a3:e2:40:5d:f9:
         fd:36:75:2b:1c:56:d1:70:4d:c7:4d:78:30:a7:68:91:da:b0:
         cf:fd:5d:ea:75:08:59:df:a7:e7:44:71:4c:50:02:49:ad:75:
         fa:83:c8:89:4e:72:1b:6d:53:fa:3d:0b:6d:da:7a:52:20:2c:
         b4:c8:02:73:e2:d1:0a:97:97:3b:26:cf:41:0d:2f:51:46:ab:
         eb:1b:90:be:04:c6:b0:a7:2e:13:07:ab:c5:54:2c:94:a5:48:
         87:82:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:57 2026 by rpki-client