Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa
File:                     09dda9a6-e41c-32e4-b194-7c3666a087a3.roa (raw, json)
Hash identifier:          7IHv7SUQnXzUBl5t0xTNXHV9i8DXhU1dwLbOYSOKu7E=
Subject key identifier:   F0:37:27:03:7F:F3:32:81:54:DB:20:00:4C:72:67:6E:82:78:73:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA39D766F988C1FA0AE90
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     54118
IP address blocks:        2001:470:79::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a3:9d:76:6f:98:8c:1f:a0:ae:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=643c8c7c-bdca-46c7-91a2-2fd3bf9acbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:59:c1:1c:dc:85:73:28:9e:f8:21:91:f1:08:
                    3d:1a:8f:bd:56:35:f4:ac:db:f0:e4:cb:0d:c2:ca:
                    23:0f:86:4e:57:40:9c:e1:8c:e9:94:d2:9e:be:dd:
                    8b:54:dc:f3:3f:d5:9b:fb:01:42:06:20:32:cd:a2:
                    5d:42:18:53:8b:99:57:b9:5c:2f:a0:47:5d:17:ea:
                    79:d4:ef:1f:22:a6:a0:0c:26:29:73:2f:23:f4:36:
                    3a:42:62:d2:c0:e7:38:2d:6e:3b:5d:ea:79:fc:9b:
                    8b:27:de:d5:45:3d:74:77:01:44:31:82:92:14:6c:
                    ff:2a:ba:1b:15:5f:33:60:b6:14:90:fb:ae:f0:eb:
                    0c:70:19:8f:88:cd:bc:ad:aa:02:89:6d:d2:79:48:
                    dc:5c:f2:62:a6:02:83:61:70:21:3c:5c:45:7c:b8:
                    54:25:75:0f:63:4d:52:88:27:20:ab:00:a0:e2:a7:
                    0a:82:d2:ca:75:99:d3:d8:17:3e:c9:c3:b2:f0:00:
                    fe:b3:ba:64:e1:9e:38:55:88:1c:89:75:af:86:b3:
                    cc:85:79:c4:c2:78:87:c9:b8:ae:79:60:7b:5a:47:
                    8d:f6:74:f2:5c:04:68:15:34:1f:a5:6d:7e:67:77:
                    66:e8:50:ae:c5:1c:05:57:99:8d:a4:a8:54:d4:5c:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:27:03:7F:F3:32:81:54:DB:20:00:4C:72:67:6E:82:78:73:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/09dda9a6-e41c-32e4-b194-7c3666a087a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:79::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:56:3a:67:92:34:e6:2b:5d:d2:04:1b:56:aa:c7:09:61:fd:
         45:ea:00:4e:3d:c7:23:96:04:82:b8:13:88:e2:82:94:a2:6f:
         5b:a6:c7:68:47:ae:59:5b:59:ab:f0:48:08:14:af:78:c0:1a:
         dc:05:8e:2d:0a:26:57:b6:b1:c3:aa:8d:6a:20:f5:c7:68:47:
         67:b0:20:b6:1c:ac:13:0f:2c:11:c8:40:c0:f7:90:8a:be:05:
         32:6f:37:2d:3b:d7:45:01:29:45:f4:10:25:c8:a7:0b:a9:93:
         61:76:0a:bf:88:c3:08:9c:0a:80:58:39:39:6c:87:0f:16:2d:
         9e:bf:d5:79:1a:2c:b9:0b:c9:41:71:e9:27:3f:06:6c:5e:c9:
         98:70:7f:76:7f:39:c4:88:15:ca:1a:a4:33:6c:8d:39:8c:75:
         56:04:a0:75:06:5f:74:9e:55:0f:27:d8:46:30:dc:06:fa:64:
         fb:89:db:52:06:bf:f4:f8:c9:f5:47:ac:0a:f2:f6:35:54:fe:
         15:27:b1:9b:56:0a:42:80:c2:7e:f8:8f:64:56:d3:c5:6c:aa:
         76:8c:17:4e:97:c7:33:08:53:a4:4e:04:a6:84:f3:fb:69:eb:
         5c:7f:cf:c5:66:9d:19:15:f9:9a:ed:8a:2e:13:22:5e:75:5a:
         41:04:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:30 2026 by rpki-client