Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa
File:                     16abd7fb-439b-3e9c-9788-30c7e57768dd.roa (raw, json)
Hash identifier:          i8AZG/GVrB9ag++5v2ly4h71YZKlqZHyfjA/XVhJDCY=
Subject key identifier:   57:E3:65:75:98:76:5F:91:B7:29:23:06:46:BE:C1:8F:0B:4D:E7:56
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA936EC2BCBC169444C480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     18712
IP address blocks:        2001:470:2e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:93:6e:c2:bc:bc:16:94:44:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=30b87d24-388e-48a0-894d-43f01e9273a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:a3:a0:78:95:9e:0d:b8:e1:e5:ab:60:42:
                    1d:91:a0:29:ae:cf:b8:1a:67:c1:ad:61:f4:53:e9:
                    18:db:42:14:f7:c5:88:c6:10:34:fc:64:0c:f7:d3:
                    a8:55:46:24:23:11:b2:c7:02:70:b4:46:0c:1a:84:
                    cc:79:e9:20:44:e0:0e:30:7c:c4:f7:4f:f7:b4:8e:
                    f3:b2:33:c7:01:b2:24:ed:b5:93:34:44:ab:42:c7:
                    a4:49:02:b2:b3:f9:3b:a1:53:29:69:1d:22:5e:1d:
                    17:e4:50:1e:7e:43:8b:35:26:e6:d3:db:e2:6c:b3:
                    1a:8d:b4:4f:04:a8:c6:80:3e:3b:45:2c:30:da:a0:
                    69:3d:eb:09:e3:69:0c:ff:0e:12:f5:2f:e6:ae:fe:
                    21:ba:2f:90:cf:3c:90:68:ef:9c:3e:e2:bf:f5:a5:
                    fe:56:ae:b7:f5:84:28:e2:6e:10:26:32:34:f1:b5:
                    05:c0:c3:91:18:89:49:6e:f5:d6:cb:e5:27:b2:2b:
                    34:fc:b2:cd:da:1e:1a:a3:65:f9:9a:99:f1:1f:55:
                    20:90:44:9f:15:56:02:89:95:1e:68:2c:88:28:32:
                    be:62:94:0c:90:bb:72:c6:c9:15:b5:c2:6c:02:ff:
                    9d:db:7a:03:88:7c:ed:38:2b:2c:71:46:d3:c1:99:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E3:65:75:98:76:5F:91:B7:29:23:06:46:BE:C1:8F:0B:4D:E7:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/16abd7fb-439b-3e9c-9788-30c7e57768dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:0b:3f:80:66:68:a8:97:22:87:a6:a4:18:a2:2c:e9:d6:7b:
         99:68:75:62:1f:79:d5:e7:a0:59:b5:eb:ed:8d:3e:94:6b:d6:
         f1:e1:71:ff:82:f9:29:e6:9a:15:6c:01:1a:e4:86:41:9a:6d:
         64:33:12:c3:ce:15:07:10:9b:02:bf:91:8f:a5:d2:1c:5d:1f:
         98:33:a8:90:d7:0f:bc:3c:b4:fb:95:8a:49:0c:8e:cf:db:a7:
         2f:f6:dc:76:e6:76:5e:0f:75:81:79:73:96:84:54:29:8b:60:
         87:4f:05:a0:a5:3c:d6:46:c0:12:d9:f2:38:ae:ed:02:41:f4:
         14:4c:21:e8:d7:51:a1:01:93:e1:69:a9:fc:f0:86:c3:f2:3e:
         f5:63:8e:d4:f0:b9:cd:5a:a2:22:04:67:24:f0:86:f2:08:bc:
         8a:e7:f5:b9:5f:39:86:a1:b2:fa:eb:c6:22:66:e4:26:a5:69:
         a6:6c:bf:cf:c4:cc:c8:0a:95:95:aa:37:9c:7a:d8:61:24:55:
         69:28:34:dd:d3:26:cf:29:2d:80:63:2e:d5:25:76:29:5b:dd:
         52:f3:43:03:ba:fb:bb:61:b0:7b:b4:8f:93:78:34:52:77:0f:
         86:f5:67:71:30:d4:24:2c:88:3f:ad:be:f9:51:b1:dd:d4:c9:
         1c:36:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:31 2026 by rpki-client