Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa
File:                     25b45474-d9f3-30d7-af14-7920e9d69bf9.roa (raw, json)
Hash identifier:          IowvuK9iyHdyn8ulm/2X91K4P9qVh97t8RIfX0srki0=
Subject key identifier:   CB:E2:FC:C1:B4:4D:9D:AC:47:BF:9D:64:11:86:EE:AF:78:2F:A9:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA894308AAE6F95C012A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     396106
IP address blocks:        2001:470:db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:89:43:08:aa:e6:f9:5c:01:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=d7fd7bfd-3cb2-411e-b32d-03b3dfdd8a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:2d:2f:98:fa:3a:6f:88:3a:39:ae:4c:64:
                    f3:c5:41:e0:ea:80:81:b1:47:d7:05:74:58:e6:c8:
                    c1:5c:90:67:90:33:84:6c:a1:2a:4a:25:ab:6d:bd:
                    cc:33:0d:48:c5:f3:83:6b:a8:13:09:8d:fc:8e:bd:
                    2f:79:77:44:33:76:de:1d:0f:41:8c:e3:ab:c9:4b:
                    a3:5f:57:a6:a6:77:57:b5:7c:30:70:ee:16:c2:5c:
                    74:7e:0f:51:97:3d:61:bb:f4:32:b8:59:31:da:5d:
                    94:6c:d7:f3:4e:31:73:6a:06:87:17:01:f2:e4:5a:
                    b2:a3:df:1c:cd:66:85:a6:1e:5c:4b:e2:a9:b3:1b:
                    25:6c:94:1b:bd:69:cb:1b:a8:e6:c5:f9:9f:15:5e:
                    b1:14:eb:d7:5c:63:0a:94:34:bb:2d:dd:b3:1a:a9:
                    2c:9f:fe:cb:59:10:9a:a0:23:db:5b:ca:69:9a:cb:
                    ed:74:4e:33:28:1a:38:75:cf:b1:e2:c4:28:e5:80:
                    8b:40:38:7c:ec:04:94:04:ee:5e:ac:e8:99:1c:51:
                    0a:29:49:4d:13:81:9f:5f:0d:9c:c5:37:74:11:b7:
                    07:e0:03:c0:1c:7e:95:98:7c:fb:dc:ed:a9:f2:aa:
                    a9:fb:3f:1c:16:76:23:27:f0:f6:f2:78:c9:c9:f7:
                    71:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:FC:C1:B4:4D:9D:AC:47:BF:9D:64:11:86:EE:AF:78:2F:A9:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25b45474-d9f3-30d7-af14-7920e9d69bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:5c:5f:73:8f:bd:0c:c4:a0:6c:e6:20:6c:25:73:c5:28:
         d8:d6:e1:10:fc:e8:81:53:94:44:f8:67:7d:7c:5c:ce:4b:3c:
         24:6a:b1:7f:28:97:3c:50:a1:00:9b:d8:76:06:84:d1:1a:47:
         f4:9b:6a:e0:f9:00:0c:77:36:51:c9:12:71:67:97:d9:a5:9d:
         28:40:4e:f7:51:0f:f1:34:11:f8:e7:ca:04:62:90:24:2e:eb:
         c6:4f:c0:c0:c6:42:42:e5:b5:d8:1d:92:e4:d2:41:9a:1a:70:
         cf:c5:4d:44:a1:9c:0c:85:dd:9f:31:23:61:8b:de:58:fb:6c:
         da:a3:ca:ac:d3:c0:e6:4e:a4:7a:d7:8f:4e:53:f0:17:b2:ed:
         95:d0:a5:db:5a:76:e2:71:88:bc:e4:fb:b5:94:4c:ad:9e:bf:
         6c:cd:ae:bc:d9:8a:07:a3:48:c7:88:fb:96:22:62:b8:09:c2:
         5c:30:43:3d:25:93:5e:70:77:7c:03:f2:0f:0d:2f:c0:6e:cf:
         ec:22:bd:7e:cb:c8:aa:97:76:a0:ed:06:b0:8c:b3:3c:cd:41:
         ae:31:a6:6d:5b:2c:e5:b3:b0:d7:37:1a:be:9d:f0:37:14:72:
         cf:05:00:d1:2f:06:48:e2:91:40:87:e7:ba:36:30:f2:ed:fb:
         90:07:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:18 2026 by rpki-client