Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa
File:                     2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa (raw, json)
Hash identifier:          c+XcPZAqFteGAN33tWmUhvtqrMYi5mHXv2PwBu6jZ2w=
Subject key identifier:   1E:BB:E0:5C:73:76:1D:E0:4F:BB:A4:7C:2B:1B:44:D0:13:1F:80:36
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D86957978BB7B5A3F10D7DB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     50923
IP address blocks:        2001:470:212::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:79:78:bb:7b:5a:3f:10:d7:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=1a0d43dd-579f-4e17-bb88-e496bcb83e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:23:15:30:65:52:2b:3a:63:03:b9:74:c5:
                    07:ca:b3:79:18:36:5f:6e:24:c4:a5:45:f1:ee:96:
                    39:56:54:0b:ea:fd:53:77:e4:2c:19:03:56:47:da:
                    f1:1a:87:02:a1:9c:64:f6:9a:c0:f0:37:53:ed:b8:
                    34:0f:8c:0e:3c:26:22:85:37:e5:ed:d1:51:9b:4b:
                    a5:8c:fd:5a:4e:c6:56:8c:9c:1a:ff:8e:f0:d1:e8:
                    e8:4a:2d:24:79:55:0f:54:54:a0:b7:6d:eb:44:87:
                    52:f5:fd:10:4e:69:21:fe:de:2e:78:e7:f8:a8:6b:
                    2b:76:1a:0b:80:16:97:01:5a:97:11:4a:0f:42:0c:
                    f0:a2:b6:48:b9:bc:2e:a6:44:89:21:9f:78:72:38:
                    c3:08:ec:21:9b:b7:51:dd:ef:ea:70:ba:47:80:a4:
                    c1:79:bb:4a:2b:25:26:04:9d:1b:da:bd:cf:c0:d1:
                    f4:91:e4:29:c9:a8:6e:4a:25:86:65:4d:43:05:cf:
                    16:73:5f:63:41:6c:a3:1b:00:b9:ef:ad:2e:0f:80:
                    69:1d:ae:75:30:4e:c1:11:01:1b:5c:4e:b9:52:85:
                    7e:3b:b8:91:14:98:eb:f4:42:08:05:e0:14:7f:83:
                    97:ec:da:a7:f0:91:74:dd:71:b6:2d:b6:7d:bd:a9:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BB:E0:5C:73:76:1D:E0:4F:BB:A4:7C:2B:1B:44:D0:13:1F:80:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2c2fa403-9f36-3cf6-899d-1d2c2ccb7acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:96:1a:3b:96:3c:00:2c:76:99:e5:11:8b:46:3b:9c:74:
         7c:b0:10:79:99:34:00:c6:d0:5f:2c:77:f9:90:b3:64:17:55:
         6b:55:40:34:af:21:2d:a0:e0:f0:e9:60:bd:e8:23:a3:ac:cd:
         3c:ef:cd:23:04:82:e5:1b:ba:e9:a6:a1:20:1c:f1:8c:1f:39:
         f4:06:13:43:b2:75:8d:a0:d9:c4:39:b0:55:8f:f4:8c:7f:97:
         cb:f5:1f:54:f6:1b:5f:ce:7e:e2:71:d8:7d:29:fe:6f:c4:d1:
         83:f0:a3:a1:86:d1:ca:e5:58:90:3a:9e:5d:ba:f2:25:cb:54:
         46:eb:92:cc:08:9c:62:dd:36:83:92:5b:82:58:5a:e4:35:b9:
         92:bd:5d:45:65:8f:9d:f6:77:8f:b4:65:12:4c:f9:24:85:b8:
         31:b6:45:b8:68:a8:43:77:04:ea:f2:ff:e2:20:15:e8:d0:f4:
         85:f4:b8:b4:2f:9a:fd:52:b9:d6:85:3f:88:6b:b8:3b:97:a0:
         a2:8b:9a:46:25:19:20:93:0d:aa:4c:2a:e0:f0:21:73:cb:20:
         31:b9:89:34:8a:cc:09:11:07:68:4d:7a:6e:c0:c5:24:64:78:
         90:8d:fd:bf:47:71:61:33:6a:30:f1:42:67:9c:ca:0e:de:51:
         ce:3d:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:02 2026 by rpki-client