Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa
File:                     59f6def4-6e3c-367f-8602-c606eec4c6e1.roa (raw, json)
Hash identifier:          zDkEILTQ+xfOOEMjAZVE+AbwRxtptpg0gsVDLe3oYcY=
Subject key identifier:   6E:97:EB:1A:E0:EF:E7:6F:E9:4D:9F:19:AB:FB:DF:2F:60:E6:DB:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAAB44A0BE79DDD8FE4C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     41695
IP address blocks:        2001:470:2a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:ab:44:a0:be:79:dd:d8:fe:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=55ab671b-aa39-4da2-b3b2-27b6027feb42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:4c:b6:67:56:cd:93:54:7d:76:14:74:64:
                    a8:7e:ac:e4:50:ee:78:3a:ef:ce:ab:05:1d:77:5a:
                    11:e3:66:2f:e6:56:34:c5:01:ce:94:a8:92:81:58:
                    05:5f:4f:aa:cf:7b:05:52:3c:01:12:2c:66:4f:4c:
                    cb:2b:b0:32:57:44:3a:0a:91:9a:c0:42:ac:b4:ef:
                    58:a8:a2:05:c8:28:eb:02:78:f3:c4:1b:e6:13:42:
                    ea:39:1d:f3:d1:38:39:8e:34:8d:ad:1a:6b:2f:79:
                    3b:b8:9f:27:bf:73:45:fc:01:c9:87:3c:55:45:5d:
                    85:9f:40:52:5f:48:b8:36:63:39:6e:e7:d2:2e:e1:
                    18:f3:ec:f4:3f:fb:22:b2:37:e9:9a:f4:8b:95:71:
                    50:b4:80:b2:fc:fe:da:37:c3:4e:7c:1a:64:75:ca:
                    11:3a:f5:05:0b:d3:40:e8:29:85:40:b5:24:96:91:
                    35:f6:46:f1:d8:ee:2a:de:50:84:fe:87:f1:c7:bb:
                    59:f3:7e:f2:0e:0f:c1:66:44:d0:c5:83:95:6f:57:
                    5c:85:fe:22:7f:74:a2:35:d1:29:87:e2:50:c2:26:
                    95:bf:07:9e:01:58:ce:cd:8f:c2:95:96:ba:c0:32:
                    b9:4c:fa:e3:a0:9a:8c:bd:c9:95:61:49:f0:8c:9d:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:EB:1A:E0:EF:E7:6F:E9:4D:9F:19:AB:FB:DF:2F:60:E6:DB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f6def4-6e3c-367f-8602-c606eec4c6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:66:d6:e4:36:0d:db:e4:c4:ec:6e:f6:62:22:d4:fe:b1:11:
         85:02:1e:88:e4:2a:c6:3e:d9:02:27:2e:73:7f:3c:da:07:57:
         1f:db:f7:64:5f:51:93:4a:d5:d0:54:2f:f0:3e:38:2e:1c:89:
         da:78:a5:40:81:25:bd:c0:87:90:f0:28:5c:f5:e8:51:b0:12:
         c4:0f:91:93:92:ac:75:b9:57:06:fc:46:90:40:f4:2f:64:eb:
         e7:59:1e:18:84:d9:bf:d7:5c:27:12:b6:73:cf:d6:9c:32:71:
         f6:1b:88:4d:a1:cc:8e:4f:b8:bb:73:8a:b7:e0:f6:f5:e0:8a:
         30:04:10:7d:87:61:49:03:a7:f5:50:0f:ad:4f:f2:f6:46:fd:
         fa:c0:42:b2:e3:42:bd:53:3f:4a:1f:18:8c:8f:35:94:39:56:
         86:1c:8f:8a:69:d0:e5:04:97:90:92:dc:36:ac:9d:cd:64:87:
         1d:f6:89:b2:03:9a:a1:ff:65:2a:12:1f:a6:44:65:80:02:94:
         8a:ca:16:66:5b:89:38:01:94:77:44:55:4a:be:2c:13:f3:34:
         39:5a:05:76:42:ba:e5:6b:ec:df:30:e8:26:34:c6:dd:54:12:
         d5:4c:94:e8:86:7a:63:5b:9c:ca:c7:d5:5c:0a:14:9c:e0:29:
         b1:43:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:09 2026 by rpki-client