Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa
File:                     5df83117-9d29-3766-92d3-3e97b567cab8.roa (raw, json)
Hash identifier:          +Zq76p+UJ1x/XS7bAS1GDMiWKznWfaegloPtuI+liOc=
Subject key identifier:   B7:C4:58:F4:50:30:53:42:C7:85:1F:9F:C5:F2:E8:81:52:96:6C:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF6FB84B0DA58DFD530ED0300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa
Signing time:             Tue 24 Feb 2026 02:30:16 +0000
ROA not before:           Tue 24 Feb 2026 02:30:16 +0000
ROA not after:            Mon 25 May 2026 01:30:16 +0000
asID:                     27291
IP address blocks:        2001:470:182::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:fb:84:b0:da:58:df:d5:30:ed:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 24 02:30:16 2026 GMT
            Not After : May 25 01:30:16 2026 GMT
        Subject: CN=d5dc43db-a68a-40d7-9109-9171ef7f73dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:d3:c3:da:9f:99:9c:80:f9:58:5a:37:3a:
                    09:a8:38:03:b4:bf:0d:76:bf:c2:25:98:36:01:ad:
                    2f:1f:7f:2e:a4:0e:7f:31:26:ee:13:33:25:5c:07:
                    8a:43:8e:71:3e:63:6f:dd:41:29:a0:ab:97:5a:25:
                    44:60:8c:f2:56:ca:63:45:f2:f4:65:2c:04:9b:32:
                    29:aa:6a:cb:5e:bf:f5:16:3d:cb:bb:5d:93:07:59:
                    48:a5:88:6c:7c:1b:c4:2e:64:c4:25:c6:6e:06:1c:
                    b4:d5:67:ba:09:1a:26:a6:c8:68:ea:2e:6b:e8:bb:
                    b5:e5:0b:13:3c:e8:e7:9a:51:92:46:47:91:49:2f:
                    f4:f5:8c:41:52:b9:71:b7:1a:d2:d7:31:47:cf:b8:
                    e6:d7:ef:00:0d:e3:48:d0:58:23:fe:d3:51:2c:32:
                    d8:ae:7c:37:60:90:29:20:58:61:e2:0c:82:45:b4:
                    ad:55:c5:67:6b:c5:8b:a1:14:27:cf:e8:1f:5a:8a:
                    e1:35:4c:9f:c1:4c:e7:5e:92:aa:8d:ab:29:7c:6b:
                    06:02:f1:83:94:41:a0:85:ab:97:dd:21:92:f2:92:
                    46:30:a6:69:dd:d1:c8:7e:15:18:85:2a:41:93:99:
                    eb:fc:53:fb:01:36:57:da:34:17:3c:bc:e2:24:d3:
                    d6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:58:F4:50:30:53:42:C7:85:1F:9F:C5:F2:E8:81:52:96:6C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b8:88:20:50:fe:fa:dd:93:d6:f9:79:d7:e0:9f:f3:c5:a4:
         e2:35:00:64:db:64:5f:2b:88:80:fc:a7:cd:b8:88:17:5e:80:
         40:70:30:62:39:59:35:ac:39:84:70:89:b6:15:8d:95:18:2f:
         70:4d:2b:6c:48:fa:a6:c7:93:9c:a1:cf:8e:2c:47:1c:ad:cb:
         09:e7:48:6e:9b:2f:76:15:69:70:93:55:fc:bf:42:f1:6c:d3:
         17:d8:52:71:c9:fa:ef:0a:14:44:02:ec:4b:54:d9:e3:74:d3:
         0c:58:0c:05:6a:b9:57:5c:2f:a8:ab:6c:bd:db:41:10:67:2f:
         67:1c:df:fa:ee:69:6d:f1:18:93:74:95:ed:2d:8f:7a:50:7c:
         9b:ae:5a:72:7f:45:c5:0c:e5:95:6f:ac:e3:74:90:f3:7b:71:
         4d:1f:e6:8d:59:a2:7d:1a:ba:ab:69:de:d3:4b:1a:49:3d:be:
         5d:6e:7a:d5:6c:8d:82:e0:cb:a5:9e:d6:6b:8f:58:23:2b:57:
         96:ba:f9:26:50:92:83:9e:a7:76:f6:89:2d:99:dd:97:21:f0:
         38:49:84:fe:71:9d:b7:ce:fb:f6:27:11:02:79:3c:5b:cb:f7:
         1f:21:77:5f:e3:e9:fe:ee:cf:ae:ff:28:ef:c6:02:19:f4:1a:
         0c:e8:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:52 2026 by rpki-client