Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa
File:                     7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa (raw, json)
Hash identifier:          TuVWFV+KtI8athCfGhowqLgGhY7OWeqtfKrbTwohgp4=
Subject key identifier:   C4:AA:A3:01:E2:32:D8:D2:2B:05:D9:17:9A:5A:65:D1:C3:23:45:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA80D4EA74207598104F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     18865
IP address blocks:        2001:470:2e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:80:d4:ea:74:20:75:98:10:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=f257d73e-ba68-43cd-ae92-0163735f9a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:40:1a:14:15:6a:e3:5c:9a:88:ca:77:02:
                    04:5f:6b:03:ac:f9:d3:fd:22:d5:d5:e0:f8:c7:3d:
                    dc:34:2e:95:2e:52:ce:2b:03:ec:58:83:bf:a7:3f:
                    b4:08:d5:da:e0:4b:9c:f2:9e:0f:c3:9f:99:b7:83:
                    99:2c:07:cf:40:59:96:a8:3d:4f:18:a5:b4:7c:40:
                    f9:dd:62:60:19:94:36:a1:b8:02:2d:07:df:ee:78:
                    d4:be:f3:35:15:c6:4c:e8:67:41:25:d3:c9:93:df:
                    56:c1:6d:28:15:89:a1:00:d0:6f:ec:7f:60:49:49:
                    c9:4d:01:53:28:67:1a:82:e7:e2:8b:27:5b:48:cd:
                    32:77:19:c4:12:4f:c4:e2:7c:c0:3d:13:6e:37:87:
                    51:68:7d:00:f1:8f:f6:e9:ff:f3:0f:97:b7:e1:07:
                    de:92:7d:9c:54:8d:d0:bd:cf:c1:05:a6:b1:4e:7c:
                    d3:89:b3:2b:ef:57:e7:b8:dd:98:52:37:ac:8f:66:
                    31:85:31:b1:90:a9:ba:cf:78:84:d7:eb:28:ef:21:
                    02:53:9c:b4:0a:09:c7:91:92:89:ac:87:80:a4:4c:
                    64:78:be:69:2f:61:83:94:91:c2:bd:41:96:f2:cd:
                    dd:87:5d:8a:0d:e3:96:29:f5:10:41:83:6a:0c:aa:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:A3:01:E2:32:D8:D2:2B:05:D9:17:9A:5A:65:D1:C3:23:45:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7ba4d2cb-d861-3202-a43a-d95e61246ed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e1:20:31:c5:83:77:bf:02:5d:59:b9:2d:9d:44:9e:ef:e3:
         36:c1:8c:15:81:6e:91:8d:ab:40:c4:42:7b:a1:73:c6:52:14:
         82:ef:1d:f7:d3:b9:95:6b:63:3a:76:c2:dc:78:55:f8:4a:8d:
         92:31:6f:c9:4c:39:be:f5:ae:43:1f:21:5d:8f:00:c3:35:e2:
         3a:c3:77:55:5a:89:25:48:bd:64:8d:f0:e9:22:ac:c8:40:af:
         91:1a:58:9e:17:5e:7a:c0:9e:18:c4:1e:b2:1e:3e:0b:8e:3a:
         c9:8a:dd:7d:e3:56:05:d8:33:69:35:46:7e:a7:05:e0:1c:14:
         52:ea:74:92:18:c7:45:8e:23:ec:e1:b4:bc:85:11:f7:5d:ea:
         43:37:c9:c3:35:33:1b:f2:83:94:e8:3b:c8:9a:93:23:2b:78:
         b7:bc:04:bc:e6:7e:3f:83:7c:29:09:46:72:64:62:fe:aa:2e:
         96:e2:d0:4b:ab:9f:71:cb:6c:af:cf:92:e0:7c:8e:ec:ce:b0:
         c1:76:15:d0:7c:6b:10:3b:a4:21:92:db:a4:3d:b3:38:25:57:
         9f:90:08:c7:09:56:e4:c8:0e:63:cb:0b:59:51:9c:10:3a:22:
         c7:89:49:76:9e:31:dc:a4:c7:dc:b7:ba:5b:0a:e5:25:12:03:
         fa:94:7d:24
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oDU6nQgdZgQT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZjI1N2Q3M2UtYmE2OC00M2NkLWFlOTItMDE2MzczNWY5YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfFAGhQVauNcmojKdwIEX2sDrPnT/SLV1eD4
xz3cNC6VLlLOKwPsWIO/pz+0CNXa4Euc8p4Pw5+Zt4OZLAfPQFmWqD1PGKW0fED5
3WJgGZQ2obgCLQff7njUvvM1FcZM6GdBJdPJk99WwW0oFYmhANBv7H9gSUnJTQFT
KGcagufiiydbSM0ydxnEEk/E4nzAPRNuN4dRaH0A8Y/26f/zD5e34Qfekn2cVI3Q
vc/BBaaxTnzTibMr71fnuN2YUjesj2YxhTGxkKm6z3iE1+so7yECU5y0CgnHkZKJ
rIeApExkeL5pL2GDlJHCvUGW8s3dh12KDeOWKfUQQYNqDKp/iQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMSqowHiMtjSKwXZF5paZdHDI0W9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2JhNGQyY2ItZDg2MS0z
MjAyLWE0M2EtZDk1ZTYxMjQ2ZWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALLhIDHFg3e/Al1ZuS2dRJ7v4zbBjBWBbpGNq0DEQnuhc8ZSFILv
HffTuZVrYzp2wtx4VfhKjZIxb8lMOb71rkMfIV2PAMM14jrDd1VaiSVIvWSN8Oki
rMhAr5EaWJ4XXnrAnhjEHrIePguOOsmK3X3jVgXYM2k1Rn6nBeAcFFLqdJIYx0WO
I+zhtLyFEfdd6kM3ycM1Mxvyg5ToO8iakyMreLe8BLzmfj+DfCkJRnJkYv6qLpbi
0Eurn3HLbK/PkuB8juzOsMF2FdB8axA7pCGS26Q9szglV5+QCMcJVuTIDmPLC1lR
nBA6IseJSXaeMdykx9y3ulsK5SUSA/qUfSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:00:02 2026 by rpki-client