Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa
File:                     8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa (raw, json)
Hash identifier:          Hxn2f1P4GpUK/7AC2vnBfYJ5B16Mw26zsZXH0jit/Es=
Subject key identifier:   81:FC:3F:EE:62:B6:AD:41:4F:DE:64:73:8A:7A:5B:EE:D1:7E:51:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CC6121ED36F1E1E59938454F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     399055
IP address blocks:        2001:470:42a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:1e:d3:6f:1e:1e:59:93:84:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=4c0c2bf8-6ccc-453f-bfe9-f8eb923c16f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:1f:9b:1f:24:34:c7:3f:a2:28:b9:38:3c:
                    bf:cb:99:27:b6:3f:04:8d:07:ca:c8:ce:e5:84:3e:
                    03:db:5f:f6:0d:39:95:5a:c5:a5:97:8a:55:42:b6:
                    eb:bf:2c:f5:bd:9a:78:fd:86:b6:7b:82:0b:8b:ab:
                    3c:71:37:1b:f8:e4:df:97:ce:ab:f6:d4:92:29:27:
                    e8:f6:23:a0:58:3c:d5:b0:71:a1:dd:d2:6a:5e:35:
                    1f:ea:1b:83:10:00:6b:d3:7a:c4:f7:f6:4a:2f:d2:
                    39:92:28:da:4c:5e:fa:9c:58:64:cd:38:31:f2:2f:
                    2b:ed:e0:14:c0:18:b9:3f:d4:be:23:b9:7e:6c:70:
                    ce:35:59:23:2b:a3:07:ca:dc:6c:8a:81:ff:67:94:
                    98:1c:07:51:4e:83:1b:33:87:fe:f2:b7:0c:6f:c9:
                    45:05:24:bf:da:ae:98:16:24:80:88:f8:c2:58:f6:
                    24:c8:4c:d0:17:ba:14:39:f0:8c:af:08:e2:74:0d:
                    cb:fc:d9:11:9b:1c:39:28:0f:ec:38:cd:6e:cf:eb:
                    76:a3:17:a1:0d:0b:27:25:c2:92:53:12:95:c6:1b:
                    7d:50:22:a5:23:72:00:b2:ec:b6:2d:19:18:a9:e0:
                    2e:e7:b9:3e:04:92:5d:ed:c8:94:ab:a2:d2:cf:e5:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:3F:EE:62:B6:AD:41:4F:DE:64:73:8A:7A:5B:EE:D1:7E:51:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8482ed52-5c1a-3f8d-a5c4-30103edb138e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:42a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:72:c1:e8:8d:59:67:ac:6b:48:58:b3:0f:31:db:6a:54:fb:
         c8:83:2d:05:49:1c:af:66:32:5e:e0:13:21:9f:bb:70:59:5b:
         2d:3d:9f:c2:67:11:f8:3d:d5:9f:32:52:49:fc:67:e7:60:74:
         64:6a:b1:8b:fe:2e:ca:53:6e:16:18:07:d6:2e:bc:95:f9:68:
         b4:51:41:56:4b:6a:97:07:f0:34:83:52:77:a5:cd:3d:e4:9c:
         97:a7:84:93:c6:9f:79:1e:d4:a0:c2:fa:bf:9c:6b:ee:ec:8f:
         14:53:6f:19:96:81:97:8e:0d:cd:de:20:2f:a7:e1:dc:53:4b:
         ed:cb:90:25:35:6d:aa:7a:5c:52:c0:56:ec:87:77:8f:5b:b0:
         15:de:81:3b:1c:b8:90:e0:f4:06:7f:c8:62:24:1b:2c:0b:b7:
         13:c2:01:a5:6b:f7:86:4b:a6:cc:a1:35:ed:a7:03:be:0f:09:
         0b:4c:6d:03:a5:86:4d:52:06:52:48:35:90:5e:5d:e6:d0:95:
         d5:6c:99:e9:26:0d:0c:87:00:5e:1c:e6:ab:6e:38:86:b2:29:
         a5:0b:21:83:32:b4:83:cf:12:84:f0:8d:7f:bb:26:9d:c8:28:
         59:ca:c8:bd:4e:b8:67:8d:49:f0:63:3c:a7:b5:22:c7:4d:93:
         c8:f1:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:45:48 2026 by rpki-client