Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa
File:                     880d49ca-e401-311f-a067-ae0de57822c1.roa (raw, json)
Hash identifier:          Isd3oM2ESFhTHEBuwr41SrLJq7GnIGEsW1xaIQnKT64=
Subject key identifier:   18:5C:2B:75:BB:DA:08:9E:CD:B2:5B:A1:A8:B0:F5:F2:15:A0:6E:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8E85193BC1CD104A3500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     9416
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8e:85:19:3b:c1:cd:10:4a:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=837bf5ae-5f28-468a-97c1-a9c9f1213f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d3:d6:e7:3d:38:fd:3d:e6:b5:cf:1f:4d:43:
                    42:1f:6f:6e:d2:b7:87:e8:10:52:29:cf:ee:a5:8c:
                    47:e5:58:ca:05:f6:a3:6e:cb:d8:54:ff:ab:38:a7:
                    20:6e:b3:09:fc:5a:f4:55:1e:8b:20:c4:df:47:51:
                    77:9d:cd:42:d2:8d:46:ef:3d:d1:cb:7f:5a:8d:be:
                    72:8a:25:5f:a9:bb:af:c2:d4:ef:4a:fa:93:aa:d0:
                    1b:7b:8d:28:6d:5c:33:93:22:e7:e6:21:92:0a:50:
                    1f:f0:d3:e9:e8:a4:af:ac:05:63:dd:dc:39:c6:ff:
                    44:ae:2a:c4:5a:92:ad:6b:ce:88:90:20:fc:cf:30:
                    91:6e:d9:87:08:44:f3:68:44:d6:cc:fe:1c:24:30:
                    f9:b9:f5:20:0a:7f:15:88:c7:ad:4a:3e:18:b3:cd:
                    1d:d4:72:6a:eb:07:a6:c7:02:11:47:29:3e:fe:dc:
                    a6:93:37:19:43:9c:95:3e:c5:e7:d8:27:7a:80:bb:
                    1f:5e:63:1f:8f:a3:ba:c4:4f:69:83:d8:f3:a2:22:
                    2b:6b:be:04:2e:aa:ba:7e:97:ef:2c:fd:af:e1:3b:
                    38:e4:b1:f4:61:e2:13:27:50:1e:e2:b2:b3:2f:b0:
                    c1:b8:3f:72:06:b7:6b:20:9b:4c:6f:54:f4:7c:3e:
                    0e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5C:2B:75:BB:DA:08:9E:CD:B2:5B:A1:A8:B0:F5:F2:15:A0:6E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/880d49ca-e401-311f-a067-ae0de57822c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:41:7b:bb:10:d9:6f:99:43:7f:e6:01:61:a1:af:fb:48:
         eb:f2:8d:a4:98:1f:c1:f7:cb:e7:f1:f3:27:44:3d:b0:22:9f:
         71:9a:8a:18:70:66:38:53:d3:3d:84:a4:84:3f:6f:96:4b:5e:
         78:67:b3:f7:10:e5:00:61:2e:e6:7f:f6:96:11:2d:e4:3e:98:
         90:db:74:bc:3f:d8:fd:58:52:ea:27:5a:2a:ea:73:ed:32:64:
         4c:bb:ce:d6:cf:ad:c2:68:da:8d:86:38:7c:0c:cf:7e:df:31:
         1c:ce:72:b6:e9:fd:b4:45:2a:c8:48:c2:e7:ea:cc:ca:70:73:
         cb:cb:f2:e8:cb:56:d5:59:42:8f:c7:b8:a6:83:c0:54:af:ce:
         98:72:d8:52:0f:b1:6c:fa:55:fb:d0:b8:82:36:e4:c3:f7:08:
         d7:ae:9a:01:1b:ed:f3:51:ce:a6:c0:73:b4:14:66:f5:27:86:
         fd:34:68:2a:7d:2d:ce:a8:57:7a:0b:bb:e0:d3:ab:2f:5e:26:
         98:10:4e:1d:61:be:89:d6:33:71:88:42:e8:e9:4b:cb:ed:20:
         ff:7d:ec:ae:f2:01:c4:ca:5a:35:a1:38:47:69:2d:6d:0d:f6:
         2c:50:d3:ea:01:c7:09:ae:c1:f0:fc:94:cb:4d:dc:7a:31:0a:
         0a:56:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:19 2026 by rpki-client