Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa
File:                     8d208335-d6d4-33c8-ba28-ed144153a1fc.roa (raw, json)
Hash identifier:          bSQGT4Ub6E7ypGU86qy82z2HNFf2KnnZcnu+0C51F08=
Subject key identifier:   C8:B3:55:BD:DB:A1:EB:62:E5:E1:F0:54:C4:ED:58:78:6F:3A:E1:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA57D3E73CCED50FC6980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     46925
IP address blocks:        2001:470:1ea::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a5:7d:3e:73:cc:ed:50:fc:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=324067f1-442d-4abc-b4af-dd63b03b00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b6:b9:97:18:60:18:d2:0c:24:e0:2a:ce:a8:
                    16:db:fe:1a:7d:54:2a:e6:cd:28:2e:9e:87:af:68:
                    9e:01:a8:10:60:94:32:53:dc:64:ab:fb:82:5a:7f:
                    c0:d7:13:0e:df:dd:0b:4f:a5:a6:8d:f3:03:0b:3b:
                    a2:01:46:47:ea:0a:d5:3d:d9:20:8f:e0:83:e2:17:
                    48:15:6c:06:b8:c5:66:86:03:bd:33:37:41:da:83:
                    a2:16:57:51:0a:70:d4:12:69:3b:1b:93:5c:8b:52:
                    b9:98:a5:90:b7:d9:30:ee:db:7e:cb:53:55:c3:e7:
                    9a:d0:fe:64:b3:68:57:e7:7a:c7:a7:da:26:f0:43:
                    9e:2d:bb:88:86:e8:f4:7a:f8:7a:9d:44:1a:9a:12:
                    74:03:6e:fa:be:4d:b0:b0:0d:c0:dd:d7:8f:ba:81:
                    83:5b:74:4d:44:96:e4:83:98:ae:59:f4:e2:76:0d:
                    22:bd:5d:c7:af:f0:1c:45:80:02:88:96:73:8d:af:
                    b4:ea:21:b0:1b:91:10:44:6a:7e:cd:19:65:33:da:
                    32:0a:2f:5f:bb:cc:bc:fd:9c:40:ff:d6:38:54:b2:
                    bb:24:1b:43:0a:ae:ba:27:40:f4:72:6f:f9:72:26:
                    9b:63:59:b3:42:ec:82:10:19:da:d5:76:d3:f9:6b:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B3:55:BD:DB:A1:EB:62:E5:E1:F0:54:C4:ED:58:78:6F:3A:E1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d208335-d6d4-33c8-ba28-ed144153a1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ea::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:f5:b0:e7:f3:45:cd:13:85:f3:44:6b:8d:ac:a9:af:43:
         5d:05:c9:bd:f1:10:b9:7a:be:ee:15:9f:56:b5:06:dd:48:f4:
         d2:89:0f:f1:d5:43:03:cf:76:4b:db:2a:f2:b4:c6:a0:00:e0:
         34:d9:e9:88:e3:33:af:62:cb:f8:95:13:9f:4e:98:af:92:86:
         ee:42:67:d1:e8:5f:fd:7e:5b:20:07:ae:d4:d2:a4:e0:78:c9:
         9a:eb:b9:38:85:38:a0:e0:7d:9c:f2:e2:b3:d7:0c:30:3e:a7:
         f6:03:09:dc:ce:7b:cb:9e:c0:8b:3a:e8:32:b2:5b:16:af:ba:
         16:97:0c:24:39:1a:1c:fa:55:3c:05:96:75:7e:0a:ac:8a:21:
         3b:9b:c1:90:4a:e0:c5:dd:8b:a9:af:c7:aa:21:ee:a6:50:83:
         f1:97:59:c5:41:6d:b4:7c:47:aa:37:f2:99:4a:a2:0a:5c:98:
         d1:d5:f3:b6:bf:dd:11:18:e2:a8:de:72:bc:91:26:3c:84:bc:
         78:a2:ea:c9:bd:05:b2:c3:02:94:bf:15:a9:e9:64:6b:24:12:
         c5:f4:7f:0d:71:2b:3d:8b:36:a7:ac:6e:6c:44:a2:cf:7f:6c:
         64:62:9a:09:76:77:54:95:f1:2b:55:2d:b7:30:4f:b5:4e:b8:
         1c:63:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:13 2026 by rpki-client