Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93ea19da-a38b-32cc-bc53-26a4d7a921c3.roa
File:                     93ea19da-a38b-32cc-bc53-26a4d7a921c3.roa (raw, json)
Hash identifier:          BBCQuC080RizhoA4aUmdoaiMJ+ejJqfiK+qP6vIPRH8=
Subject key identifier:   29:32:4A:A2:5D:FF:3F:9D:41:A0:13:CE:76:E0:27:E4:65:A1:5C:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAAAA1FC2900F0FD0A8DD8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93ea19da-a38b-32cc-bc53-26a4d7a921c3.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     48957
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:aa:a1:fc:29:00:f0:fd:0a:8d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=79971310-e6f1-415d-b2a7-8655ac6591c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:d5:1b:3d:58:a3:11:92:70:09:3c:09:da:
                    9b:17:44:55:d6:7f:4f:88:6b:28:9f:0b:dc:78:a0:
                    34:93:8c:7c:c9:a9:9f:1a:7a:b1:4d:fc:50:f4:03:
                    55:a8:d2:7f:07:27:16:4c:34:85:99:1e:19:c2:78:
                    8c:59:df:13:7d:df:27:be:85:04:a2:bb:06:2d:72:
                    58:47:5d:c5:60:33:34:21:aa:c1:78:e1:10:d8:be:
                    6c:02:29:2e:df:d0:f0:dd:10:1c:0f:a6:6f:f8:7a:
                    e1:f4:6e:29:70:ed:2f:24:a8:f7:d8:ae:14:ed:fc:
                    8a:a1:c4:9b:75:51:17:ef:82:80:48:1e:24:e2:c7:
                    93:39:ea:86:23:43:bb:7e:f7:75:1d:27:c6:44:d4:
                    c5:22:2f:36:6d:23:5e:ca:ee:b3:90:d4:45:05:c1:
                    c6:2b:40:28:f4:77:a6:32:69:b9:58:cf:92:65:5c:
                    46:08:63:7d:c1:9a:db:3c:63:e3:5f:2c:ce:92:46:
                    7a:aa:aa:d1:96:b3:ba:1a:5f:d3:f0:3d:0b:69:4a:
                    0c:d6:00:e5:a5:0b:0a:1b:38:fd:ad:4a:b9:cf:6b:
                    fd:57:ec:88:fb:f6:ba:8e:82:8e:ad:70:18:0b:68:
                    7c:ae:3a:f3:41:34:04:03:d0:8f:e9:e6:c5:90:bf:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:4A:A2:5D:FF:3F:9D:41:A0:13:CE:76:E0:27:E4:65:A1:5C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/93ea19da-a38b-32cc-bc53-26a4d7a921c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bf:18:33:67:26:3a:26:bb:62:5e:66:17:d3:cb:d1:7d:9b:
         4b:a1:78:38:05:1b:31:bf:bc:e3:0d:48:0c:24:21:46:dc:2c:
         94:df:55:6c:8d:d5:de:1f:6c:d4:e7:ac:09:87:e5:e7:60:b3:
         78:87:fc:5e:18:da:3e:d9:42:96:91:5f:ca:1e:f0:39:e8:c6:
         6a:70:88:aa:ae:af:44:3d:6b:21:fd:1d:b6:07:e7:a6:d7:eb:
         38:88:c1:25:bf:87:4e:e6:ae:f3:38:f0:c8:04:db:f9:cb:7c:
         4b:88:ad:e6:53:a9:5d:f4:c8:f2:6e:b2:1a:c9:e5:e8:87:41:
         3d:d6:57:d7:01:eb:23:8e:ed:15:e7:52:56:5b:c0:20:87:0f:
         ad:ec:02:ce:d0:08:c0:44:9e:e2:65:d3:bf:d2:98:cd:ca:2a:
         30:c1:58:f9:8b:52:07:a7:ec:7d:78:14:bd:3b:a4:b8:eb:ae:
         eb:91:57:32:c1:fd:08:8a:63:50:a2:26:77:02:5c:86:14:02:
         77:0b:d1:a9:a2:d8:72:a2:cb:13:dd:84:f5:ec:20:38:90:d3:
         1a:98:e2:75:22:08:71:5a:de:13:c0:ef:5b:2a:66:ca:eb:55:
         ed:77:cf:9a:03:0c:32:a8:fc:6c:42:32:c5:58:72:ad:e8:d8:
         95:a6:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:55 2026 by rpki-client