Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa
File:                     a45e4c31-8efd-3023-9f76-b2204a6a884e.roa (raw, json)
Hash identifier:          +zTga9LGeLVKI3oxEt3xV1/6lkingDYivzQm0q0eNUw=
Subject key identifier:   33:23:53:E7:30:0E:F1:52:29:88:D5:0F:F3:A0:02:4B:49:CF:BB:F8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E131980827CD5F0E2D4EB2D50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     17306
IP address blocks:        2001:470:4e7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:80:82:7c:d5:f0:e2:d4:eb:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=4f37f0bd-0cba-4df3-9b97-5018c793c008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:11:dc:cb:29:20:bf:b0:9d:72:be:9e:8c:
                    65:40:55:e7:37:e8:37:3a:8a:e8:db:c4:29:7c:ed:
                    4e:ff:1c:57:f6:ae:c8:77:48:63:a8:88:ac:ad:36:
                    a4:c2:64:c4:54:59:c7:46:e6:59:14:ac:fa:1c:99:
                    5e:e9:59:f7:dc:67:8e:5b:ce:54:37:d8:21:70:9d:
                    3d:28:f7:90:bd:96:4e:57:e4:73:2d:8c:cd:4f:89:
                    db:1a:bd:19:40:f2:d4:5a:41:70:69:d0:9b:25:f3:
                    a3:79:1c:2c:47:5a:f9:2d:40:d0:87:61:73:c4:82:
                    75:84:76:99:06:08:8c:83:a3:c0:b6:11:7b:78:51:
                    91:da:8f:8b:98:9f:46:1f:ca:aa:e5:2b:85:a2:36:
                    c6:01:17:70:c2:74:dd:e0:8d:83:e8:62:88:74:29:
                    52:6a:bb:38:cc:32:a3:fb:64:91:82:d9:8b:b3:00:
                    a9:48:69:37:90:b6:36:de:c7:81:51:fa:8b:9d:78:
                    e3:f0:e4:d7:fc:48:4f:42:03:b7:fc:4a:c6:fc:30:
                    08:a8:9d:c9:ab:37:c9:75:af:a0:06:c9:6a:ba:22:
                    c2:04:a7:e6:f3:be:b7:e6:f2:b0:99:d5:4a:d7:f5:
                    b0:85:90:21:a8:82:0b:13:fb:68:c8:5c:55:eb:97:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:53:E7:30:0E:F1:52:29:88:D5:0F:F3:A0:02:4B:49:CF:BB:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:df:e9:0f:98:49:cb:45:ec:6c:97:0d:6c:f7:ef:87:1d:
         49:19:53:fd:7b:0b:af:90:bf:30:2b:a1:80:2c:35:07:29:b4:
         b6:ba:98:e2:f1:1f:9c:77:21:8a:8d:db:0b:78:2c:46:8c:12:
         af:77:b0:38:5b:d3:16:2e:e0:41:da:8c:f7:c7:c2:4b:b9:66:
         81:d4:0d:85:b7:b0:6d:94:8a:05:2e:25:79:64:f1:30:62:b4:
         7c:e3:9d:7b:fd:d4:d5:a9:21:9c:c9:2c:ac:b4:a8:5a:c6:14:
         e4:06:3d:3e:25:6c:fc:44:4c:5f:f9:3e:09:6a:e2:71:a0:be:
         42:73:b6:ad:c7:02:e9:d7:4b:71:8b:99:a4:28:2b:aa:6f:44:
         97:bf:68:37:06:d6:ab:83:87:50:bd:96:d2:0d:70:c6:81:40:
         6e:9b:3f:bf:95:e8:a9:46:02:17:ba:3c:1a:5c:39:e0:ee:6e:
         89:72:14:fe:57:59:fa:14:b5:5c:93:2a:37:e5:f6:9c:35:07:
         77:5d:76:f8:d9:59:46:7b:3b:15:72:69:01:56:f4:a3:94:a8:
         5d:fc:18:dc:69:39:62:7d:37:fd:a7:8a:01:5f:89:b9:6b:d8:
         65:d5:94:d1:9b:08:76:13:20:87:c0:d5:32:d8:8e:34:51:92:
         14:77:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:14 2026 by rpki-client