Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa
File:                     ac383263-1b8c-3f58-ac73-3a045c9596fc.roa (raw, json)
Hash identifier:          lU5jThUgj2kgQd5kfeo8wMG8wH2miMf2ODyUm9I3y5Q=
Subject key identifier:   9C:E3:34:4B:16:4F:E3:72:0C:50:46:AC:C0:01:9F:F4:DC:F6:07:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CEFF24054421B8F22E4CD6E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     53732
IP address blocks:        2001:470:437::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:40:54:42:1b:8f:22:e4:cd:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=2b407ca0-120e-4058-96b1-8e7f600504bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:4d:61:c6:69:58:dc:55:a8:04:d7:f7:34:
                    d1:29:aa:4a:ed:4e:17:c1:20:10:3d:e2:cb:db:00:
                    a3:85:ca:34:95:5d:92:76:fc:ef:a9:64:6e:a2:ce:
                    a1:bc:fb:88:b4:a6:28:31:c4:66:c2:e3:ee:0b:0f:
                    f1:8d:dc:9a:35:71:c0:86:3d:d2:01:cc:13:34:ad:
                    ec:89:dc:e1:e7:82:86:40:67:28:ed:f1:ab:07:37:
                    45:94:ea:11:27:58:22:eb:e5:27:c2:25:6f:15:b9:
                    4f:ad:c7:5f:2e:e1:8c:82:8e:b7:fa:01:3d:e0:f7:
                    ea:9a:f7:8d:c1:3f:9e:28:57:ac:83:1f:ee:90:67:
                    b1:57:cd:47:a2:65:29:90:e6:a5:05:67:bf:57:94:
                    84:c7:24:cd:d6:6b:c5:46:69:74:31:97:b8:9f:ac:
                    4f:3d:d3:e4:59:e8:48:8b:48:8c:29:d9:8d:37:76:
                    01:eb:33:45:c0:c5:54:10:27:45:13:a7:93:7c:d4:
                    63:7d:dd:fa:50:e6:83:bf:ea:79:15:07:fa:c1:91:
                    2d:76:c8:f4:fd:0c:0a:37:b7:09:ba:bc:76:cc:eb:
                    a0:7b:24:ff:89:6f:95:f3:9a:04:f4:da:6d:fc:0b:
                    20:da:1f:ee:e8:b8:0d:76:2e:f8:b2:da:e7:30:fe:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E3:34:4B:16:4F:E3:72:0C:50:46:AC:C0:01:9F:F4:DC:F6:07:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac383263-1b8c-3f58-ac73-3a045c9596fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:437::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:55:98:45:d8:be:95:0c:aa:c4:90:c6:c9:85:ed:2d:df:af:
         20:1f:b2:43:a7:d5:88:56:de:81:fb:c3:12:7b:7d:0d:74:e0:
         88:30:70:0a:6d:f6:bc:c0:ca:d8:2c:3d:55:f4:c2:8c:03:97:
         48:9c:4d:e8:94:93:2e:10:78:98:43:97:6b:db:75:48:de:32:
         e8:af:9d:24:3d:36:fb:c8:60:d2:28:93:76:b5:ca:87:0f:dc:
         28:89:9c:77:11:b8:90:ca:76:79:30:c0:d3:31:5f:4a:fa:86:
         cf:53:68:bb:0e:82:b4:a2:49:e9:43:ba:99:54:99:93:b8:c8:
         40:83:8b:bd:c4:55:9d:11:e3:b2:55:dd:80:00:73:6d:69:54:
         3d:40:1e:8b:7f:41:83:ef:e3:7b:b0:9a:54:91:a6:c3:4d:69:
         9d:f0:a0:7d:1f:2c:8a:f0:b7:3c:76:9f:05:b8:64:c9:ca:29:
         9a:c4:a5:52:61:22:f4:a5:c9:53:84:27:7b:2f:05:af:77:1b:
         a4:30:9a:fa:10:71:82:ed:6e:88:d7:d4:aa:7b:5a:83:54:97:
         22:1b:e8:8a:fd:9f:9c:68:95:5d:ee:52:9b:7f:fd:31:24:1d:
         6c:7e:dd:0e:90:75:50:1a:74:b9:15:e3:5a:d7:42:da:9a:79:
         b9:10:76:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzv8kBUQhuPIuTNbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
MmI0MDdjYTAtMTIwZS00MDU4LTk2YjEtOGU3ZjYwMDUwNGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbZNYcZpWNxVqATX9zTRKapK7U4XwSAQPeLL
2wCjhco0lV2SdvzvqWRuos6hvPuItKYoMcRmwuPuCw/xjdyaNXHAhj3SAcwTNK3s
idzh54KGQGco7fGrBzdFlOoRJ1gi6+UnwiVvFblPrcdfLuGMgo63+gE94PfqmveN
wT+eKFesgx/ukGexV81HomUpkOalBWe/V5SExyTN1mvFRml0MZe4n6xPPdPkWehI
i0iMKdmNN3YB6zNFwMVUECdFE6eTfNRjfd36UOaDv+p5FQf6wZEtdsj0/QwKN7cJ
urx2zOugeyT/iW+V85oE9Npt/Asg2h/u6LgNdi74strnMP7XEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJzjNEsWT+NyDFBGrMABn/Tc9gcrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWMzODMyNjMtMWI4Yy0z
ZjU4LWFjNzMtM2EwNDVjOTU5NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlVmEXYvpUMqsSQxsmF7S3fryAfskOn1YhW3oH7wxJ7fQ104Igw
cApt9rzAytgsPVX0wowDl0icTeiUky4QeJhDl2vbdUjeMuivnSQ9NvvIYNIok3a1
yocP3CiJnHcRuJDKdnkwwNMxX0r6hs9TaLsOgrSiSelDuplUmZO4yECDi73EVZ0R
47JV3YAAc21pVD1AHot/QYPv43uwmlSRpsNNaZ3woH0fLIrwtzx2nwW4ZMnKKZrE
pVJhIvSlyVOEJ3svBa93G6QwmvoQcYLtbojX1Kp7WoNUlyIb6Ir9n5xolV3uUpt/
/TEkHWx+3Q6QdVAadLkV41rXQtqaebkQduA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:55:36 2026 by rpki-client