Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2356b30-0f82-381d-a302-32bd1a6612c6.roa
File:                     b2356b30-0f82-381d-a302-32bd1a6612c6.roa (raw, json)
Hash identifier:          8+L5nMUmgnKHJqmr2DwjQFBVLo8PXf8NkOgPeUmIdhg=
Subject key identifier:   7B:E0:80:4A:58:F5:4B:D6:D2:77:00:FF:D1:A3:C8:AD:1A:D9:94:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA90C213ECDFF74F546FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2356b30-0f82-381d-a302-32bd1a6612c6.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     198408
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:90:c2:13:ec:df:f7:4f:54:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=d8d92b47-e2cf-40c5-bc25-1e31aa139fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:4a:25:64:2f:9a:06:3b:ef:b3:b7:00:69:
                    3a:ea:36:06:c3:cd:4f:e1:5a:a2:1a:0c:d9:8c:5b:
                    e5:2c:36:e9:a8:d9:58:85:05:89:37:34:c9:3c:f3:
                    33:1d:64:fb:95:de:76:8c:8f:25:26:dd:40:7b:6b:
                    0f:9c:91:60:f0:7c:04:46:25:01:a6:31:d1:eb:46:
                    2a:00:2c:6f:bf:e8:f6:f2:78:a4:b1:d3:25:96:71:
                    8e:a8:84:53:27:46:b5:96:c2:01:7a:e7:7e:6a:d3:
                    fb:1c:e3:e2:12:6d:b6:34:68:1f:00:ce:b9:fb:22:
                    8e:52:96:d5:3d:ad:a9:de:4b:8d:e2:0c:d9:7b:83:
                    f2:2c:df:e7:7f:f2:78:b1:63:f9:7d:e7:02:7e:82:
                    ad:ce:2c:16:14:c7:b3:8e:fa:79:5d:a0:20:10:eb:
                    c7:e5:73:88:bf:83:df:f0:f0:b8:2c:12:f8:44:71:
                    7b:e0:6d:87:fc:e4:35:36:fe:45:d7:82:b3:34:ed:
                    6c:d3:26:cb:65:06:fe:eb:49:eb:fa:ba:fa:ad:e3:
                    a6:fc:4e:98:98:90:16:55:bd:b6:87:c7:0e:d2:32:
                    7a:6b:80:18:7c:d8:b2:f4:04:8e:d7:0f:fa:22:80:
                    e8:a8:88:e0:ea:dc:2e:dc:f5:bc:91:65:34:81:3d:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E0:80:4A:58:F5:4B:D6:D2:77:00:FF:D1:A3:C8:AD:1A:D9:94:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2356b30-0f82-381d-a302-32bd1a6612c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:86:a2:4a:af:52:7a:12:c8:b8:9a:92:29:1b:c9:a1:cf:9a:
         5b:ca:d2:f6:1b:6c:99:a6:60:36:0d:50:23:7b:9e:76:88:db:
         88:6d:bf:76:c6:d4:f2:1b:d6:97:79:43:a5:fb:e9:72:83:f7:
         ad:91:e2:83:ea:95:d2:82:bc:4a:4f:55:33:c3:83:57:ba:ff:
         84:ff:72:49:3c:d1:0b:f4:5c:00:dc:4c:06:4a:d1:ed:a3:67:
         9f:25:28:3b:d6:e2:36:7a:ac:f9:92:90:6b:13:59:4c:07:d3:
         70:a6:8f:3f:64:9c:d8:3f:9e:ad:27:3d:30:33:8a:64:0e:2a:
         37:d6:61:08:3e:de:f6:41:87:5b:cf:a0:49:e7:52:be:f1:93:
         f8:9b:28:40:0b:89:d6:46:58:84:32:e0:7b:e4:47:ea:9f:75:
         c5:09:ed:49:1e:8c:a9:05:6a:c8:50:cc:36:da:52:b9:24:83:
         2b:a9:c7:5a:5d:af:41:bb:f2:54:1d:b9:ed:54:a9:cc:c1:54:
         ce:01:e1:51:4b:4f:4f:d3:0a:8e:b9:2b:a9:2e:33:3a:86:8e:
         c0:64:a6:93:c6:05:e9:0c:42:95:9b:94:16:82:b9:f4:95:b4:
         7a:15:e6:a7:1a:aa:a7:c1:bf:b1:29:bc:cf:18:44:eb:49:07:
         a5:2f:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:48 2026 by rpki-client