Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa
File:                     bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa (raw, json)
Hash identifier:          ExckyzdDpt7BHr6lxyRLxZKCs7uU0EtAuBInoNv7vLQ=
Subject key identifier:   6F:48:B6:F9:DE:DF:02:9E:E8:FC:F6:52:26:E9:8D:AF:BA:B8:29:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA95FFA386D6311DBC448
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     136897
IP address blocks:        2001:470:255::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a9:5f:fa:38:6d:63:11:db:c4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=e3db615f-56be-4853-9d91-2a546c53e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:e1:3d:27:f1:5b:e0:21:a5:1d:5f:3f:a1:
                    dc:82:ff:a6:f6:17:3a:49:02:20:39:4d:40:09:37:
                    f0:83:74:f1:21:35:22:e4:17:3a:8e:04:9c:ce:29:
                    3f:a3:67:31:6b:5b:0b:51:21:09:94:af:e3:a8:83:
                    eb:7c:f5:30:f7:9d:be:ad:e9:c1:d9:7d:a8:fa:7e:
                    03:2b:20:0f:dc:4a:20:a8:5f:f6:d3:68:80:9b:fc:
                    e6:ab:74:2e:b9:23:e5:01:16:72:bb:1d:55:32:b7:
                    da:45:b7:a1:a0:ee:94:eb:24:a1:2f:5d:f6:97:a3:
                    ac:75:2a:ff:a4:65:97:01:42:35:50:2d:4d:44:8b:
                    6d:ac:6b:80:49:65:fd:23:a1:b1:e6:f7:b1:22:f5:
                    c5:ba:30:90:34:75:47:08:7d:87:e5:52:ad:9e:3f:
                    50:e2:33:2b:12:9e:81:0c:cb:58:21:69:0c:2d:8b:
                    14:c3:b5:ef:4a:9e:d6:1d:f4:82:2f:82:74:32:4e:
                    5a:1b:6a:9e:b6:95:7d:14:f4:74:93:79:80:c2:58:
                    f5:bc:23:cc:ed:fd:4c:fa:53:33:bc:37:7b:3a:2a:
                    66:a0:a2:ed:4b:b4:ef:7a:1c:72:77:62:be:f9:11:
                    a5:06:dd:8c:b7:27:95:4f:88:8f:5a:b3:11:0a:d0:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:B6:F9:DE:DF:02:9E:E8:FC:F6:52:26:E9:8D:AF:BA:B8:29:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bbf3ebf1-63de-3a9f-90b1-85359b49ae71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:255::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:59:8b:b0:64:11:57:bf:a4:36:98:7d:43:38:c6:90:76:99:
         4c:1a:2f:b4:f0:a2:1e:37:d4:d2:7d:99:48:bc:8e:12:57:5a:
         33:7a:a0:ba:94:83:29:fa:52:96:48:c4:1f:be:dd:5e:5c:36:
         0d:75:36:e1:38:a3:23:33:d3:dd:99:a1:60:29:39:74:4b:09:
         0f:5c:bf:8c:68:11:5b:e3:9f:11:45:9a:8b:89:42:6f:9a:e1:
         23:fe:f5:28:a3:bf:5c:bd:bf:86:3f:98:6d:a4:bc:e3:67:e6:
         f3:83:d2:ce:4f:a6:56:67:50:0e:95:68:e5:38:37:e3:b2:35:
         27:2a:79:ec:db:d1:54:4c:24:bf:75:f7:d2:0e:47:82:e7:ee:
         ee:ae:9f:0a:2b:30:df:15:c9:0c:37:28:a4:89:a7:bf:cc:5e:
         29:84:a1:fc:a9:94:6e:e7:2d:38:a4:cf:4f:05:e3:ce:07:f4:
         93:1f:15:4a:72:b3:37:0c:19:77:8b:cd:75:a7:b8:6b:70:c5:
         be:d6:1e:00:eb:f0:d7:02:77:61:e2:23:94:51:73:d8:a1:53:
         9e:cf:d7:72:92:49:29:57:48:da:bb:31:b3:e1:46:9b:db:88:
         7b:21:f8:a1:b6:83:c3:44:4c:6f:5e:60:4f:bf:85:b4:a0:39:
         81:4c:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:50 2026 by rpki-client