Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c616b816-b4ce-384f-880c-21512e9c221e.roa
File:                     c616b816-b4ce-384f-880c-21512e9c221e.roa (raw, json)
Hash identifier:          LFGScdzI5FuH5vMHDjeScDGynZHwPE7Ijb9bvQQF0so=
Subject key identifier:   38:E7:CD:5A:88:EF:38:C6:00:37:7C:39:C3:1E:FC:96:C7:68:AF:E1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D5CB4F8FAE8EE067171252A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c616b816-b4ce-384f-880c-21512e9c221e.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     201754
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f8:fa:e8:ee:06:71:71:25:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=cdf5916a-e065-4cd7-8e57-57ebc403f122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:8b:3c:83:5e:a7:eb:59:e3:21:5f:f7:bc:
                    da:61:c2:dd:d0:f0:79:66:36:59:29:51:af:50:dc:
                    94:51:b9:9e:93:3c:31:cc:f2:8a:a3:41:f4:ae:63:
                    ca:1b:b5:48:dd:8d:80:6c:bf:de:04:b2:7c:13:d1:
                    41:2e:a7:1f:6b:84:52:6f:a8:87:1e:52:82:7b:5f:
                    c6:73:e3:06:49:23:50:76:27:97:b2:49:48:d0:0a:
                    e0:0b:7d:4e:db:d4:7c:4d:f0:63:f5:8b:7f:64:93:
                    c4:f4:45:ff:70:9b:1c:02:9c:39:da:a9:d2:f4:69:
                    42:cb:a1:06:b6:1e:cd:82:7b:2e:d2:cd:23:01:58:
                    09:f4:24:82:79:55:29:f0:1f:0b:e8:43:5f:c0:8e:
                    40:08:7d:ea:fd:ef:d1:be:15:cd:7e:ba:9d:75:fd:
                    e0:68:57:bd:4a:c4:2b:66:ee:f5:f7:db:18:57:64:
                    92:ef:fb:8f:90:29:fc:47:d1:b2:30:54:2e:87:a6:
                    7c:5d:01:59:e8:68:c7:ed:4f:37:4e:83:86:60:75:
                    de:8e:eb:78:f2:84:45:a2:68:21:72:a4:c5:84:11:
                    a3:eb:4e:02:a8:41:e4:88:15:4c:d6:4e:08:35:c8:
                    58:27:6a:3b:5d:d6:5c:80:f3:c1:87:cc:d7:b3:2a:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:CD:5A:88:EF:38:C6:00:37:7C:39:C3:1E:FC:96:C7:68:AF:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c616b816-b4ce-384f-880c-21512e9c221e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f9:28:fd:57:dd:1d:09:3f:b2:44:20:9d:ce:24:d1:f5:07:
         09:5b:9b:44:45:d3:8e:09:e6:b8:49:1e:b8:77:86:da:bd:89:
         51:e2:bf:49:3a:3d:76:63:bd:c3:38:3e:3b:b0:53:13:a3:61:
         ab:e8:41:5f:ca:20:73:ff:4f:ac:ba:ed:cf:42:e6:12:10:5c:
         b8:33:9b:79:d7:f7:3d:a5:c7:bc:af:0e:a9:9a:59:20:db:3e:
         f2:d8:83:25:5e:f8:88:32:b5:9a:3e:83:49:5b:14:0c:59:74:
         4a:b0:6d:d7:aa:14:34:d8:25:94:c3:d8:60:1b:9a:df:09:ca:
         1c:79:f7:39:14:8a:74:3c:eb:be:20:b5:47:a1:0a:78:7b:e8:
         37:12:1c:36:6d:e8:5b:d6:c8:79:ca:91:49:d4:bd:a9:60:d6:
         f2:b4:6f:ca:64:a4:98:cb:a7:16:a7:f5:50:88:eb:dc:16:53:
         23:bf:35:d5:75:a7:06:6f:92:a6:e0:9e:2a:0e:76:2e:02:c2:
         b2:57:6a:45:10:e9:0c:d0:e1:14:93:f5:20:f8:d0:f1:f4:0b:
         cb:ed:50:f2:b1:e1:52:cb:e4:31:35:61:1b:fc:c5:0c:60:37:
         8f:cd:cc:c4:1f:3e:32:46:11:81:9d:fb:d5:41:dc:cc:bd:59:
         01:26:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:26 2026 by rpki-client