Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cca87722-5022-3829-a6be-b30484ee9b6e.roa
File:                     cca87722-5022-3829-a6be-b30484ee9b6e.roa (raw, json)
Hash identifier:          gp3KhqjM1J0xgDzKIH4k60aKlCnNY6S9PYrs1PVqBIg=
Subject key identifier:   76:B1:08:10:06:A8:3B:C0:05:72:94:89:C9:29:77:5B:EA:9D:82:D8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D8265251114EB348B83997080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cca87722-5022-3829-a6be-b30484ee9b6e.roa
Signing time:             Wed 15 Apr 2026 01:00:24 +0000
ROA not before:           Wed 15 Apr 2026 01:00:24 +0000
ROA not after:            Tue 14 Jul 2026 01:00:24 +0000
asID:                     29430
IP address blocks:        2001:470:552::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:82:65:25:11:14:eb:34:8b:83:99:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 15 01:00:24 2026 GMT
            Not After : Jul 14 01:00:24 2026 GMT
        Subject: CN=733c3203-8140-43e9-b878-6097ef87f6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:02:67:81:a6:9b:57:8a:f5:4f:3a:e7:52:
                    ae:8d:c3:91:5b:0e:6b:da:6d:0c:22:43:e4:e0:a1:
                    09:9c:cd:c1:48:aa:27:3f:b9:67:9d:09:b2:01:eb:
                    17:3c:f5:b9:d5:03:cd:4d:67:4d:8f:06:e2:a3:bb:
                    b3:37:50:3e:35:10:25:7a:64:9f:df:66:15:69:08:
                    53:b6:52:b4:6e:3a:23:ce:2d:93:e9:f6:ca:ec:91:
                    8b:6c:1e:71:7f:0b:3f:d7:1d:c8:84:5c:ed:e4:29:
                    18:f1:1f:d9:82:60:5c:e6:6a:3c:1b:dd:3f:0a:2f:
                    73:d9:ab:50:2e:d3:95:1e:d3:a2:77:f2:7b:1e:c7:
                    70:6d:36:30:ff:0d:88:4b:11:4c:e3:52:30:2d:ba:
                    95:2d:db:ba:ab:90:cf:1b:e3:ac:53:e5:9a:90:23:
                    24:a0:96:9f:a1:7d:4b:6e:29:48:71:e7:02:b6:78:
                    90:2d:20:a6:37:91:54:2d:26:fc:b4:02:68:af:56:
                    de:cd:20:0b:f6:83:43:0a:64:62:4c:a2:87:ad:4a:
                    97:3c:b3:1b:80:ba:56:48:e3:b6:18:1e:13:c0:06:
                    1f:44:87:79:b1:1d:40:33:73:40:74:a8:fa:37:65:
                    2e:31:f1:e1:3c:29:50:82:1b:2a:cc:9f:c0:18:98:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B1:08:10:06:A8:3B:C0:05:72:94:89:C9:29:77:5B:EA:9D:82:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cca87722-5022-3829-a6be-b30484ee9b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:552::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:09:10:a2:59:0f:60:b1:3e:a4:46:60:ec:12:71:0a:e4:2f:
         29:71:70:6f:8b:4e:83:a3:05:41:a3:5d:6e:23:ed:f0:bb:46:
         7a:3b:7b:cf:f5:29:86:69:20:0e:bd:bf:4b:23:3e:43:34:dc:
         4f:43:bb:f2:20:34:66:0e:bb:8c:c3:70:bd:e4:d7:c5:ec:8a:
         a5:11:22:c0:6d:52:99:f8:36:e9:42:a3:6d:5a:9d:eb:77:df:
         30:91:c5:3c:e9:55:62:f2:39:0c:11:ba:7a:e6:bd:9d:ee:ed:
         0c:6c:24:4b:6c:0d:78:c0:55:56:a6:a6:5b:d5:0a:ed:08:e0:
         7b:4a:da:d5:cd:ab:a9:2d:76:5e:d1:aa:5c:2b:20:77:3e:38:
         7a:a5:9d:b8:64:90:74:fc:6f:a6:20:aa:84:ba:4d:8c:5e:6d:
         3b:1a:b3:e6:8d:3f:34:dc:6e:5c:1d:b4:4f:6e:92:38:15:08:
         6c:57:2d:2f:66:72:4b:a1:55:bc:bc:c1:ee:19:1c:d8:b0:43:
         c1:72:85:33:f7:dd:45:bd:cc:54:76:3a:c9:c8:f5:94:11:ac:
         d8:9c:70:5d:ef:d2:ac:ae:74:f9:2e:64:6d:71:37:c7:fb:3a:
         ec:f4:4c:f2:b8:6f:72:e1:f7:6b:94:ea:06:89:1e:a0:e6:5c:
         41:fd:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:04 2026 by rpki-client