Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
File:                     d005338b-0108-318a-9989-f9d35f20ee23.roa (raw, json)
Hash identifier:          O9TUr109WHABBgV8hP94H2b0EAcSi+kaa8eMx3RxryM=
Subject key identifier:   74:32:8C:07:76:62:77:E9:0D:CC:62:92:B0:BE:EB:4D:90:A1:2A:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA7F04EAF654FF5138AC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     11255
IP address blocks:        2001:470:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:7f:04:ea:f6:54:ff:51:38:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=baa61a12-455f-4b68-aa6a-367ba33b23e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:90:b0:8a:c1:86:78:e1:6a:cb:01:6f:bc:
                    e2:d0:ad:91:f9:80:d9:2d:64:fd:56:d1:d4:7a:96:
                    6a:7f:50:ea:e4:97:68:5f:dc:3b:c6:4a:7c:a3:4c:
                    a7:24:40:da:b3:40:2c:d5:af:6e:9b:e0:3d:cb:92:
                    95:69:58:3e:69:e7:0d:fc:4c:d0:62:e6:4a:c1:3d:
                    c9:b6:69:2a:73:31:35:2c:13:7f:40:92:e9:d4:95:
                    4d:9c:2e:3d:e6:93:53:79:61:9a:48:4d:95:cb:55:
                    c6:c5:61:e4:9a:a9:7c:63:a7:a6:a3:24:07:f9:af:
                    7d:22:af:9a:4d:2c:57:3a:19:65:9a:63:01:b8:f2:
                    ac:fe:6a:f4:b5:ad:6b:58:06:ca:6d:c5:74:99:f7:
                    93:c8:d8:93:6b:94:01:cd:18:2a:1e:d7:bf:97:3a:
                    1c:00:3a:ae:80:23:16:c4:64:e0:b4:83:1a:2f:db:
                    bd:5d:c3:2e:0c:ea:30:8c:a6:08:ac:e1:ab:2a:22:
                    b5:51:55:46:b1:67:8c:da:81:30:0c:52:4a:eb:14:
                    64:db:48:80:6e:9a:a0:b2:cd:1d:91:ca:d3:4c:60:
                    52:57:89:cc:88:e9:e0:2b:6c:93:38:5e:f2:9a:09:
                    96:78:ed:75:dd:7d:4b:78:08:21:ee:6e:21:75:ba:
                    8e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:8C:07:76:62:77:E9:0D:CC:62:92:B0:BE:EB:4D:90:A1:2A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:f1:27:c0:94:1e:73:80:88:f4:d1:5d:bf:ce:21:8d:87:
         7b:f3:9e:2e:da:66:b1:79:d3:cd:c3:b3:dc:fb:38:4d:4c:ff:
         43:24:82:ec:e4:08:dc:c1:d7:8a:55:4d:b1:0f:4a:15:e7:92:
         6d:9c:6a:85:4d:96:a9:fa:ff:97:b0:41:3d:70:eb:86:c7:b9:
         cd:4c:4a:3b:f1:21:00:ea:38:fe:70:15:79:85:96:4b:df:44:
         e3:e0:01:fd:33:8c:ee:54:cb:48:9f:9a:7b:3e:5a:43:13:48:
         f4:3a:92:7d:cd:a6:b5:6f:05:61:df:cf:ca:44:00:fe:f1:f3:
         39:1c:1d:a7:f3:88:a2:90:69:a0:6b:ad:46:b8:fc:ac:69:9f:
         33:a4:4c:a8:ef:c9:20:85:94:10:8c:f2:12:1e:d2:ed:5a:e6:
         1f:29:a6:d8:41:e5:ba:ce:fa:40:81:53:d8:fc:bc:3b:b0:80:
         b7:66:d7:b7:69:18:c2:d0:bb:7e:25:6a:fc:17:cc:3a:da:a4:
         d2:b6:4d:67:e1:69:03:b1:bd:3e:ce:e9:19:01:b3:e1:d7:0c:
         f2:51:50:52:a4:fe:6c:bc:e2:75:2f:a4:2e:ce:57:dc:d5:40:
         04:9c:47:34:2a:7e:39:df:c3:f5:b2:52:13:a7:99:85:34:95:
         94:9c:7d:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6n8E6vZU/1E4rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YmFhNjFhMTItNDU1Zi00YjY4LWFhNmEtMzY3YmEzM2IyM2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobyQsIrBhnjhassBb7zi0K2R+YDZLWT9VtHU
epZqf1Dq5JdoX9w7xkp8o0ynJEDas0As1a9um+A9y5KVaVg+aecN/EzQYuZKwT3J
tmkqczE1LBN/QJLp1JVNnC495pNTeWGaSE2Vy1XGxWHkmql8Y6emoyQH+a99Iq+a
TSxXOhllmmMBuPKs/mr0ta1rWAbKbcV0mfeTyNiTa5QBzRgqHte/lzocADqugCMW
xGTgtIMaL9u9XcMuDOowjKYIrOGrKiK1UVVGsWeM2oEwDFJK6xRk20iAbpqgss0d
kcrTTGBSV4nMiOngK2yTOF7ymgmWeO113X1LeAgh7m4hdbqOFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHQyjAd2YnfpDcxikrC+602QoSrMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNTMzOGItMDEwOC0z
MThhLTk5ODktZjlkMzVmMjBlZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJsJ8SfAlB5zgIj00V2/ziGNh3vzni7aZrF5083Ds9z7OE1M/0Mk
guzkCNzB14pVTbEPShXnkm2caoVNlqn6/5ewQT1w64bHuc1MSjvxIQDqOP5wFXmF
lkvfROPgAf0zjO5Uy0ifmns+WkMTSPQ6kn3NprVvBWHfz8pEAP7x8zkcHafziKKQ
aaBrrUa4/KxpnzOkTKjvySCFlBCM8hIe0u1a5h8ppthB5brO+kCBU9j8vDuwgLdm
17dpGMLQu34lavwXzDrapNK2TWfhaQOxvT7O6RkBs+HXDPJRUFKk/my84nUvpC7O
V9zVQAScRzQqfjnfw/WyUhOnmYU0lZScfec=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:30 2026 by rpki-client