Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa
File:                     d4983d51-e8de-379f-9f45-b391bbab4125.roa (raw, json)
Hash identifier:          Q4FHJasQ+TxzGt6xhb8PPakCNO+enzkcwXRwAoulTMI=
Subject key identifier:   88:97:F3:51:CD:13:49:26:C6:CA:96:F0:5B:3C:DE:2F:39:86:69:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8BC79FC50E69A5D2A580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     19863
IP address blocks:        2001:470:1cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8b:c7:9f:c5:0e:69:a5:d2:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=20fb627e-21ab-440d-9cbc-6dbab71dbf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:90:48:ce:66:9d:40:72:11:aa:e7:12:78:
                    6c:79:ce:8d:e3:88:33:ac:34:62:92:b9:2f:14:a8:
                    5c:60:29:34:10:00:fa:6b:84:2d:a9:d0:29:cc:d0:
                    0a:6f:b4:90:a5:c4:0b:ce:cb:46:16:19:be:92:bd:
                    3c:6c:35:58:4f:be:4d:e7:0b:4a:51:42:5c:3f:24:
                    f5:8c:ee:46:8a:14:58:86:f3:86:a2:fc:1f:5c:de:
                    0b:02:41:1b:03:29:6c:a7:82:90:19:43:13:dc:2e:
                    0f:2a:60:46:63:4a:97:dd:75:f2:1f:cd:b4:31:b7:
                    ef:a0:97:1f:b1:22:00:e1:93:82:f0:b4:ec:a8:a5:
                    38:e6:5e:a4:7f:01:00:8d:30:a3:f1:c0:f5:21:88:
                    1e:31:8a:7e:3e:64:77:ff:23:9d:15:bc:87:a9:ec:
                    53:00:19:5e:7f:e3:86:1a:1d:52:82:16:d2:37:08:
                    46:3f:0c:ed:16:84:a6:5f:78:c4:c4:0e:ee:fc:a4:
                    18:c9:31:e3:65:11:7c:35:ae:ef:42:5b:e9:28:5d:
                    21:f8:21:60:4d:e5:99:95:30:4f:b8:97:b0:14:9d:
                    f6:b8:33:e2:8a:53:99:a3:be:f9:84:88:4e:31:e2:
                    2a:1f:0e:e8:d8:2e:ba:f5:9d:51:38:56:b5:fa:9e:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:97:F3:51:CD:13:49:26:C6:CA:96:F0:5B:3C:DE:2F:39:86:69:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4983d51-e8de-379f-9f45-b391bbab4125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1cb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:7d:f4:12:2f:ad:fd:58:15:6b:1f:14:85:f5:de:a8:db:26:
         aa:59:25:93:6c:07:b4:7f:03:fc:ab:46:e6:c8:bf:a9:3f:2f:
         6d:98:33:d5:3d:80:d1:3c:40:0e:ab:68:f1:66:ee:55:68:6c:
         f2:70:08:ac:b4:d9:cc:aa:d6:e8:94:f7:70:76:76:7f:de:59:
         70:a2:d3:3d:8a:52:57:2c:a7:8f:44:e6:d7:8c:0d:4b:d8:88:
         2c:80:d0:96:fc:d7:ef:95:14:43:5e:77:d9:6b:d2:94:62:99:
         98:5b:91:04:2b:11:b7:50:ef:56:86:09:69:10:45:5e:15:e3:
         07:d9:16:2d:93:2c:ae:20:6e:f4:6c:dd:bb:20:df:77:1f:98:
         45:fd:26:3b:f4:7b:0f:5f:c5:26:3b:77:4e:44:28:c5:1d:25:
         64:6b:ed:e2:36:94:b5:ba:8d:13:8e:67:5f:86:5d:a3:13:4c:
         67:50:0e:3a:82:77:47:9d:4f:2c:18:0d:b7:66:c0:54:5c:83:
         27:de:71:5e:e6:59:32:86:10:96:6c:67:a6:2f:ba:50:da:b0:
         2c:ba:83:c4:64:5b:9b:36:d2:36:4d:10:21:0b:47:03:bd:9f:
         b7:da:20:af:73:8f:ce:10:70:5e:ab:73:aa:1d:26:2f:10:1a:
         b4:c0:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:01 2026 by rpki-client