Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa
File:                     e2c22353-7880-38a5-82e6-1559e24cb966.roa (raw, json)
Hash identifier:          Tcl+c4Z3gwrkIovlxhXJECo5XCGjikLDTokdRE0rBtI=
Subject key identifier:   91:F5:70:20:76:29:05:E8:EB:D5:56:9B:0F:3D:F6:B8:FB:E8:D3:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CC07CD5536FB38F6D697B123B
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     11476
IP address blocks:        2001:470:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:d5:53:6f:b3:8f:6d:69:7b:12:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=70638878-0f84-455b-85ab-ecf8a0056734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:26:04:5b:08:d2:50:c9:43:2d:60:cf:0e:
                    aa:52:e4:ae:87:e9:a9:4e:98:e4:92:a5:4b:37:50:
                    d5:ce:7a:4a:de:d2:1c:05:79:d1:13:b2:01:cf:1f:
                    49:92:b3:95:78:9a:d8:89:3d:f8:3d:56:78:7a:28:
                    a7:16:c4:94:35:65:aa:06:eb:3d:67:a3:1b:44:68:
                    cf:cc:ca:32:48:ae:ab:b0:af:55:c5:6c:27:a5:de:
                    ca:9b:c6:23:0b:7f:4a:95:17:4e:eb:de:a3:78:d7:
                    38:9c:ae:3e:a5:9d:30:d1:7b:c6:26:3e:d6:c3:2a:
                    f2:79:ba:79:60:f4:5a:80:27:bb:d8:2c:c6:27:1b:
                    b5:2e:19:d0:4e:aa:59:bc:11:21:7d:8a:91:33:f2:
                    ce:ba:f2:ab:51:13:1d:a1:53:b0:17:5d:2e:85:e2:
                    0e:b8:bc:26:48:e2:23:ed:27:5e:7d:5f:ee:26:9f:
                    05:90:39:8a:fb:9e:7d:04:a3:b1:6b:da:2b:7b:ca:
                    f2:37:1f:fd:77:f5:de:bc:e2:ab:bc:80:bb:9e:01:
                    69:27:55:39:11:73:4d:87:f8:9c:86:44:86:af:7e:
                    f1:86:a7:ff:64:03:b2:c9:46:91:77:7e:ca:3a:e5:
                    ae:9d:12:bf:85:e8:79:b6:fb:95:06:c1:99:5a:8d:
                    f2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:70:20:76:29:05:E8:EB:D5:56:9B:0F:3D:F6:B8:FB:E8:D3:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e2c22353-7880-38a5-82e6-1559e24cb966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:53::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:84:3b:e0:3b:cd:1e:8e:9f:0b:2a:23:21:e5:5b:b1:56:
         38:d0:2c:17:2b:7b:24:dc:da:46:4a:85:ce:20:1a:ad:be:a6:
         05:9f:43:46:44:19:da:ba:a6:43:2c:66:cf:0c:7b:cc:db:67:
         be:bd:13:e0:f0:98:bd:d2:2b:5d:6f:c7:f4:a2:ad:71:29:19:
         ae:92:13:d1:d5:5b:09:2d:67:e0:5f:de:c1:61:b1:ea:48:68:
         83:0f:c1:1b:11:03:b0:d1:d8:9b:86:04:5c:77:ea:6c:91:5f:
         ac:04:d4:77:63:09:7a:24:db:62:43:f7:91:0a:ba:77:98:0f:
         80:32:56:a2:09:4f:f8:70:8d:76:65:a7:f8:67:ba:71:24:84:
         c5:8a:0a:54:7f:00:e9:f7:fb:ba:28:d1:3e:c7:14:e8:9f:c8:
         5b:a5:f3:64:b4:2a:a3:cf:eb:bd:81:62:aa:da:ae:51:b3:03:
         10:6e:61:e5:40:80:99:ee:44:6f:62:8a:11:35:8e:e5:eb:0d:
         48:7e:d6:0c:bd:c1:63:9e:e6:a1:1d:04:1e:75:7c:8c:e6:d4:
         d6:2f:72:ac:a3:b6:9d:51:72:29:a2:e1:fd:f7:15:1b:25:4b:
         fe:92:9d:76:a3:7f:3f:b8:0b:d6:2e:6b:c3:61:db:f4:32:4a:
         ae:d9:35:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfNVTb7OPbWl7EjswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk
NzA2Mzg4NzgtMGY4NC00NTViLTg1YWItZWNmOGEwMDU2NzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreImBFsI0lDJQy1gzw6qUuSuh+mpTpjkkqVL
N1DVznpK3tIcBXnRE7IBzx9JkrOVeJrYiT34PVZ4eiinFsSUNWWqBus9Z6MbRGjP
zMoySK6rsK9VxWwnpd7Km8YjC39KlRdO696jeNc4nK4+pZ0w0XvGJj7Wwyryebp5
YPRagCe72CzGJxu1LhnQTqpZvBEhfYqRM/LOuvKrURMdoVOwF10uheIOuLwmSOIj
7SdefV/uJp8FkDmK+559BKOxa9ore8ryNx/9d/XevOKrvIC7ngFpJ1U5EXNNh/ic
hkSGr37xhqf/ZAOyyUaRd37KOuWunRK/heh5tvuVBsGZWo3yBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJH1cCB2KQXo69VWmw899rj76NPEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTJjMjIzNTMtNzg4MC0z
OGE1LTgyZTYtMTU1OWUyNGNiOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcABT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFF9hDvgO80ejp8LKiMh5VuxVjjQLBcreyTc2kZKhc4gGq2+pgWf
Q0ZEGdq6pkMsZs8Me8zbZ769E+DwmL3SK11vx/SirXEpGa6SE9HVWwktZ+Bf3sFh
sepIaIMPwRsRA7DR2JuGBFx36myRX6wE1HdjCXok22JD95EKuneYD4AyVqIJT/hw
jXZlp/hnunEkhMWKClR/AOn3+7oo0T7HFOifyFul82S0KqPP672BYqrarlGzAxBu
YeVAgJnuRG9iihE1juXrDUh+1gy9wWOe5qEdBB51fIzm1NYvcqyjtp1Rcimi4f33
FRslS/6SnXajfz+4C9Yua8Nh2/QySq7ZNb0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:03:15 2026 by rpki-client