Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e965cb17-cd5e-32d0-9755-6e4f703cbb8b.roa
File:                     e965cb17-cd5e-32d0-9755-6e4f703cbb8b.roa (raw, json)
Hash identifier:          3FkET7lW3Kdx+vexLfcJQyHa90zT2ThNgoz6+CXgC44=
Subject key identifier:   72:30:BE:B4:18:F4:24:7D:D9:D2:AB:C9:FD:82:74:AC:35:F3:1B:E3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA86A7BCF35207905E9200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e965cb17-cd5e-32d0-9755-6e4f703cbb8b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     399203
IP address blocks:        2001:470:cf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:86:a7:bc:f3:52:07:90:5e:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=7fd5b124-6c31-4747-92b7-fde6691d121c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:ac:fa:53:92:f4:df:ef:22:59:ae:05:10:
                    8e:26:1d:51:4b:ae:08:e5:7f:b8:6c:c5:10:0b:c0:
                    9e:cc:c1:ac:d9:42:b4:86:90:9b:42:bb:d0:25:68:
                    a3:21:c2:b8:9e:39:5b:3a:c2:a4:fa:81:67:fa:5e:
                    84:75:28:76:b5:ab:ef:df:78:3e:49:dc:df:89:f5:
                    a6:d3:7d:65:e9:de:00:a8:4c:85:25:75:e1:5c:e8:
                    bb:fb:01:1b:08:0b:7d:8e:8c:0b:ad:09:29:ce:72:
                    1b:02:77:1c:e4:6f:c0:53:55:90:c4:71:99:b9:e7:
                    3b:50:5d:e7:13:e9:c3:e4:0e:7d:b5:b0:64:9d:4a:
                    1b:db:fa:6f:7d:c9:0f:e2:6e:ba:c5:e5:7b:54:17:
                    73:ab:7f:c0:14:a5:76:ec:9e:dc:44:4b:01:7d:3d:
                    52:9e:72:3d:b1:d6:e9:eb:f9:3c:08:c5:aa:34:03:
                    8a:5f:8f:8b:7c:fc:41:b1:0f:1d:df:58:d5:bf:41:
                    09:5f:3b:72:46:0c:ad:ba:c2:12:f0:21:f2:21:c7:
                    d2:a3:bf:de:c3:8f:08:4f:f5:29:a7:7d:81:1a:6b:
                    be:2c:c8:9e:46:0e:74:3d:bf:ac:3d:fc:28:30:c5:
                    16:96:d3:d5:e5:e9:85:3d:86:d1:11:67:ec:2c:30:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:BE:B4:18:F4:24:7D:D9:D2:AB:C9:FD:82:74:AC:35:F3:1B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e965cb17-cd5e-32d0-9755-6e4f703cbb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bc:a2:42:fc:3a:93:8f:e2:1a:b5:c7:cc:fd:89:fe:ee:c2:
         89:7b:e1:3f:a1:25:37:36:b2:e9:25:50:22:9b:7a:34:06:07:
         5b:b0:da:06:65:fb:f1:ba:bc:4b:47:76:88:8d:63:20:1f:92:
         03:05:c4:e9:12:c5:08:85:e1:86:d2:ba:f3:b6:13:32:7d:72:
         f2:fa:4d:17:84:13:ce:1d:cc:93:73:3f:30:26:ad:8e:80:47:
         c4:d0:a7:2d:0a:b8:3e:a0:b1:a3:e7:cb:fc:45:48:a1:7a:e0:
         61:1b:8f:e2:8c:cf:80:65:70:64:67:c1:69:63:8d:15:9e:8c:
         b9:c0:e6:cd:aa:35:2a:d0:cc:ff:60:8a:0c:aa:ed:75:1e:34:
         aa:17:c2:96:44:e0:7f:c9:5d:12:9d:61:0d:98:49:ce:d7:48:
         eb:11:4e:d0:22:70:61:94:e4:99:5d:63:18:e3:6d:ed:e3:cc:
         ac:0d:5b:13:11:e4:b1:c5:47:16:f1:97:98:41:b3:31:67:6a:
         3f:dc:7b:99:5b:ac:57:6c:1b:81:d6:e8:fe:c2:58:c9:c0:1d:
         0d:82:7d:bc:86:39:64:90:24:31:db:ab:fd:f3:80:f5:e4:13:
         0a:1b:3a:11:3e:d5:e8:ef:f8:b3:6e:ed:10:bf:ff:12:79:38:
         18:26:6e:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oanvPNSB5BekgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
N2ZkNWIxMjQtNmMzMS00NzQ3LTkyYjctZmRlNjY5MWQxMjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Ws+lOS9N/vIlmuBRCOJh1RS64I5X+4bMUQ
C8CezMGs2UK0hpCbQrvQJWijIcK4njlbOsKk+oFn+l6EdSh2tavv33g+SdzfifWm
031l6d4AqEyFJXXhXOi7+wEbCAt9jowLrQkpznIbAncc5G/AU1WQxHGZuec7UF3n
E+nD5A59tbBknUob2/pvfckP4m66xeV7VBdzq3/AFKV27J7cREsBfT1SnnI9sdbp
6/k8CMWqNAOKX4+LfPxBsQ8d31jVv0EJXztyRgytusIS8CHyIcfSo7/ew48IT/Up
p32BGmu+LMieRg50Pb+sPfwoMMUWltPV5emFPYbREWfsLDDq0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIwvrQY9CR92dKryf2CdKw18xvjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTk2NWNiMTctY2Q1ZS0z
MmQwLTk3NTUtNmU0ZjcwM2NiYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFG8okL8OpOP4hq1x8z9if7uwol74T+hJTc2suklUCKbejQGB1uw
2gZl+/G6vEtHdoiNYyAfkgMFxOkSxQiF4YbSuvO2EzJ9cvL6TReEE84dzJNzPzAm
rY6AR8TQpy0KuD6gsaPny/xFSKF64GEbj+KMz4BlcGRnwWljjRWejLnA5s2qNSrQ
zP9gigyq7XUeNKoXwpZE4H/JXRKdYQ2YSc7XSOsRTtAicGGU5JldYxjjbe3jzKwN
WxMR5LHFRxbxl5hBszFnaj/ce5lbrFdsG4HW6P7CWMnAHQ2CfbyGOWSQJDHbq/3z
gPXkEwobOhE+1ejv+LNu7RC//xJ5OBgmbus=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:01 2026 by rpki-client