Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
File:                     ed047f78-91b2-3688-b497-fc1002caae62.roa (raw, json)
Hash identifier:          Ql/kOxRq293jXhlBq9lzPyYa3ddN5b0sZvoA3t+y17I=
Subject key identifier:   21:87:88:E7:4C:3C:C7:CB:70:BB:A3:A0:9F:9E:B9:32:8B:F3:0E:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA8BBC0A42FEF87A62080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     57332
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a8:bb:c0:a4:2f:ef:87:a6:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6bf8c1e0-4de1-4e10-b4ee-88b62363caf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:47:39:d2:a1:a9:30:23:8a:83:a5:4f:a6:
                    79:e8:0f:c4:82:a8:fd:0a:f8:58:81:9e:ae:16:eb:
                    50:b1:93:ab:8e:0a:3b:86:18:94:26:27:3f:69:9e:
                    5d:10:1d:84:27:f7:f1:97:ef:41:cb:84:a4:a2:28:
                    49:e9:5a:e7:cf:2d:e1:1f:57:d7:9b:36:e5:43:08:
                    32:63:10:c2:46:42:0f:34:37:b6:ae:00:9d:48:96:
                    96:ce:b1:3a:f8:fc:53:ca:aa:95:03:b8:73:17:88:
                    b7:83:09:6d:56:b8:78:34:33:60:c9:16:c5:fa:c8:
                    1b:88:bd:01:99:05:29:c3:5c:3c:d2:f1:26:2c:7e:
                    5c:89:c8:32:92:b5:1c:07:ec:b3:08:34:0f:0e:6f:
                    07:ae:a4:5e:94:32:a3:bb:df:ff:cf:0a:ff:75:cd:
                    0a:21:29:b4:7c:1a:d4:a8:c9:07:5d:76:5a:98:06:
                    70:89:4f:4c:72:9e:38:4a:66:c6:78:31:2d:1a:87:
                    1e:18:9b:89:36:83:f6:27:8b:dd:e7:1c:36:9a:62:
                    e4:3b:a1:c5:39:1a:b4:c8:aa:c5:39:fa:91:b6:d6:
                    57:3b:93:79:b0:da:43:fc:5b:a1:2b:80:52:da:88:
                    1f:76:3d:e4:d1:63:f5:d3:9f:3f:d9:a9:24:49:78:
                    da:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:88:E7:4C:3C:C7:CB:70:BB:A3:A0:9F:9E:B9:32:8B:F3:0E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed047f78-91b2-3688-b497-fc1002caae62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:91:5e:6c:b7:ce:81:a6:f6:73:b1:3e:51:ed:6a:a7:d8:c8:
         e8:e1:33:c8:cd:9f:fa:07:dc:76:41:9d:65:9e:53:3a:c7:7a:
         8c:26:0b:f6:30:3a:16:d0:41:06:ff:61:a3:5e:90:13:34:8a:
         6b:00:28:af:48:ba:b5:fe:b3:59:20:6d:7e:0a:e0:ea:e2:b5:
         dc:1a:a5:1d:c5:d1:03:d0:b5:6b:bc:a6:aa:c9:65:6d:81:2e:
         f5:17:ba:f9:eb:50:56:b1:ba:1e:91:88:5d:31:f5:1d:c8:6c:
         a2:51:72:11:ff:a2:c5:4a:5b:7c:ef:f1:30:30:33:f7:55:9b:
         94:2a:fb:06:16:bf:4b:5e:27:e7:7f:d7:08:1c:ea:4d:53:25:
         c5:17:86:53:0f:09:1e:d5:57:ad:1a:60:a7:5f:34:10:53:81:
         c6:08:50:91:ce:07:46:e4:58:13:de:59:7e:7c:fb:56:2d:e5:
         b6:33:b3:7f:9d:f9:61:d1:ef:43:a3:37:36:d6:df:44:86:f6:
         62:71:55:39:37:9c:a6:b1:a9:33:8b:90:f8:de:98:18:18:f8:
         07:c1:e6:4a:a3:5c:eb:8d:fb:28:46:9d:ea:52:f4:a3:bb:e7:
         2c:df:f8:a4:28:55:ae:4d:46:83:ca:01:f2:42:99:e5:c1:99:
         b5:ae:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:14 2026 by rpki-client