Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6e269aa-bc0a-39b0-8e2f-5b962ca5fb82.roa
File:                     f6e269aa-bc0a-39b0-8e2f-5b962ca5fb82.roa (raw, json)
Hash identifier:          kb3/hmKMqE6/f8RuYwRPz/txnw1MwchW1YV73pFiseU=
Subject key identifier:   2A:90:3E:5A:2E:D8:D5:6A:55:46:36:6B:3D:16:A5:C1:4A:7B:9D:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D730A73C26E69EB5E5D8F8A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6e269aa-bc0a-39b0-8e2f-5b962ca5fb82.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     401903
IP address blocks:        2001:470:32e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:73:c2:6e:69:eb:5e:5d:8f:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=6154cc50-d2cd-401e-a36d-134f7bb0f840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:54:db:b8:7b:c2:fd:1b:b4:09:6f:08:83:
                    d1:04:35:a5:27:c0:23:75:44:f1:a4:fe:4a:13:aa:
                    49:92:40:49:79:7f:dd:90:2d:49:3c:bc:88:d2:b5:
                    94:c9:9b:58:56:e7:83:af:2a:8e:48:a5:12:e1:7d:
                    f0:e3:c3:c5:28:3a:fb:56:61:ba:d9:c0:1e:ca:26:
                    0f:4c:6a:83:89:eb:cd:8e:14:91:e1:15:10:7b:e6:
                    e5:9b:56:4b:86:73:c9:52:b5:0b:fd:ef:d9:91:c0:
                    33:bd:bc:0c:98:f9:76:37:64:f7:d3:fa:f6:b8:ae:
                    69:b0:e4:97:53:44:1f:61:d3:ef:5c:30:82:75:85:
                    53:2e:3b:28:31:5c:37:9c:0b:59:2f:b8:e0:22:36:
                    b8:d5:b6:9b:c7:67:54:9c:f9:a3:f6:b1:0a:0d:bb:
                    f3:12:d7:fb:96:e1:96:9d:1f:be:06:d0:0e:74:55:
                    da:ac:3c:c1:46:77:fb:f9:8a:52:11:bb:fb:f1:5f:
                    84:8e:c1:03:74:f7:cc:4d:c7:c0:a3:b0:15:90:da:
                    a1:50:11:8d:5d:3b:d9:31:13:7b:14:1f:13:a8:18:
                    79:ef:3c:47:68:c2:ca:ef:7e:ce:da:ed:d9:4e:f9:
                    4e:be:da:36:48:d6:cd:61:68:b8:21:34:6c:34:9c:
                    87:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:3E:5A:2E:D8:D5:6A:55:46:36:6B:3D:16:A5:C1:4A:7B:9D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6e269aa-bc0a-39b0-8e2f-5b962ca5fb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:32e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4c:c5:01:65:f0:bd:b4:54:1f:d4:be:81:8a:c1:41:fd:72:
         e1:f4:d6:3d:51:72:4f:f6:53:79:d9:a5:6d:bd:9d:a7:fb:9a:
         2b:01:5a:53:13:cb:68:cc:f1:33:33:ec:a9:cb:41:fd:36:1f:
         b9:3a:34:86:57:9a:1a:e0:a5:78:1b:32:57:fd:2c:b2:38:b3:
         b5:db:fa:3f:dc:24:d8:7b:31:ea:c4:36:15:f5:ec:50:e2:1d:
         23:d7:fb:bb:0e:6e:c4:02:83:28:7d:99:ae:fb:68:8c:b6:2a:
         6b:6f:13:bc:38:3e:9a:41:47:cc:8c:c0:8b:b6:db:c5:93:61:
         ba:eb:69:46:4a:ee:22:2a:d7:16:f7:67:a9:0e:a9:a7:30:54:
         d5:47:34:bb:42:da:6e:a1:1a:87:92:4c:f3:db:3d:f6:a8:a0:
         09:8f:3d:81:78:dc:63:8d:c9:8d:83:02:85:8a:74:70:95:45:
         82:22:1a:88:4b:62:01:28:dc:d8:e8:cb:81:9e:07:f3:15:5e:
         c3:05:f8:f5:60:6a:9c:56:fb:8b:a4:16:45:07:1d:29:a6:39:
         79:a1:4e:3e:2e:1c:8a:e4:f9:94:87:4b:a3:5e:a1:20:67:91:
         b8:45:4d:a0:e9:9b:81:b9:84:95:94:0d:34:ce:e4:cf:ac:26:
         0f:b5:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:37:47 2026 by rpki-client