Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/810fb1e2-8c93-3b7c-b870-79e30ade2fae.roa
File:                     810fb1e2-8c93-3b7c-b870-79e30ade2fae.roa (raw, json)
Hash identifier:          tVAcdycjLrKXJhmZGSE6DE1rgq9bOU+C9QgXIsJCmtc=
Subject key identifier:   CE:22:2C:85:16:A3:28:86:42:F5:28:92:00:2C:03:59:0B:B6:BA:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0D4242B2DAD7E48A9793B700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/810fb1e2-8c93-3b7c-b870-79e30ade2fae.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     58495
IP address blocks:        2001:470:510::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:42:b2:da:d7:e4:8a:97:93:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=0a22d928-127c-45d8-9d8c-3424a0853115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:e3:ec:65:75:32:13:a6:7b:55:87:ee:78:
                    cd:df:eb:cb:10:bd:c9:11:e4:23:5e:3b:c6:eb:90:
                    c4:5d:40:ba:59:32:5d:df:cd:91:c5:8b:fa:31:09:
                    64:2a:ad:b0:51:e0:95:09:60:02:20:1a:07:6c:e2:
                    ab:4a:14:ac:dd:3d:3b:8d:92:01:8c:98:9f:5f:5d:
                    43:36:5c:c4:6e:ab:48:4b:f9:4a:ee:05:e5:81:6b:
                    68:d1:88:60:a1:f2:38:4f:6e:a5:64:fa:06:25:77:
                    d7:67:89:8b:52:c2:46:61:80:ed:83:9e:f6:bb:33:
                    b5:99:12:c3:3e:a5:87:c6:78:b3:63:04:30:64:99:
                    20:d0:ff:96:0e:98:7a:4c:6d:e4:ae:32:81:b9:f8:
                    92:83:b0:b5:65:22:f0:06:90:18:22:11:a1:c4:cb:
                    5a:e8:ee:d3:4a:2c:c5:ec:6f:5f:9e:0f:53:be:c6:
                    64:e8:05:97:19:ec:35:9a:6f:b8:74:bd:2a:56:9f:
                    63:71:9f:b7:43:94:ed:60:07:60:a9:2b:71:42:fb:
                    ab:57:94:d9:0c:5e:ab:ee:0e:d4:3b:37:d5:e5:79:
                    9f:d3:de:de:ac:23:b7:33:3b:3a:95:b6:da:91:fb:
                    22:e2:9f:cc:f0:45:7f:c7:5f:1a:9a:b6:49:a2:38:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:22:2C:85:16:A3:28:86:42:F5:28:92:00:2C:03:59:0B:B6:BA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/810fb1e2-8c93-3b7c-b870-79e30ade2fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:510::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:17:3b:dd:11:4e:76:4d:1b:47:f9:ea:ac:7f:00:10:c2:e9:
         0e:32:01:58:21:af:6f:1f:1d:fa:4b:e4:5e:06:f3:72:5b:a6:
         c7:69:fc:96:7e:32:9a:29:14:8b:17:45:41:eb:fc:a3:ef:94:
         c3:89:66:55:ae:29:bb:cb:ac:31:1f:3a:83:6d:62:95:9d:6f:
         f1:d9:dd:e4:0f:82:bf:4b:10:b5:a5:57:85:1c:40:3f:fe:99:
         bd:f9:2d:c2:06:e5:f8:65:f1:8f:32:1c:a6:7d:44:19:4b:cb:
         8f:4c:68:2f:40:c2:65:9f:93:af:c8:b1:98:a5:da:d2:83:97:
         13:d0:bf:c8:d7:a6:2b:00:33:b5:d9:35:fa:78:a6:8d:80:2d:
         e0:3a:d6:10:a9:68:c0:61:ee:ce:bc:dc:d3:f4:5d:e5:a5:b3:
         c5:2f:5d:90:39:ab:1c:db:d9:77:a6:80:a0:f9:53:78:21:19:
         5b:09:9a:c3:f9:2d:46:f2:8b:fd:46:aa:67:89:e5:99:d6:6d:
         85:b3:17:39:0d:b2:10:5c:06:43:60:43:64:32:61:0e:43:3f:
         8a:2a:6c:2f:37:f0:8c:98:e9:80:ff:65:28:b2:58:18:77:5e:
         32:c3:ba:ff:e0:b6:83:07:4b:6e:7b:c5:c6:6d:02:46:77:6c:
         dc:d0:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:16:28 2026 by rpki-client