Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02160ba4-dc4c-3f55-b8b2-79e6bc8c13d2.roa
File:                     02160ba4-dc4c-3f55-b8b2-79e6bc8c13d2.roa (raw, json)
Hash identifier:          FLhQZdJfl7nYM9C5ZKUgMuMLlfU3y4++Qkg/pD4d8kA=
Subject key identifier:   5D:F9:45:21:36:48:B6:D1:FA:5F:98:5C:FC:C3:37:C7:96:6F:AF:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D8C2AAEBFB037A2DCB2910B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02160ba4-dc4c-3f55-b8b2-79e6bc8c13d2.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     54014
IP address blocks:        2001:470:4b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ae:bf:b0:37:a2:dc:b2:91:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=fb5d76bc-763b-4f32-800c-b5027f0f4113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fe:2a:a5:8e:21:7e:29:b9:46:7f:01:22:dc:
                    6c:ac:6f:0e:5d:a8:45:ae:c9:3b:78:7a:fa:8e:5e:
                    d6:e4:3c:61:ea:b0:6e:ab:fe:2e:75:d8:b1:18:d1:
                    40:60:bc:59:f0:36:01:0b:c8:43:c6:66:e8:0e:1f:
                    50:cd:de:dd:5e:35:d6:8a:be:db:9b:75:d3:12:4c:
                    de:34:0f:3d:a1:a8:2b:04:04:54:e9:3a:26:e5:79:
                    89:d7:c6:40:6c:1d:12:37:1f:f9:ec:ea:86:97:db:
                    2d:16:d2:60:cb:96:61:9e:44:60:ac:d6:f1:24:69:
                    59:95:fc:06:d9:12:4a:02:d3:ef:aa:41:ea:ad:ff:
                    fb:f7:37:81:a4:39:90:d4:45:40:9c:41:26:e2:ff:
                    bc:bc:11:a9:67:d2:2b:b6:8a:00:54:92:d1:a2:90:
                    f5:1a:db:c5:60:79:1c:a0:32:f1:4f:88:03:db:53:
                    c2:e5:7d:c0:6d:ec:1e:cc:75:75:12:f3:d6:d2:94:
                    fc:21:6f:84:03:47:6c:22:e7:68:8e:a1:e8:2e:5c:
                    83:5c:33:29:1a:ad:fa:95:86:dd:db:af:ce:e2:0c:
                    1e:f1:42:2d:c0:c5:f5:f6:15:09:8d:14:ef:56:52:
                    d7:45:95:21:6c:16:6c:9d:4b:d8:de:57:32:99:c4:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:45:21:36:48:B6:D1:FA:5F:98:5C:FC:C3:37:C7:96:6F:AF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02160ba4-dc4c-3f55-b8b2-79e6bc8c13d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e7:54:28:57:a0:ab:a6:a7:c6:5a:20:23:41:8a:2d:dd:47:
         8c:4e:1f:0a:54:25:90:25:e9:60:88:8f:f0:8b:b4:8f:77:91:
         0b:b5:cb:83:49:6b:ff:2c:61:a9:b9:44:56:4b:ba:d6:41:59:
         1e:9b:ea:f3:db:14:43:9d:a3:76:71:c0:8f:47:fe:cd:bc:6e:
         78:de:2a:59:c3:d5:72:8b:e3:71:bc:36:05:4a:5c:c0:27:bb:
         e6:cd:06:4a:6a:df:a1:ef:5b:58:45:b8:34:ba:3d:78:27:48:
         d8:9c:1e:49:b1:a5:bf:21:d5:9e:dc:48:12:a3:c2:b4:80:9a:
         e0:1e:a2:6e:8b:03:bc:d1:c6:23:db:4d:d4:b7:de:b6:b3:fe:
         8e:78:0c:07:3c:0d:f7:dc:34:c6:52:4a:f5:0f:3e:9f:82:43:
         22:0c:dd:01:ef:3d:47:58:28:88:5f:16:5c:67:38:6e:6c:ba:
         35:03:e9:50:34:ab:02:31:19:15:ae:a2:77:56:87:41:5e:ff:
         5e:80:3d:9e:d3:1f:18:3e:b4:cb:dc:c8:66:d5:db:55:19:04:
         32:bf:bf:11:cc:80:97:bc:ae:59:c1:d2:b6:32:6e:21:c3:5b:
         d1:2b:de:0f:c5:b4:03:41:2b:17:31:b7:aa:f5:2e:8c:59:b4:
         5b:c6:d6:cc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2MKq6/sDei3LKRCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
ZmI1ZDc2YmMtNzYzYi00ZjMyLTgwMGMtYjUwMjdmMGY0MTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv4qpY4hfim5Rn8BItxsrG8OXahFrsk7eHr6
jl7W5Dxh6rBuq/4uddixGNFAYLxZ8DYBC8hDxmboDh9Qzd7dXjXWir7bm3XTEkze
NA89oagrBARU6Tom5XmJ18ZAbB0SNx/57OqGl9stFtJgy5ZhnkRgrNbxJGlZlfwG
2RJKAtPvqkHqrf/79zeBpDmQ1EVAnEEm4v+8vBGpZ9IrtooAVJLRopD1GtvFYHkc
oDLxT4gD21PC5X3AbewezHV1EvPW0pT8IW+EA0dsIudojqHoLlyDXDMpGq36lYbd
26/O4gwe8UItwMX19hUJjRTvVlLXRZUhbBZsnUvY3lcymcS+5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF35RSE2SLbR+l+YXPzDN8eWb68OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDIxNjBiYTQtZGM0Yy0z
ZjU1LWI4YjItNzllNmJjOGMxM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJvnVChXoKump8ZaICNBii3dR4xOHwpUJZAl6WCIj/CLtI93kQu1
y4NJa/8sYam5RFZLutZBWR6b6vPbFEOdo3ZxwI9H/s28bnjeKlnD1XKL43G8NgVK
XMAnu+bNBkpq36HvW1hFuDS6PXgnSNicHkmxpb8h1Z7cSBKjwrSAmuAeom6LA7zR
xiPbTdS33raz/o54DAc8DffcNMZSSvUPPp+CQyIM3QHvPUdYKIhfFlxnOG5sujUD
6VA0qwIxGRWuondWh0Fe/16APZ7THxg+tMvcyGbV21UZBDK/vxHMgJe8rlnB0rYy
biHDW9Er3g/FtANBKxcxt6r1LoxZtFvG1sw=
-----END CERTIFICATE-----
Generated at Mon Apr 20 12:41:44 2026 by rpki-client