Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0361ac92-2ce4-360a-b6ee-913e848493d3.roa
File:                     0361ac92-2ce4-360a-b6ee-913e848493d3.roa (raw, json)
Hash identifier:          +9i659TvJTVzerUYcc1W7DGs1rlg6P1B30gjenSI/Tc=
Subject key identifier:   82:F7:8B:FB:2B:17:E1:87:02:EC:A9:4A:A2:20:1F:64:87:2B:69:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6C63F202AFDF67CA51C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0361ac92-2ce4-360a-b6ee-913e848493d3.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     201754
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6c:63:f2:02:af:df:67:ca:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=54e71b75-baaa-40d2-9728-c5cb4d423f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:1e:87:dc:dc:8d:10:0a:e1:30:62:75:13:
                    5f:01:1c:6a:5e:f0:c6:0a:75:06:44:f5:91:75:57:
                    e0:82:9f:aa:81:7d:cb:d3:0c:65:28:55:84:e0:22:
                    af:e1:7d:86:d7:b1:07:83:ef:c6:65:ac:67:89:33:
                    b6:33:f6:02:84:89:9e:84:e7:03:12:c4:09:09:d3:
                    3a:22:c6:12:83:76:32:b3:2e:c1:5f:4a:19:4a:75:
                    75:56:4e:7d:47:fe:85:4c:48:fa:a9:37:a7:66:75:
                    0c:9c:71:b6:6b:b8:eb:b2:2b:30:fe:89:5d:04:82:
                    c0:4c:d3:71:1b:d5:52:85:41:31:f0:0f:79:e6:72:
                    c0:4a:21:c2:37:85:8e:cd:12:f6:da:f9:04:25:44:
                    7c:48:27:62:c2:1b:83:f6:a8:79:f4:de:a9:76:a0:
                    92:da:ab:87:9f:c5:c4:75:13:f3:e0:cc:d7:fb:ee:
                    8a:f1:59:31:f7:79:c5:59:37:5a:42:76:69:d1:88:
                    c8:6d:8e:bc:16:28:a5:19:a7:a4:2c:d6:fc:70:8a:
                    d2:cc:db:e0:1f:d0:d6:b1:f3:6b:e5:7c:ef:a4:e3:
                    e1:56:8d:cf:48:08:70:07:52:4a:ec:93:d2:83:a5:
                    66:44:9d:f1:32:c0:7d:95:45:2b:db:16:7d:fc:b0:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:8B:FB:2B:17:E1:87:02:EC:A9:4A:A2:20:1F:64:87:2B:69:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0361ac92-2ce4-360a-b6ee-913e848493d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f5:92:0c:4e:fd:83:9d:55:16:36:ed:41:ba:f1:98:b8:91:
         b3:b9:71:10:31:91:c9:c0:0a:b2:dc:81:fb:41:0c:b2:60:17:
         57:f0:ce:bc:c4:97:11:46:9c:45:a5:2a:c6:60:df:d8:9e:9c:
         4a:21:be:10:bc:ca:74:08:54:96:c4:e2:54:a2:86:86:de:03:
         89:a5:99:16:5a:b2:ec:7f:a4:4a:ba:a3:95:e5:dc:29:34:e2:
         0f:eb:76:4c:52:a8:f9:76:68:b3:18:17:9d:b6:c7:90:75:d6:
         cc:0f:0c:4b:d6:14:fe:91:30:4e:46:bd:f4:97:c7:98:6c:0d:
         32:06:71:43:a1:9e:37:ca:a4:9f:41:d4:49:21:ba:5a:6d:e5:
         aa:e8:58:2f:f1:43:1e:43:5a:62:9e:82:04:a6:2c:71:de:93:
         6e:8f:9d:12:00:8f:1c:96:d4:c3:07:79:d8:4a:c9:bb:50:59:
         50:d7:43:a1:3c:48:9d:70:5c:0b:4b:ad:0a:10:8e:8f:7c:1a:
         09:73:0d:06:60:d1:55:ef:cd:56:9a:b2:10:c7:f8:1c:02:19:
         5b:54:dd:0d:43:5c:35:29:23:ad:c2:d3:04:ad:ef:f0:fa:02:
         10:68:f0:6b:26:8e:f8:ed:41:10:2b:3a:9a:48:e8:e7:96:7a:
         62:1d:c8:3e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2xj8gKv32fKUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NTRlNzFiNzUtYmFhYS00MGQyLTk3MjgtYzVjYjRkNDIzZjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxYeh9zcjRAK4TBidRNfARxqXvDGCnUGRPWR
dVfggp+qgX3L0wxlKFWE4CKv4X2G17EHg+/GZaxniTO2M/YChImehOcDEsQJCdM6
IsYSg3Yysy7BX0oZSnV1Vk59R/6FTEj6qTenZnUMnHG2a7jrsisw/oldBILATNNx
G9VShUEx8A955nLASiHCN4WOzRL22vkEJUR8SCdiwhuD9qh59N6pdqCS2quHn8XE
dRPz4MzX++6K8Vkx93nFWTdaQnZp0YjIbY68FiilGaekLNb8cIrSzNvgH9DWsfNr
5XzvpOPhVo3PSAhwB1JK7JPSg6VmRJ3xMsB9lUUr2xZ9/LA//QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIL3i/srF+GHAuypSqIgH2SHK2mTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDM2MWFjOTItMmNlNC0z
NjBhLWI2ZWUtOTEzZTg0ODQ5M2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKb1kgxO/YOdVRY27UG68Zi4kbO5cRAxkcnACrLcgftBDLJgF1fw
zrzElxFGnEWlKsZg39ienEohvhC8ynQIVJbE4lSihobeA4mlmRZasux/pEq6o5Xl
3Ck04g/rdkxSqPl2aLMYF522x5B11swPDEvWFP6RME5GvfSXx5hsDTIGcUOhnjfK
pJ9B1Ekhulpt5aroWC/xQx5DWmKeggSmLHHek26PnRIAjxyW1MMHedhKybtQWVDX
Q6E8SJ1wXAtLrQoQjo98GglzDQZg0VXvzVaashDH+BwCGVtU3Q1DXDUpI63C0wSt
7/D6AhBo8GsmjvjtQRArOppI6OeWemIdyD4=
-----END CERTIFICATE-----
Generated at Tue Jun 30 21:18:39 2026 by rpki-client