Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06b139ee-b808-34c1-a60c-678a49b742db.roa
File:                     06b139ee-b808-34c1-a60c-678a49b742db.roa (raw, json)
Hash identifier:          gw4xjbdniXcKJc/+gs/ErFZUVbPU5+XFb2hPSbhrq6E=
Subject key identifier:   49:C9:FF:0C:F5:CE:50:A7:DE:F6:0D:38:71:E7:88:B1:C4:B8:A3:05
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DEDE0888E40F8080262B59300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06b139ee-b808-34c1-a60c-678a49b742db.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     398638
IP address blocks:        2001:470:372::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:88:8e:40:f8:08:02:62:b5:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=b1ca08e8-49f1-45c3-8599-17ba7f76d74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:c7:e5:c9:fe:f1:ac:67:29:18:d6:54:e5:
                    cf:32:61:bd:60:6d:9e:35:e5:81:64:1a:93:33:3a:
                    f0:7d:50:42:de:09:56:23:99:81:f0:e8:9f:0e:d5:
                    8f:42:1f:8d:e5:30:c1:a7:3a:9e:ee:24:0a:22:d8:
                    bd:5a:38:77:42:0e:35:00:48:99:16:4c:84:c7:3b:
                    08:b7:5c:da:72:2f:d8:45:b6:f6:54:13:79:0c:34:
                    b5:54:62:8c:15:f1:2a:52:eb:a5:e0:45:80:2a:23:
                    b2:32:17:ab:f8:51:d3:a6:cd:37:69:10:78:f9:79:
                    64:b4:d7:05:60:b6:31:ec:ec:ee:0f:27:f7:b2:43:
                    fe:4f:89:e6:c4:b5:d3:fd:58:1f:44:b8:69:84:cd:
                    d0:28:da:f5:1f:01:5b:cf:89:42:b1:d2:9d:9b:f5:
                    63:32:ea:a2:ac:12:2b:e4:84:94:d2:ad:e8:43:15:
                    16:d9:1f:99:58:5a:a5:db:4a:e3:31:1c:21:69:b1:
                    ce:6f:32:92:9b:3e:87:e1:3c:7c:c0:1f:2e:a6:a5:
                    2a:f0:2e:1f:4b:ed:a1:e6:09:e8:32:c0:ff:86:1e:
                    14:74:20:08:d9:15:4a:ed:a4:82:65:f8:41:88:a1:
                    a8:67:de:23:e2:bf:a2:67:6f:bb:a7:12:32:3b:ba:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:FF:0C:F5:CE:50:A7:DE:F6:0D:38:71:E7:88:B1:C4:B8:A3:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06b139ee-b808-34c1-a60c-678a49b742db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:372::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:df:e2:a3:1d:d2:ef:55:ec:98:7a:17:79:a6:13:af:4d:
         a4:b6:51:0c:0a:07:21:5e:39:ec:61:37:43:55:e1:a0:63:9a:
         5a:5e:73:95:cc:a0:5a:b2:df:6e:c5:e6:67:94:80:e6:a1:e1:
         45:09:3f:fe:fc:a1:3d:94:30:79:2b:86:3b:4a:56:c1:71:be:
         b8:55:e1:7c:05:10:1f:97:df:15:f3:ae:6d:c4:8a:9f:99:a3:
         d1:ca:25:df:da:c0:b9:86:be:c5:fc:70:db:bd:7b:47:e3:bc:
         db:03:c8:4f:9e:0e:3d:f9:97:8c:7d:a6:8d:7a:a1:c4:a7:6d:
         54:2d:4c:07:c3:45:c3:3f:9b:05:69:21:07:88:29:c9:88:79:
         6c:27:79:82:ad:ac:2b:3c:c1:de:39:ab:94:0a:4d:59:72:fe:
         4f:e4:01:a1:1a:dc:62:ad:75:ca:d5:2e:a8:60:bd:5c:de:e1:
         a7:48:24:23:11:36:c6:d4:2e:c5:84:ac:01:8c:a1:cc:53:be:
         49:ff:d9:37:41:0a:be:b1:35:fc:1f:3b:5f:3b:68:67:51:8b:
         23:c7:a5:f8:f8:a4:86:6f:12:40:3a:29:0c:40:3c:b9:24:65:
         34:0d:ca:58:8d:0e:8a:b9:b1:fb:26:54:58:cc:5d:98:12:23:
         19:a8:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:29 2026 by rpki-client