Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28889a14-4b63-38e4-b486-9a33b96b80d7.roa
File:                     28889a14-4b63-38e4-b486-9a33b96b80d7.roa (raw, json)
Hash identifier:          ukXxwwv7E8P6CJskfZhwEtq2aKbIDjU7fD5blWQ9RLw=
Subject key identifier:   1D:91:DE:7D:6D:06:A2:EB:3B:21:9B:79:6F:EF:10:B3:B6:BC:04:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DDBBB1AA04217EBEF31255E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28889a14-4b63-38e4-b486-9a33b96b80d7.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     62744
IP address blocks:        2001:470:52e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:1a:a0:42:17:eb:ef:31:25:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=e08ee67a-e304-449a-a726-c704d167fdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:0d:ad:1a:03:e8:8f:14:d8:a8:11:96:a5:
                    3c:cd:09:13:89:b9:d1:2d:a4:86:fa:a6:6d:a8:39:
                    35:7e:3e:f5:ba:61:55:89:05:50:69:16:e9:19:a3:
                    d2:93:20:c9:f5:01:53:3b:44:0c:82:1d:f4:18:a7:
                    9f:01:a8:c7:7c:16:22:ee:0a:7d:d0:0b:9b:ed:14:
                    4c:4c:52:04:4f:60:d5:a8:b6:b9:23:f1:89:e2:8c:
                    b2:df:17:ad:70:03:d3:1f:10:ee:93:84:c1:c0:87:
                    38:ec:a5:86:60:91:ad:56:a1:f0:cf:1a:23:66:7a:
                    09:e5:52:f5:2d:3f:f6:ea:71:df:55:d6:38:58:1e:
                    bc:10:59:e0:ff:b4:f7:ac:eb:ca:d2:1d:4f:9d:2f:
                    d2:22:65:73:1c:64:af:1d:53:6e:89:53:1d:18:cf:
                    e1:c1:c7:f0:04:83:e3:83:9a:5e:1d:46:0f:71:5b:
                    39:2f:6a:02:a9:66:2b:d6:9b:10:a0:2b:17:01:f8:
                    89:28:2d:07:1d:02:3d:1b:89:28:23:2c:b6:cf:45:
                    80:ee:d2:63:ac:0b:cb:cf:b7:c4:36:8c:cf:81:f0:
                    c0:64:80:7e:af:25:d6:d2:ee:ce:be:f8:01:4e:5e:
                    37:3a:b3:b3:b9:a9:7f:4e:fc:75:f4:64:d7:af:cf:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:DE:7D:6D:06:A2:EB:3B:21:9B:79:6F:EF:10:B3:B6:BC:04:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28889a14-4b63-38e4-b486-9a33b96b80d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:52e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:50:ea:53:5e:f3:4d:0b:0f:f9:7f:b5:3c:89:fa:d4:e6:fb:
         3b:79:2a:46:02:63:6f:88:ec:65:ab:1a:30:01:87:57:80:bd:
         ed:df:b2:2a:b7:8b:54:fc:07:8e:64:0f:56:0b:c7:68:7b:eb:
         b7:f1:48:47:1a:2d:b3:f7:2f:02:b5:17:40:0c:98:f6:d3:02:
         48:a7:0b:6f:0d:61:67:56:14:60:2d:8d:20:f9:5b:31:0d:51:
         48:cb:53:5b:9f:d6:8e:32:3e:41:63:96:ea:97:f9:01:ed:ad:
         0f:c5:6e:2e:06:38:8a:fe:0d:46:36:53:5c:f3:f4:e5:49:25:
         3c:5d:9b:73:8b:25:74:a8:d3:46:69:91:1a:4c:20:17:6b:88:
         b1:4b:c4:7e:7f:d0:b8:4a:49:3e:88:a2:4e:88:a7:31:c6:b1:
         b5:bd:c6:8a:eb:75:a3:4e:f5:68:22:c0:bb:12:9e:93:de:f8:
         cb:ef:b2:59:87:87:fb:60:a1:3d:66:58:6a:22:dc:3e:49:27:
         5f:f6:3c:ad:79:63:fb:55:a7:a7:71:56:2c:ec:61:ad:74:d5:
         41:a7:39:6f:c0:bf:6a:de:e5:29:41:ad:28:32:31:7e:b2:14:
         d7:8b:e6:d7:85:24:9f:8c:c8:6c:35:5b:c2:99:9e:27:bf:1e:
         b5:2b:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:05:37 2026 by rpki-client