Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa
File:                     49131492-fb77-3e0a-b34e-b5b805ec45a6.roa (raw, json)
Hash identifier:          Yxk4I41AqiQB0NlGC6kY03EkUgEBNxXRrLRwqOxFKnI=
Subject key identifier:   BB:F2:79:30:40:01:34:07:92:14:E6:90:B7:D9:30:C5:60:21:C9:C5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6EE90926605F5FEBBFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     21903
IP address blocks:        2001:470:da::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6e:e9:09:26:60:5f:5f:eb:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=2abd99c9-1dcd-4589-8cfd-9d3941442666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:9d:42:92:b5:65:39:ed:40:61:27:c3:84:
                    d2:f6:07:07:d1:f8:c7:eb:24:38:65:c4:ec:98:c0:
                    4c:a3:89:df:43:b6:1f:f8:05:48:d8:78:84:04:d1:
                    9d:37:39:0c:1d:62:a6:be:a0:0f:94:17:ed:5d:ea:
                    4e:2f:6b:0c:83:4d:3b:10:30:98:06:96:2f:2c:07:
                    75:35:7a:8b:9a:1b:04:f0:47:b9:ac:97:07:ed:ca:
                    08:55:96:6a:f0:10:63:f3:48:ac:54:54:24:d4:3c:
                    f2:85:22:a7:82:b0:8b:7a:d2:0b:a6:71:84:0f:cb:
                    8f:c3:d6:6e:26:5d:d0:6f:73:af:67:cd:11:a8:a5:
                    43:00:28:c3:ae:2b:9e:b7:d3:11:5f:46:1a:2a:71:
                    95:17:0a:e5:7e:01:81:ad:a6:5c:f7:39:60:22:6f:
                    d4:f0:d0:1c:37:f9:ee:7b:c5:e4:6f:d6:76:cd:4c:
                    dd:66:bf:66:ec:e0:4f:fa:8a:28:a7:05:a4:9b:56:
                    ad:b3:63:66:99:61:a3:ea:6a:1d:9b:0d:4f:36:e1:
                    8a:93:df:4b:67:7b:95:1e:cf:70:b1:15:5e:ba:19:
                    d1:be:4e:ed:95:45:8c:50:4a:8f:cc:81:f5:0e:3b:
                    ca:12:de:ed:47:d4:e4:e2:ea:28:67:cb:22:79:f8:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:79:30:40:01:34:07:92:14:E6:90:B7:D9:30:C5:60:21:C9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/49131492-fb77-3e0a-b34e-b5b805ec45a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:da::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:42:c0:e2:e6:72:02:c9:92:ea:bf:d6:28:5a:b9:6e:b3:
         d4:e0:90:3f:d1:f1:33:c2:e8:19:56:6d:7d:0a:2c:91:0e:6e:
         91:f5:32:f5:0f:af:83:e0:fa:aa:fd:4e:21:bb:f2:5c:2b:5f:
         dc:d6:79:b1:b5:22:f3:39:e4:80:6f:ac:cb:7a:84:46:86:78:
         f0:91:24:6a:0e:a3:cd:5a:4d:87:8a:2c:5c:2a:04:47:27:8c:
         73:ed:c8:b2:22:f9:f5:ec:39:8f:7e:f3:a6:ef:f5:94:5d:19:
         7f:50:eb:1a:ae:41:b2:9a:72:56:4e:d3:e9:7b:d2:e5:54:ef:
         a9:4a:18:9d:ea:3a:01:5a:25:95:7e:89:68:09:5f:04:cf:cd:
         1d:25:52:57:18:17:52:96:1e:41:ef:c1:f4:35:2d:5d:de:f8:
         c1:26:83:65:5a:1e:46:f7:d6:9b:18:51:be:69:4a:76:f0:42:
         0f:f3:08:d6:05:84:a1:8b:e7:92:85:d4:83:5a:03:d4:f7:8b:
         20:5d:0b:e2:ef:b8:42:44:43:93:64:a2:65:45:ae:f4:7b:a3:
         8a:fc:02:e1:0b:cb:39:3c:35:ea:f8:a2:85:23:d7:8a:57:e1:
         60:ac:d0:71:75:d4:b0:23:00:2d:0f:b9:43:6a:f1:31:0b:1b:
         41:cd:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 00:01:44 2026 by rpki-client