Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa
File:                     4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa (raw, json)
Hash identifier:          4GoHWjOvRZjB/Pn2DNzSkHQmddZ0a6zp+k005tvhzok=
Subject key identifier:   DB:6D:C3:85:3E:2B:58:8C:25:8D:68:EC:EE:69:6B:BE:FC:C1:E6:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CAFBC72006F474D883F644EA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     48957
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:72:00:6f:47:4d:88:3f:64:4e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=d9fe43dc-664e-4574-bd8f-61914e93ea22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:dd:de:96:b9:57:e8:70:a1:de:0b:14:a5:
                    53:c2:00:f2:1d:db:05:86:e6:60:e2:09:35:54:53:
                    11:69:5d:ae:92:e1:5e:6a:18:a1:f4:2a:c1:bb:fd:
                    f4:bd:68:bc:c9:f8:70:d4:d5:55:ca:2e:35:da:62:
                    18:f6:e5:62:1b:65:9d:52:a0:cc:5b:86:1a:63:93:
                    22:9a:4e:45:df:f1:5b:76:39:bc:71:a5:5d:e3:3b:
                    ae:e9:57:78:ae:76:7d:0e:61:56:66:ca:44:a5:6d:
                    3e:d7:da:9f:e9:07:14:15:d7:2d:83:6c:9c:13:08:
                    2b:1b:22:1f:a6:6d:8b:40:8e:28:52:b1:dd:dd:e8:
                    79:e3:cf:01:bd:46:8a:fe:cf:ff:4e:1c:3a:4f:8d:
                    af:23:78:39:e8:f5:75:d8:1b:6f:ec:0e:35:5e:47:
                    dd:32:6c:4f:9c:cb:2a:5d:d3:a5:67:57:2d:65:0c:
                    7e:c4:b2:97:98:ec:cb:cf:db:ae:b4:68:8f:33:89:
                    e1:92:ab:70:a9:28:83:0a:08:4a:44:84:56:a4:aa:
                    7f:7b:e1:8c:78:27:6e:1e:1b:30:d6:fa:e6:02:9f:
                    b0:15:02:50:53:13:f0:56:e5:69:87:b2:c7:ed:36:
                    71:dc:1e:31:98:0f:ea:40:6a:97:40:47:dc:3f:f5:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6D:C3:85:3E:2B:58:8C:25:8D:68:EC:EE:69:6B:BE:FC:C1:E6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:a0:5b:d1:0e:44:84:e2:ce:88:d5:72:a9:a1:cf:db:7a:
         c6:57:24:ac:ec:0d:a7:a7:6f:31:e3:aa:ff:8e:80:51:c6:1e:
         da:89:b7:dd:08:7f:76:41:b5:13:55:b9:30:bf:3c:f6:6d:26:
         57:c6:e2:fc:53:f8:36:6c:5a:c8:3d:5a:a4:ae:7f:07:6a:81:
         12:f8:5b:5e:a1:a6:cc:f0:0d:88:99:5f:c3:a0:c5:80:94:22:
         1d:1b:fc:7f:ec:0f:76:a6:48:b6:02:12:28:f8:a0:a6:db:ac:
         97:c3:83:bc:42:93:1e:ca:9c:4b:83:68:0d:3e:97:86:b2:26:
         5e:e1:8c:32:6e:ca:40:8d:df:84:2b:23:00:fa:b0:f0:7d:96:
         28:86:24:af:b4:f5:fa:70:d7:3f:52:c9:50:09:81:d4:f3:7c:
         5d:a0:fd:49:f9:e1:83:89:c7:82:d2:56:c5:9c:74:55:39:2e:
         35:f3:40:c2:70:cb:23:62:c5:57:ce:ab:69:6f:5f:fa:e4:46:
         b0:19:d0:c5:ad:d6:8a:0f:e0:8f:0e:ad:76:77:7c:4d:95:72:
         ab:98:d8:6e:56:02:b8:71:db:77:24:85:87:de:71:3d:63:31:
         c6:3b:b9:86:cb:c5:4a:ff:d5:4b:7f:e9:92:69:5c:77:d1:59:
         6f:c5:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:57:29 2026 by rpki-client