Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72b05095-1d0a-3a1a-8f37-1e9667fea343.roa
File:                     72b05095-1d0a-3a1a-8f37-1e9667fea343.roa (raw, json)
Hash identifier:          ZIrrVwgrbFbcFzI0XYPLmQTozFU8buMuCBdq6qILwpY=
Subject key identifier:   15:1D:AD:F3:5A:37:07:1B:95:C6:BE:67:13:D2:B2:C6:3B:3B:96:8F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE9BF3C18ADE6AC4B58D2C780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72b05095-1d0a-3a1a-8f37-1e9667fea343.roa
Signing time:             Fri 22 May 2026 01:30:14 +0000
ROA not before:           Fri 22 May 2026 01:30:14 +0000
ROA not after:            Thu 20 Aug 2026 01:30:14 +0000
asID:                     63356
IP address blocks:        2001:470:469::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:bf:3c:18:ad:e6:ac:4b:58:d2:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 22 01:30:14 2026 GMT
            Not After : Aug 20 01:30:14 2026 GMT
        Subject: CN=3760475f-4a2d-4db3-92f5-8665767cd645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:ac:b1:37:8a:c3:8e:fb:86:49:0c:8d:c0:
                    37:e7:84:48:76:52:66:3e:eb:e8:ed:3a:ce:3b:c0:
                    c6:f5:b6:eb:a9:61:61:19:18:22:7e:40:c0:47:67:
                    a7:93:65:e1:f8:70:85:cd:22:09:ea:d7:ea:b5:b4:
                    ac:4d:84:1c:5c:eb:e6:ff:c2:cf:b0:f4:a2:e9:c8:
                    c4:5b:2d:69:bf:37:f3:46:25:f5:70:08:09:ce:ae:
                    5d:2c:9b:fb:5a:16:c9:88:b5:d3:d1:48:79:30:80:
                    64:4e:ce:0b:db:a7:1d:1a:86:59:49:94:95:1b:80:
                    f8:20:bd:aa:ae:a2:37:23:f7:5e:dc:2d:5b:bd:01:
                    a5:5e:37:37:29:b0:4e:f0:e9:15:69:fb:10:5c:18:
                    37:6a:b1:f9:e1:32:a2:22:9c:b9:f2:46:56:f3:58:
                    04:fa:28:96:33:66:da:ed:05:d3:bb:c2:3f:b1:58:
                    b8:48:ee:e8:e1:6c:27:d5:08:61:7b:1c:ea:b8:d2:
                    1a:1b:6e:eb:89:52:0c:a4:35:ea:30:9a:43:6e:ce:
                    ad:f1:c2:71:e5:b5:d1:22:79:49:4d:0f:19:54:58:
                    fa:b9:6a:c4:a6:b9:94:1e:98:fd:f0:2f:1a:ff:18:
                    b1:71:df:19:0f:40:d0:27:04:06:be:3d:14:e9:54:
                    15:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:AD:F3:5A:37:07:1B:95:C6:BE:67:13:D2:B2:C6:3B:3B:96:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/72b05095-1d0a-3a1a-8f37-1e9667fea343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:469::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:23:b2:c1:8c:7f:91:e9:8f:d2:43:9a:44:eb:51:2d:dd:0f:
         66:8b:35:11:53:53:65:62:1b:b2:84:cf:7e:21:3a:56:bb:6e:
         06:dd:b0:ff:9d:dc:e1:64:5e:17:16:c0:48:ff:d3:6e:0d:7e:
         8a:46:8d:1d:f8:40:08:f4:12:7e:df:b0:ea:46:48:33:b9:46:
         36:92:fc:1a:cf:54:ea:72:21:54:13:5b:56:a1:8b:f5:a5:8d:
         e3:80:d3:0d:de:f1:8d:85:be:38:13:68:8b:09:a4:b3:aa:d0:
         c1:e0:09:f4:7e:92:55:90:cd:e6:83:13:4d:96:27:c7:69:ac:
         ac:11:e8:99:3c:15:1f:20:56:f5:cf:16:fc:0b:6b:11:3e:06:
         f4:e3:2e:0c:ce:9b:d4:1d:6b:d6:d3:63:1d:4b:61:e4:25:12:
         42:72:fa:7e:0b:15:e1:eb:77:ce:fb:31:a3:86:72:75:cf:23:
         e5:0c:4d:93:b6:72:44:e7:7e:04:e3:41:7b:e5:60:9b:55:1e:
         ff:3b:fc:6a:c7:6e:62:18:95:d7:a1:31:40:bd:c3:b2:bf:30:
         7d:09:30:68:d4:93:56:2a:71:c4:b1:ff:03:69:56:b1:3a:3d:
         2c:c8:b6:cd:1b:cf:fe:a2:4e:37:4b:5c:15:e0:d7:ac:98:1c:
         56:fb:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 07:56:02 2026 by rpki-client