Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b7f1009-13c3-3520-981f-b1f8a3ae4353.roa
File:                     7b7f1009-13c3-3520-981f-b1f8a3ae4353.roa (raw, json)
Hash identifier:          wwVm83n38+URLprOEhfQrl0QwxjSntjiMAWaoQ81V3Q=
Subject key identifier:   9C:2C:C2:3F:4F:78:3B:7F:3A:E7:D8:00:E8:11:85:CA:0B:E3:AD:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0EA7EB4BF415A998F82BA340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b7f1009-13c3-3520-981f-b1f8a3ae4353.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     32806
IP address blocks:        2001:470:444::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:eb:4b:f4:15:a9:98:f8:2b:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=5cbb042a-4b98-4f51-ad2c-9a944920c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9b:c3:63:57:7f:9b:1e:42:97:1c:f0:74:25:
                    d9:f2:e5:d9:ef:9a:a0:92:bb:df:c3:d0:a6:69:a0:
                    12:a4:a9:18:a5:07:da:32:aa:17:7d:8f:25:57:e2:
                    46:0d:73:42:28:74:01:1f:58:88:09:17:01:a2:da:
                    18:97:06:66:c8:a1:13:78:0e:0f:34:28:a6:ac:43:
                    8c:19:32:fc:5e:ac:39:52:eb:a9:94:74:36:c9:1f:
                    8a:ff:16:5e:ce:5e:01:7c:cc:c1:9e:51:d2:09:56:
                    34:3c:65:f2:cc:1d:d2:a7:0d:e0:75:f4:fc:84:27:
                    ff:d6:fe:8d:2a:27:f9:8f:00:05:23:21:2b:89:2a:
                    f3:a6:af:a6:00:e3:3b:98:2c:6a:15:04:60:e4:aa:
                    47:02:38:a9:bd:bc:af:30:f4:c7:ed:2b:11:e6:94:
                    ed:8b:83:0e:23:c9:1c:33:32:51:bc:4d:99:8d:86:
                    79:55:69:9e:76:9f:8c:36:c9:62:e1:20:c7:09:ca:
                    88:92:18:18:3c:f5:99:aa:5b:d0:fc:e4:89:06:74:
                    62:3f:84:9d:82:40:f8:b7:9e:19:a6:ad:0c:6e:b8:
                    8d:a5:3a:22:f2:e6:8e:3e:a8:ee:3f:5a:7d:7e:e5:
                    9e:ad:89:e9:43:94:22:13:14:a8:f2:62:b0:10:29:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2C:C2:3F:4F:78:3B:7F:3A:E7:D8:00:E8:11:85:CA:0B:E3:AD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b7f1009-13c3-3520-981f-b1f8a3ae4353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:444::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:51:af:b4:cc:9a:41:86:da:10:23:00:58:c4:4e:0f:ce:b8:
         8f:bb:e2:10:75:20:36:91:ca:20:c8:49:9e:57:0c:7e:22:1e:
         07:c1:ae:32:7f:0a:2c:6f:9c:f9:b4:d4:e7:bc:46:bb:68:6f:
         9a:4c:7b:fc:30:64:a0:89:b4:d6:b4:1b:ce:e9:47:c3:84:8c:
         4a:6f:f7:a5:97:06:80:51:d2:6e:c8:28:0d:c4:0d:d6:8b:46:
         39:19:62:fb:1e:ea:d6:56:bb:5b:70:84:06:5c:8a:bb:38:a8:
         ad:50:36:c1:b8:7e:3a:11:88:6c:be:52:5e:57:fc:b1:83:ed:
         71:ac:90:ec:eb:2e:c9:9e:a7:16:2f:d5:c5:b3:de:dd:92:b3:
         79:46:0a:67:44:c2:a9:28:5d:0f:2d:f9:c9:57:69:27:56:9e:
         d2:39:4a:7c:0b:06:f8:4a:18:35:dc:ce:e7:87:b2:a8:cf:15:
         c9:ef:d6:d8:b2:de:27:5f:c0:ae:89:74:cf:4f:a2:25:a0:ac:
         b7:0a:8d:23:ea:c4:64:50:c2:0a:07:86:78:9b:d1:5f:21:9b:
         77:05:d1:19:4c:07:a3:1e:61:5a:7b:20:a5:7f:5e:19:1b:41:
         08:d1:3c:3c:31:47:86:07:c2:90:14:88:1e:d3:8d:dd:23:03:
         be:98:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 08:35:11 2026 by rpki-client