Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa
File:                     82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa (raw, json)
Hash identifier:          VapVtQqDFf6kuP8wA4hCHFiPHAmm5xk7yaWsGt3hWIw=
Subject key identifier:   42:C7:D8:0C:E4:0A:3B:0A:78:0B:84:33:28:5B:79:12:89:10:44:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CE36219E2BAD088C69282C900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa
Signing time:             Tue 17 Feb 2026 02:00:31 +0000
ROA not before:           Tue 17 Feb 2026 02:00:31 +0000
ROA not after:            Mon 18 May 2026 01:00:31 +0000
asID:                     399687
IP address blocks:        2001:470:34f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e3:62:19:e2:ba:d0:88:c6:92:82:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 17 02:00:31 2026 GMT
            Not After : May 18 01:00:31 2026 GMT
        Subject: CN=8d1d23d4-6850-45a4-a82a-25238a75bd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:b3:57:fd:91:7d:cc:5e:ab:e1:d3:e3:4d:
                    84:7c:00:13:f6:d9:83:84:ae:2f:65:70:58:f2:b6:
                    df:8f:33:77:c3:d9:2d:0a:78:76:66:bb:c8:99:68:
                    17:57:ce:4c:27:99:67:42:90:c4:4a:27:71:f5:3b:
                    b5:69:30:24:4a:bd:ab:85:a5:70:93:12:3f:37:fa:
                    e2:ab:ae:bd:d0:ea:2d:25:79:f6:0e:b0:b8:31:3c:
                    5f:9a:82:db:cd:8d:3c:48:a6:e3:a8:a1:de:0d:c2:
                    32:4b:2c:eb:ff:d6:c4:3b:2d:85:ad:41:26:06:78:
                    83:ed:d0:c3:56:bb:25:37:1d:d3:ee:35:30:22:7e:
                    e1:ad:04:a2:02:49:c6:1f:cd:ff:04:39:fe:48:55:
                    03:09:4c:d4:28:87:ab:23:ea:fc:b6:a6:da:ec:91:
                    fb:0d:23:8e:1f:e4:a5:7d:59:9a:42:dc:b7:68:0a:
                    dd:dc:ab:cf:9b:09:6f:d1:37:35:30:49:f7:62:77:
                    23:94:c4:3b:2f:7f:5c:ba:cb:a9:fb:a9:9a:f9:16:
                    c4:8a:92:6d:5e:2b:dc:3b:a0:07:f3:e8:c2:18:82:
                    b2:2f:66:18:af:b6:da:1d:50:0b:99:6f:61:0a:75:
                    7e:74:37:c4:a9:fb:f2:41:16:46:97:fa:4a:41:c4:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C7:D8:0C:E4:0A:3B:0A:78:0B:84:33:28:5B:79:12:89:10:44:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82b1e614-7c0c-3bf2-b811-f87404b59cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:34f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0d:ff:61:2e:a0:b5:5e:b5:72:31:f6:a4:6e:bd:26:6b:8d:
         3d:3a:8b:5b:5a:f6:d8:a6:84:fa:a5:a0:42:4a:a2:e1:01:3d:
         94:b6:46:25:9b:07:25:41:f7:a1:c5:02:72:ea:54:ce:0c:e3:
         d8:22:94:20:d7:57:a1:77:17:08:b3:58:f6:aa:97:8a:f3:71:
         43:62:50:d0:e6:b3:f0:bb:d8:0e:05:f9:46:59:58:64:82:58:
         be:4c:93:46:9e:35:60:6b:76:3c:42:d5:f2:53:fd:1a:2d:7b:
         ba:94:bf:e4:e5:99:55:13:48:1c:97:1b:de:1c:08:5d:a0:af:
         59:62:d5:63:21:e0:a6:82:c6:d1:19:47:ee:b1:c4:88:fd:b3:
         25:b3:68:a1:fb:09:60:1f:59:7c:5b:a0:04:71:10:07:7d:2f:
         83:c6:99:37:17:59:10:f1:2e:78:df:8a:22:bd:12:3d:f5:3c:
         96:23:3a:a9:03:08:ec:05:95:c7:a5:6c:14:37:e9:cf:ca:26:
         9d:a1:3b:a1:ca:7a:3e:20:65:52:1e:6a:c2:05:8e:f7:d8:be:
         8e:c9:b1:09:73:01:60:ba:36:e3:fd:c3:fd:56:39:46:bf:95:
         a7:15:1d:e6:a0:a8:fc:ef:bc:e5:5e:86:80:b1:89:b4:17:be:
         96:cf:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:00:22 2026 by rpki-client