Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f3053b1-0d33-32f7-918f-55df50ae215a.roa
File:                     9f3053b1-0d33-32f7-918f-55df50ae215a.roa (raw, json)
Hash identifier:          24LcV1aE8BOJ8qVq72nPCuZTtKOuiUyE38gEUgSxux4=
Subject key identifier:   8A:7B:48:7D:69:B4:40:DF:33:B6:83:C4:05:6E:C7:30:10:10:83:2F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DAC4592B7CFA5DC13C3890000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f3053b1-0d33-32f7-918f-55df50ae215a.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     210226
IP address blocks:        2001:470:348::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:92:b7:cf:a5:dc:13:c3:89:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=ed325cf7-4c09-48c2-945f-bf9a536ddcc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:bf:02:78:88:9d:2b:53:d2:77:1a:85:ec:
                    b3:9e:1c:fa:e8:ed:bf:76:bd:22:82:fc:fc:fe:22:
                    14:d9:9b:30:23:4a:ea:cc:05:f8:cf:8a:48:d2:82:
                    31:74:fb:43:33:b5:be:4f:dd:55:cc:11:bb:e0:bc:
                    6a:f7:eb:50:8a:76:04:a4:a5:db:2e:ea:95:56:98:
                    fb:5c:eb:f3:93:2b:f7:43:da:f3:11:77:fa:1f:b3:
                    41:1e:77:04:49:14:92:08:65:78:ca:bb:c9:f2:4e:
                    6b:83:65:0b:9f:7b:26:ba:ca:35:ce:45:16:a7:43:
                    f3:b4:f6:28:a1:1a:ac:df:fa:5d:c6:e1:c2:32:86:
                    d1:39:5b:5e:8b:43:66:8d:4b:dd:51:9f:5e:86:a0:
                    ab:c8:4b:c2:45:57:00:7e:e4:14:2e:97:ea:ca:31:
                    8c:79:18:29:85:0f:fe:8d:b8:59:11:2c:2d:1f:17:
                    6e:e3:19:bd:67:ad:87:3e:cc:51:80:28:cd:7c:2c:
                    8b:8e:bb:38:48:d7:d4:df:59:d4:d0:23:38:23:b1:
                    7a:30:e2:4d:a1:64:36:91:e6:56:1f:dc:59:d1:01:
                    d7:b9:12:11:5e:27:09:2a:09:53:f2:bd:4d:bd:e7:
                    21:d7:5b:b3:3c:30:4d:34:ec:d9:41:f0:b7:b7:af:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7B:48:7D:69:B4:40:DF:33:B6:83:C4:05:6E:C7:30:10:10:83:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f3053b1-0d33-32f7-918f-55df50ae215a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:348::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:28:3b:ea:a8:5a:14:2c:e8:fc:2f:71:fd:51:ae:29:b3:3c:
         7d:4c:fa:d9:6a:51:2c:25:5a:e1:b9:56:77:97:28:32:e5:ac:
         46:06:ca:99:1d:b8:62:49:e5:5f:6a:6f:72:74:8c:00:36:07:
         7b:94:7e:0e:0c:77:6c:fa:29:e8:01:85:50:43:c7:b7:0f:4a:
         7a:65:3b:ad:b2:aa:52:15:7b:dd:ac:0d:7a:c8:d7:75:45:83:
         16:cb:28:47:ce:06:68:d9:fe:61:bd:fa:be:79:b1:3c:3d:0a:
         e5:de:f8:57:ae:dd:47:2a:46:de:81:b1:9a:e5:5b:3c:1c:57:
         40:8d:a3:b8:8f:36:82:10:1c:d6:77:25:9d:96:35:97:97:5f:
         35:e5:86:10:1b:5c:13:9a:0f:7c:33:23:56:27:38:49:5a:88:
         3d:ca:f7:ff:67:fe:94:b9:84:a3:f3:3b:d8:e5:a4:dc:ed:e8:
         b6:9f:e9:cd:80:a8:36:dc:41:23:33:3a:e8:c2:2e:d9:a8:de:
         21:e4:fc:74:8d:9b:29:23:5d:c1:38:ed:90:24:84:cc:f6:bd:
         3b:97:a9:8c:62:af:cb:ae:ba:cc:b8:3f:0a:16:22:08:45:59:
         2f:ca:47:4b:a1:ed:3c:88:76:6f:27:ad:83:c4:2d:7f:c2:e1:
         2c:e1:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 22:32:42 2026 by rpki-client