Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa
File:                     a09b7742-cb4a-35e9-8fc9-02bee3443977.roa (raw, json)
Hash identifier:          0peMT17OfF9rkrA4CGhl2yfQzWvLsAzVAcQIFw50wn4=
Subject key identifier:   82:1F:C5:36:AB:B8:22:F4:32:C5:DF:8B:0A:A5:C9:7B:6E:AC:7A:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C6AA32153592F0FF121E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     54133
IP address blocks:        2001:470:1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:6a:a3:21:53:59:2f:0f:f1:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=04c0b844-4a6e-4bb5-97a4-5012d42634c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:e9:69:6c:dc:55:4d:93:0f:f8:d0:fe:80:
                    a1:4f:80:12:d4:f9:d5:de:64:83:0c:05:d5:fc:67:
                    b5:66:98:01:74:47:34:01:75:c1:54:3e:dd:31:30:
                    80:d2:c3:12:fb:3c:ff:f3:ae:ae:35:b5:4e:97:24:
                    c0:53:e5:37:9e:92:91:32:f8:ba:df:bb:d1:96:75:
                    41:51:16:00:ba:07:9f:88:89:f6:9e:5c:3c:67:92:
                    00:1b:6e:bc:95:22:42:d9:a6:8b:aa:49:a8:cd:b5:
                    97:7a:92:9e:31:96:3b:ea:14:27:73:6e:c2:f4:c9:
                    78:27:13:d2:39:bb:2d:f4:b1:2a:30:41:89:b3:e7:
                    7d:db:ba:90:5f:e2:86:7e:6d:7b:71:7e:3c:7d:7e:
                    26:d9:62:07:b9:40:b7:f1:7a:74:cd:81:50:16:02:
                    aa:38:c9:bc:d7:30:c8:ca:63:5b:cd:c0:3d:86:d0:
                    01:f7:87:96:88:d6:9a:40:96:af:47:cb:b3:95:ae:
                    19:29:c0:60:e1:74:82:ce:95:f5:11:5d:86:02:ca:
                    d7:32:af:2f:e7:49:03:51:d4:23:f9:8b:df:e2:01:
                    bf:2f:bb:9c:aa:d7:87:69:c6:7e:2d:41:33:06:10:
                    16:69:a6:38:c4:b6:ff:fb:da:59:b3:26:82:56:10:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:C5:36:AB:B8:22:F4:32:C5:DF:8B:0A:A5:C9:7B:6E:AC:7A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a09b7742-cb4a-35e9-8fc9-02bee3443977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:fe:37:54:c2:a7:16:6e:7e:15:16:6c:4f:cd:a5:68:a3:
         0b:d0:ae:aa:9b:58:fb:7b:b9:dc:44:05:d8:f3:86:6b:cd:fc:
         7c:fb:4a:2e:eb:c7:ad:f5:ae:89:82:b3:18:45:e6:5c:f5:b6:
         32:0c:94:27:a7:4d:d4:3e:5f:a0:cd:93:07:ec:6d:83:5a:6d:
         d0:f0:44:f2:ab:27:b8:da:a9:38:0f:06:9d:0a:6c:46:31:4e:
         d0:c0:1c:d0:a7:d4:9e:ea:a0:06:29:7f:56:5e:2e:8d:a6:8b:
         79:e2:e6:f2:16:0e:49:48:53:3c:69:bb:b7:f4:7a:04:0f:be:
         e6:ce:a4:f9:c9:44:cb:ca:c1:f9:5a:7e:dd:67:b9:e4:a2:81:
         3f:86:67:27:20:ef:c9:66:fd:62:64:23:d6:46:40:5e:53:04:
         84:71:ff:f3:df:30:1b:98:0c:f9:64:48:f1:82:ab:68:d1:db:
         b8:39:b4:61:cf:a6:c8:38:6c:b4:04:03:88:2b:0d:00:38:aa:
         10:ed:ef:fc:71:b7:0b:19:77:6f:d3:2a:01:7c:c4:0a:00:b1:
         16:0e:4c:3d:ed:21:2a:b5:5e:ce:42:61:de:de:63:3a:78:88:
         2a:7b:44:aa:20:bf:6d:ec:1e:0a:bc:9e:85:ed:0b:7a:1a:ae:
         ce:8b:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:58:27 2026 by rpki-client