Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9615cfd-3359-3699-9027-ba2902ebad88.roa
File:                     a9615cfd-3359-3699-9027-ba2902ebad88.roa (raw, json)
Hash identifier:          KmPwZVKWrtw1/XyttfpKlt9kbDe3PZnpeKAChciQ/gY=
Subject key identifier:   48:CB:4D:F8:33:23:95:C5:6C:01:6C:D1:BE:A5:F7:E8:26:63:98:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CAFBC7710166F59E345461E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9615cfd-3359-3699-9027-ba2902ebad88.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     16324
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:77:10:16:6f:59:e3:45:46:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=d8cedb39-142d-4e66-802a-49777171f34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:b4:94:a7:1d:96:56:59:16:c8:5b:9b:44:
                    0a:42:cb:a1:d3:2d:db:db:4d:4f:c5:97:5b:ec:39:
                    42:8f:93:a9:df:67:f6:af:86:22:69:49:72:8c:a7:
                    20:b4:9b:48:36:de:4b:e5:86:a4:f1:fc:22:a6:33:
                    4d:c8:b6:f1:ba:66:8e:b8:cd:ef:8b:a9:ff:b9:c8:
                    95:82:c9:43:d2:a4:56:81:98:b2:ef:ab:ed:e4:f8:
                    fa:f3:09:f1:60:15:ad:6c:9e:87:f2:23:d4:60:22:
                    94:bd:d8:8b:21:99:52:77:93:f3:7f:57:f6:eb:75:
                    17:2e:6f:48:ca:f5:af:69:9b:b7:56:18:8c:3c:57:
                    81:18:a0:49:c7:f8:8f:3f:06:0e:54:7f:2e:a4:1f:
                    f9:fd:c2:43:f4:f7:4e:24:3b:0d:17:25:c4:b1:4a:
                    1b:ba:0a:4c:11:76:1f:aa:4b:f9:ec:b7:ee:55:10:
                    23:a2:d4:b2:24:f6:73:e8:83:49:c4:d8:5a:de:29:
                    32:0f:66:11:45:d3:25:23:2c:30:b0:db:5c:07:05:
                    39:ed:e4:33:6f:67:68:3c:b9:dd:88:bd:39:6f:5f:
                    e0:d0:f8:69:9e:1f:3f:c5:66:7e:aa:c3:4e:b5:36:
                    36:42:df:55:db:68:1a:5e:c0:b6:bb:40:94:d9:34:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CB:4D:F8:33:23:95:C5:6C:01:6C:D1:BE:A5:F7:E8:26:63:98:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9615cfd-3359-3699-9027-ba2902ebad88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:a2:99:99:dc:a9:fc:26:af:38:83:a7:2d:ac:d4:d0:53:
         47:1c:58:5d:9c:e9:4d:8b:ce:49:dc:c5:c6:32:9f:f3:f2:da:
         2d:35:5a:cb:04:8c:a3:e8:3c:15:98:5c:52:9e:5c:17:95:30:
         5a:41:ea:c7:0b:8f:81:d4:b2:4a:5d:68:27:1c:c1:a2:dc:06:
         13:d0:09:20:62:57:b3:5d:ef:2b:2d:b8:14:c1:86:b1:a5:7b:
         40:21:9d:ce:63:f8:a9:c0:95:c7:a1:5a:f2:da:68:81:2c:53:
         c2:a8:bb:0f:b5:86:80:9b:97:8e:1f:f7:cf:d3:1f:4b:29:7a:
         42:95:0b:b6:aa:df:fd:5d:a9:e9:cc:b9:ca:08:c1:98:53:c8:
         14:a2:17:ac:86:6b:ad:4c:bb:e9:eb:c0:de:ba:0e:62:fc:66:
         7f:db:66:53:40:17:cc:26:fd:45:9f:4f:47:f8:a8:7a:15:c5:
         d2:ce:1e:78:fd:b6:1f:ca:2a:34:22:48:b8:c0:79:93:e4:bc:
         1d:d6:27:21:dd:19:47:81:5d:68:7d:14:9b:02:74:d5:b4:c8:
         7c:20:74:65:c2:54:5a:ec:9a:f6:3b:7f:28:d6:bf:4a:a2:f5:
         5b:fa:61:d3:2c:17:fb:52:7c:41:bc:4a:a6:9e:d1:b5:ca:11:
         75:30:33:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:59:09 2026 by rpki-client