Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89d6813-1a0a-314e-9867-9a07bb8dea13.roa
File:                     b89d6813-1a0a-314e-9867-9a07bb8dea13.roa (raw, json)
Hash identifier:          RoJJl8AdN866E3N48zaF37DPkAWMC10gbcZHpNf8Zpc=
Subject key identifier:   5B:61:95:00:58:08:63:A9:C5:DC:F3:91:7B:F8:62:E3:71:D9:E0:BE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C9EFC7C12EF09A492DF047640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89d6813-1a0a-314e-9867-9a07bb8dea13.roa
Signing time:             Fri 23 Jan 2026 14:00:38 +0000
ROA not before:           Fri 23 Jan 2026 14:00:38 +0000
ROA not after:            Thu 23 Apr 2026 13:00:38 +0000
asID:                     62624
IP address blocks:        2001:470:330::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9e:fc:7c:12:ef:09:a4:92:df:04:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 23 14:00:38 2026 GMT
            Not After : Apr 23 13:00:38 2026 GMT
        Subject: CN=7ee8459b-747f-4cfd-a90c-7b3dd8fd49de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:6c:b8:b8:e9:fe:d5:b9:6c:ea:93:52:46:
                    11:2a:83:f5:66:9f:a7:6f:a9:9c:8d:f6:bd:73:86:
                    05:ca:65:20:c9:2d:d5:3e:07:02:0e:c8:73:42:78:
                    67:92:80:4c:fb:c9:fe:ed:fe:35:4a:5e:12:06:ee:
                    3b:af:55:20:93:15:8e:52:6d:91:3a:01:71:3a:9f:
                    22:56:70:ea:57:88:d9:98:d5:bd:20:ea:9d:a0:c4:
                    d6:74:36:3e:2c:55:e6:68:18:bb:b6:7b:73:1a:2d:
                    b4:c1:d2:25:1f:1e:3c:7a:c4:c3:ab:4f:4e:03:40:
                    6d:74:58:77:9c:45:be:f1:6a:34:e7:08:42:c8:1b:
                    75:cb:b2:6b:1e:f0:b1:89:33:40:f0:26:53:48:75:
                    22:7f:06:76:82:24:79:3f:bd:77:b6:d1:b5:13:b3:
                    bd:9d:00:2b:cd:b9:9a:24:1a:e8:bc:ff:d1:b2:4a:
                    8e:31:17:10:e0:57:16:2d:a0:44:91:1d:fc:88:04:
                    44:12:47:69:c4:13:5b:2a:a1:e4:95:a5:73:2e:39:
                    34:e4:3e:68:d7:da:31:7f:af:72:1a:f4:f5:72:d3:
                    11:74:1d:0d:a5:82:c4:1c:fe:9b:14:b7:a8:5f:1c:
                    f8:c9:3b:b5:a6:88:f6:81:ae:9a:c8:db:36:88:a3:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:61:95:00:58:08:63:A9:C5:DC:F3:91:7B:F8:62:E3:71:D9:E0:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b89d6813-1a0a-314e-9867-9a07bb8dea13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:330::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:ee:a8:4d:fb:4e:c4:52:6f:47:3c:a6:90:24:44:f7:fa:
         df:c0:6a:a6:96:cf:1a:c0:de:f0:ba:ec:68:b5:f3:c0:e8:00:
         d5:4e:7e:57:39:42:1e:92:ab:76:02:91:db:e6:5c:ec:5d:d7:
         09:e9:68:e0:8f:18:98:56:ba:e9:09:1e:e6:d1:65:28:0d:0c:
         19:37:87:94:e2:69:3f:c6:0f:ef:58:8a:d2:dd:1a:39:34:cc:
         ae:64:09:4b:88:d4:fc:e5:d0:7a:79:be:90:28:21:14:fd:4c:
         77:70:3b:52:a6:2e:62:6f:51:44:ac:88:72:c4:fd:99:3a:15:
         33:6e:ff:7f:b6:a6:8d:23:34:b5:61:18:ba:32:6c:08:a9:73:
         33:7b:e2:82:75:75:af:f8:1c:6d:ab:4a:74:01:6c:48:3b:e4:
         e5:a3:64:af:94:61:ca:d0:72:43:91:87:cf:16:69:2b:c8:5e:
         c8:08:9c:43:47:68:2c:65:06:da:d9:0c:4b:ba:1d:ff:4b:b2:
         cb:d7:bf:f8:50:fd:5e:72:59:0d:23:74:8e:a9:65:dd:6c:0e:
         2c:2d:12:07:26:27:83:ba:42:3a:1d:89:3d:ce:3d:28:73:12:
         2e:a3:fd:26:5b:03:ba:33:78:9c:2b:cc:51:b4:74:49:ec:07:
         1d:d1:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:58:27 2026 by rpki-client