Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa
File:                     bb4f2049-ba62-3c87-888a-febe4a159ee0.roa (raw, json)
Hash identifier:          D05YK3f99HgHIqezIsL57dRX09dGJFLox4zUssyYj2U=
Subject key identifier:   A8:C2:C7:00:2C:56:F9:EA:90:C5:54:0A:E3:26:10:40:68:1C:15:E1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DFBD61A237CC27E5FB60DBD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     20648
IP address blocks:        2001:470:390::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d6:1a:23:7c:c2:7e:5f:b6:0d:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=4f758f13-8ff2-4165-a319-bf864bf0c07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:91:f2:ea:ab:d4:4c:eb:f1:66:94:8f:c0:
                    14:26:52:35:ce:de:f8:48:44:3f:61:06:90:22:3d:
                    82:fc:c3:a4:5d:9f:a4:0c:3b:bb:ea:ea:ba:20:9a:
                    e4:e2:f5:c3:0d:31:5a:60:fa:b3:46:ad:8f:ab:1d:
                    ea:c3:7e:5d:2e:30:87:77:22:8e:5c:ce:ff:e0:e7:
                    bf:e5:d1:41:ba:2e:69:26:8b:ca:3a:84:da:4a:92:
                    7e:7d:96:b8:af:d6:11:f5:f4:c2:a3:c0:40:00:a6:
                    eb:b9:0c:2d:9b:64:41:95:9b:c5:2d:b1:48:e1:c0:
                    99:42:54:41:bb:dc:52:93:2c:9a:62:b2:61:64:91:
                    45:bf:44:ac:d1:72:c1:60:07:3e:2a:c1:26:a0:d1:
                    88:4c:d3:fd:42:84:25:29:c6:37:b3:86:29:65:a3:
                    c1:0c:ca:5e:e3:bb:57:cf:83:c7:60:f5:9b:e5:0a:
                    03:9e:36:c7:3b:16:00:c3:4f:6c:ef:1c:ab:72:b7:
                    bd:d8:09:4d:8f:7c:bf:dc:1c:2b:36:81:bd:45:05:
                    0e:1c:2b:24:45:20:47:fa:65:96:ac:69:e2:0c:ab:
                    0a:41:64:84:18:99:b0:c1:d0:e9:b5:97:60:0d:c0:
                    4e:b1:67:03:3a:95:f0:73:b0:e9:22:20:a0:2e:0a:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C2:C7:00:2C:56:F9:EA:90:C5:54:0A:E3:26:10:40:68:1C:15:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:390::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5b:9c:53:56:83:5f:d5:5a:c5:be:7f:c6:11:56:cb:e0:f8:
         b2:9a:8b:9a:37:1d:38:29:e8:a6:80:81:3e:3b:bc:31:8a:2f:
         83:c4:e4:13:79:f7:5e:4b:97:f0:2a:23:c3:63:23:55:0c:74:
         08:60:fa:58:99:e7:17:9a:15:28:ef:8d:ca:e9:48:b1:1c:de:
         b0:b8:5a:a8:b5:85:d1:e4:76:9c:02:73:65:c2:0d:67:5c:0f:
         67:06:41:ca:40:db:d7:24:46:c1:91:42:5c:1e:56:09:14:b4:
         da:0c:5b:cf:f3:99:37:2b:fd:12:a2:e5:f3:4e:28:94:a6:b4:
         8a:a8:f3:b5:4c:73:d4:ea:ef:8a:e1:50:1d:02:ab:07:82:3d:
         b3:8e:70:a9:a6:03:6e:7e:8a:c5:9e:42:c4:73:46:25:85:41:
         5b:b4:62:9a:85:5a:a8:5d:92:50:44:38:4a:f9:f1:4d:7e:da:
         93:ab:71:ab:7c:63:ff:67:04:bd:cc:6e:22:6c:a0:c8:81:c4:
         dc:d8:c4:79:83:ad:ab:da:4f:b8:ba:2e:9a:38:b4:53:d8:f6:
         8f:e2:0c:9b:6e:78:2f:9c:3f:6f:73:57:bf:b4:24:1b:eb:a7:
         5d:37:04:e4:bc:a8:14:74:05:bf:72:a6:17:f9:7b:06:4c:3e:
         c0:e2:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:10 2026 by rpki-client