Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce3e0afe-dabf-3539-b2a9-f738c5c44ff5.roa
File:                     ce3e0afe-dabf-3539-b2a9-f738c5c44ff5.roa (raw, json)
Hash identifier:          VtmmfTLMN3r+Wk3TtAz6JH7YLN8ZD5dmzt4BWq3SvLQ=
Subject key identifier:   C4:CB:D4:78:7C:21:4B:A4:D5:E4:AE:53:E4:0C:BD:08:30:DA:E6:7F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D386A522DD7F30D72D54A0880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce3e0afe-dabf-3539-b2a9-f738c5c44ff5.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     46956
IP address blocks:        2001:470:37c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:52:2d:d7:f3:0d:72:d5:4a:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=d21c9e13-7c81-499b-8326-948001aa9b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:9c:01:43:eb:ad:fc:92:36:fd:04:7b:ec:
                    3d:ca:63:35:68:ce:e6:66:e7:4a:79:47:a6:d9:9d:
                    5c:6a:b4:ee:eb:52:4e:f0:56:51:b0:85:bc:9e:80:
                    b6:94:70:92:be:82:58:85:ed:e5:52:49:57:86:e3:
                    78:ae:a5:e7:ae:dd:af:83:40:24:b8:55:34:6a:e3:
                    4f:f5:2d:93:56:59:1a:47:18:2e:65:8b:0a:65:69:
                    e1:f2:ad:d3:f0:1a:eb:28:2c:02:b2:f6:44:9a:d8:
                    0d:68:5b:31:1a:59:ab:05:66:b3:89:a7:ac:8f:d3:
                    80:76:af:89:a3:f0:2f:b6:e6:9c:5c:87:bb:d0:07:
                    ea:ce:5c:7c:63:62:35:98:18:5f:bb:c5:69:0b:0f:
                    c2:31:86:e8:09:8d:ec:c4:be:1b:7d:ec:94:c3:88:
                    1b:16:a3:60:2a:f2:b9:22:32:cf:37:4d:30:a3:c2:
                    48:60:be:89:7a:3b:f2:43:a5:59:a8:f9:ca:62:69:
                    f8:0a:32:e8:13:bf:7b:70:20:98:c0:77:31:b6:89:
                    a2:28:e2:7c:ea:c3:c1:ea:51:8d:16:d9:26:42:dc:
                    55:f8:7e:db:37:68:a4:c4:be:74:b6:e1:5b:cc:71:
                    7e:67:b4:38:a2:05:b4:0f:8a:04:db:a4:27:6e:fc:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CB:D4:78:7C:21:4B:A4:D5:E4:AE:53:E4:0C:BD:08:30:DA:E6:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce3e0afe-dabf-3539-b2a9-f738c5c44ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:9f:fb:d2:11:dd:d8:39:3d:8c:7a:1b:f3:54:bc:4e:8d:
         b7:61:4d:a0:10:23:7e:df:1e:1f:d8:a6:70:bb:dd:82:93:1a:
         64:26:e9:92:2c:51:bb:81:af:d7:c0:07:30:3a:53:75:d9:e7:
         1d:76:19:7b:de:53:d8:7f:3f:e2:2e:1c:58:07:f2:3a:b1:94:
         31:3f:1c:21:77:53:dd:c8:af:3f:84:2d:99:80:d7:3a:82:a7:
         ab:bf:14:24:3a:f7:f2:17:cf:8b:9c:96:e1:7a:95:d3:db:a0:
         1e:04:a9:6f:7e:30:61:4f:c0:3a:7f:3a:01:e3:5a:25:41:27:
         b7:ce:f9:a1:80:d1:f9:dd:99:80:81:e4:77:80:d3:a5:8b:1e:
         54:34:42:e2:95:20:16:89:7f:00:43:94:30:f8:53:8e:18:0e:
         58:ea:05:46:63:c4:62:ce:31:f6:0d:1a:66:81:0c:91:d5:bd:
         8a:71:b5:a3:26:45:4a:85:ba:6a:1a:ab:62:4e:ed:59:a2:92:
         8b:69:08:b8:b8:da:b7:54:37:f9:b6:f7:68:1b:4c:70:06:ea:
         97:91:11:b5:38:a9:ad:ab:e5:17:35:78:bd:b5:b3:4d:3f:85:
         1f:ee:2a:fc:87:ec:3a:09:6e:57:11:10:4e:29:83:4a:00:ce:
         3d:c7:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:17:28 2026 by rpki-client