Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa
File:                     0da4feca-118b-3171-aba5-b6769d45ee02.roa (raw, json)
Hash identifier:          pJcoinCL9kfLHT6zHzvnR8mR45Bxxx+7A+yfbXHNDqg=
Subject key identifier:   60:87:37:3A:46:1A:C0:93:BB:B8:9E:25:E2:2C:06:6C:76:3E:D1:FA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D905A96C35919EF7B6CC6A8C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     201754
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:96:c3:59:19:ef:7b:6c:c6:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=50513b30-e78a-4b8c-8930-99152da4c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a1:4c:fc:5c:05:0b:15:fc:12:89:40:68:16:
                    45:bb:17:b7:77:7f:fe:12:23:23:7d:e3:ac:e9:e7:
                    91:63:0e:64:c6:c9:37:95:12:4f:6a:41:23:e1:f2:
                    33:4e:60:ce:42:eb:87:76:6e:89:33:2f:b3:d1:6b:
                    19:25:e8:cc:8a:07:cb:61:fa:1b:71:4a:f5:44:e5:
                    f5:e9:56:71:ae:52:5b:e2:27:b9:40:a0:74:0c:4e:
                    3e:52:68:cd:e8:c5:fe:41:24:f1:27:7e:b1:7a:b9:
                    77:7d:1b:2e:26:7c:14:c5:06:86:72:a2:a5:d3:b2:
                    c0:28:bd:ee:ee:33:17:58:a5:e5:5d:eb:a5:ae:4c:
                    ce:cf:be:4a:40:de:e2:7a:1b:b9:de:ca:e1:d7:3a:
                    33:1e:9a:a5:d7:8e:56:a3:50:50:e0:1e:55:90:37:
                    5e:dc:6a:56:19:a1:25:bc:53:af:40:bf:4c:0a:20:
                    76:ba:7d:b7:72:4c:f2:1e:81:4d:f3:73:7b:84:7a:
                    ab:35:38:29:0a:a3:7a:65:cd:6a:f0:7d:13:c9:25:
                    6a:93:69:a3:89:b3:18:89:da:78:e0:d1:b9:d0:23:
                    41:82:3f:50:a6:cf:01:3f:4a:3c:b9:80:d5:0f:b6:
                    f1:3a:9e:ea:cd:23:eb:4e:d5:ab:4f:1b:64:c9:41:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:87:37:3A:46:1A:C0:93:BB:B8:9E:25:E2:2C:06:6C:76:3E:D1:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0da4feca-118b-3171-aba5-b6769d45ee02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cd:f1:43:87:5a:b7:3d:3e:40:33:16:8a:77:1d:c2:13:ca:
         87:ba:6e:6a:f3:da:84:06:8d:c4:72:38:30:11:db:bc:9d:eb:
         26:06:85:91:50:cf:d1:a2:95:be:85:cd:fa:9d:87:fc:93:72:
         b6:0c:1e:20:ea:1e:5a:a0:5f:70:b3:cf:84:8c:01:94:9b:f8:
         d7:ca:5c:c1:be:41:b9:93:39:0f:ae:ca:3f:0f:bc:70:93:05:
         5f:91:e7:9e:bf:94:a7:e4:60:36:bb:b1:05:c5:73:58:f4:33:
         54:74:eb:27:b9:59:37:3e:9d:c3:be:b0:d1:40:fa:48:51:8d:
         5b:8f:43:40:c7:30:ca:e4:52:08:00:a5:6f:48:f5:c1:e9:a8:
         bb:3d:64:c0:ba:6a:18:98:e9:7e:a4:1d:14:9b:ac:82:ae:25:
         09:1d:d7:8a:59:37:54:4d:a1:1f:8a:28:e7:27:05:e0:9e:f5:
         69:f0:8e:26:43:41:77:2a:7e:5f:ba:6f:d1:8d:ec:38:3d:c7:
         6d:1f:0e:90:b4:89:5b:35:90:01:ad:18:e9:85:a3:d6:9a:9e:
         8f:88:7c:7c:8a:fa:08:7c:24:d4:90:2f:1c:b3:d4:e0:14:d4:
         bd:92:2d:a7:6b:68:6f:db:37:85:d2:6d:03:49:03:fd:e9:69:
         4e:c5:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:58 2026 by rpki-client