Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa
File:                     4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa (raw, json)
Hash identifier:          I4Pmrr45zvEvYuQQEgTUftM3LuOWVwkG4cdg6ebj6Fk=
Subject key identifier:   EB:81:7F:4E:DF:0E:B9:D4:64:88:F0:96:16:32:55:85:81:BA:3A:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D91C00B3C1C5F5DC974EB3260
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     41435
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0b:3c:1c:5f:5d:c9:74:eb:32:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=5ba65b1b-d1de-4ba4-b5ec-c1eb503247f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:18:0a:c5:93:4f:1c:03:18:9a:d3:45:e5:
                    16:1d:97:a3:df:e7:81:2e:e5:4b:e2:38:02:4a:07:
                    cd:85:f2:5e:96:9a:5a:a2:c2:e5:01:12:cf:73:58:
                    a5:95:b3:4f:99:b8:5c:7a:7e:c5:01:c2:c8:a5:96:
                    53:ec:08:62:21:ae:55:97:8f:fe:fb:36:4e:1e:8b:
                    af:a8:23:90:ab:18:3d:0c:b2:15:12:6d:c5:e4:37:
                    79:22:b4:e8:bf:84:db:66:65:76:27:bc:15:8a:33:
                    be:53:c0:ec:b5:cc:27:8a:cd:3c:94:f2:cb:e0:de:
                    1d:8a:ea:43:3d:83:d9:db:b0:df:f6:a4:73:bb:be:
                    af:1e:9a:11:35:2f:c1:24:5e:be:46:4e:fb:e0:ce:
                    b0:bc:9b:13:ef:05:41:e1:a1:79:6d:4e:5f:82:e0:
                    47:53:6a:d2:cb:ee:ad:c7:c7:72:5e:c8:ea:68:87:
                    b7:b7:de:00:1b:6c:74:13:28:ce:ec:4f:b0:3f:c8:
                    c4:51:a6:57:c2:d0:1c:88:92:0f:4f:63:e0:a2:0c:
                    bc:d3:5f:55:6e:6d:47:d1:85:20:15:3d:b0:9b:ac:
                    b5:a7:c6:90:ee:5e:00:87:6b:7f:86:04:02:d3:eb:
                    27:5b:a1:d9:28:ee:45:ff:24:90:19:82:2b:f6:ea:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:7F:4E:DF:0E:B9:D4:64:88:F0:96:16:32:55:85:81:BA:3A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4aeccb8c-8405-396e-a62f-9cc8bea913e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:61:36:4b:e7:54:2c:31:33:e6:1e:b2:82:e9:b0:81:0c:85:
         2c:53:4b:cb:84:17:84:35:23:48:af:9f:1b:f9:c9:0a:51:86:
         ac:09:a1:f6:e8:32:48:f2:40:0a:4c:6f:fd:31:8c:e9:09:a0:
         71:b0:90:35:ef:62:84:1c:8d:7f:e5:2c:82:1c:e1:8e:84:d9:
         e6:9c:41:2e:1a:4c:76:1a:08:0a:21:b4:cf:ac:1f:2d:fb:6c:
         e9:a9:d2:17:c3:fb:89:16:90:e6:52:eb:d7:fe:06:2a:a3:d6:
         9a:2c:b6:1e:0b:48:f2:c4:cf:d0:bf:00:ad:2c:84:4b:e7:e7:
         30:82:de:eb:ad:2d:5a:bc:bb:49:3c:20:a3:81:b9:e6:fc:f2:
         ad:eb:e4:5a:d2:12:cc:d9:5a:d7:96:f2:5f:17:f9:08:1e:52:
         17:eb:aa:9a:ef:f5:f2:a7:1d:84:af:6a:75:ec:9c:2a:74:e4:
         3c:20:ca:0a:15:79:00:26:75:2a:bc:11:11:c3:74:19:40:6c:
         8f:76:ff:39:00:2b:5a:38:83:8e:09:84:5d:f3:ef:ea:63:49:
         0f:8d:cf:60:51:d5:4f:35:87:28:16:3f:3a:47:c3:cc:8b:ea:
         12:ed:21:fb:da:e2:01:1f:c6:b5:b1:8f:35:0e:6a:9f:d3:a6:
         96:f0:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:12:15 2026 by rpki-client