Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9b2d2689-d72d-3af0-9e88-25cb6f02de3c.roa
File:                     9b2d2689-d72d-3af0-9e88-25cb6f02de3c.roa (raw, json)
Hash identifier:          tCAyNjGCFkb/Pk+liLSqTNoII9qUCPjY/6NsGY/JiuQ=
Subject key identifier:   AA:E5:30:8E:C4:4B:E8:A2:7D:93:9B:97:E1:5B:78:EF:EF:78:D2:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D905A9EC7BF8710B848884880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9b2d2689-d72d-3af0-9e88-25cb6f02de3c.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     47702
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9e:c7:bf:87:10:b8:48:88:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=e4303955-7303-4549-b107-e01407ae2aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:1d:da:52:e6:b2:65:36:53:08:49:ed:71:
                    83:1c:cd:36:87:1b:d6:60:c7:93:3b:04:3b:a3:32:
                    87:fc:18:71:c8:7b:23:0a:b1:59:92:3a:66:ab:64:
                    19:5c:9d:b4:84:ac:93:b6:a6:23:de:17:69:e9:6b:
                    19:4e:a7:dc:43:88:14:93:a1:7e:1f:3f:5e:11:c8:
                    20:46:df:90:44:65:72:d5:e3:c4:ba:95:6b:a3:4d:
                    f3:bd:77:b1:13:92:e7:08:82:b4:dc:25:97:e6:24:
                    d7:51:11:91:b5:84:7d:8c:97:dc:af:63:3a:40:0d:
                    8d:b5:5b:d0:98:3a:d1:5f:d4:6c:36:41:5f:4a:d1:
                    45:d8:8b:0a:3f:1a:18:30:0c:42:a7:64:59:43:3c:
                    61:3e:0f:b9:8a:b4:07:e0:2b:f5:83:5d:23:a8:78:
                    c4:e5:13:07:46:24:c8:85:ff:8e:96:cb:22:22:03:
                    ad:7f:bb:c5:ff:49:11:4a:73:df:0f:49:02:6d:4f:
                    d3:e4:3b:01:04:38:c5:62:74:bc:15:f1:c2:fe:bc:
                    bd:8d:07:08:83:8e:2a:92:24:a7:a1:89:2c:46:fd:
                    ac:dc:1d:60:61:1b:5c:84:ed:bd:29:18:81:47:6b:
                    d1:c2:ba:f5:dc:f4:57:31:22:38:4d:8d:06:9e:e4:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:30:8E:C4:4B:E8:A2:7D:93:9B:97:E1:5B:78:EF:EF:78:D2:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9b2d2689-d72d-3af0-9e88-25cb6f02de3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:2a:0d:bf:d9:9b:d7:66:2f:1a:cd:7b:86:2b:b4:0e:40:
         2d:9e:ce:a9:69:5d:6d:7a:dc:2b:6d:52:29:d7:bb:27:cc:14:
         11:aa:55:b5:63:e0:f8:a3:19:e6:e4:44:39:7e:15:b4:1a:82:
         08:f9:36:fa:95:be:b6:fa:6a:4e:ef:0b:9e:69:e5:ac:db:fd:
         a1:90:f8:73:ca:38:d8:4a:f3:e9:43:9b:1f:2e:df:4a:15:94:
         15:4b:c9:c0:3e:79:84:2d:af:4a:29:96:54:ff:3b:a3:2c:a4:
         b3:5b:6a:e4:b0:72:f2:47:1e:fe:b8:12:e0:ac:35:97:80:ef:
         00:12:36:71:b0:22:ec:5a:50:5a:8f:c4:9b:ca:b2:52:43:38:
         e6:a3:e7:14:a9:75:97:18:ca:b7:7d:a8:91:1d:ec:fd:d9:14:
         49:07:ce:64:9b:41:40:95:3a:32:75:bf:d0:aa:1e:2d:06:90:
         63:4f:07:d5:af:2c:61:27:8d:d2:34:ae:16:08:0e:26:e4:35:
         ec:79:ba:e6:21:0c:11:13:8b:51:71:e6:20:ab:01:a9:1c:4d:
         2f:8f:9b:a6:b5:bc:c9:ef:9d:a2:38:ec:09:c5:5f:4c:20:b9:
         5f:57:87:89:5b:65:41:0e:89:d5:2c:58:b7:c7:5f:1b:a4:1a:
         de:49:31:07
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWp7Hv4cQuEiISIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
ZTQzMDM5NTUtNzMwMy00NTQ5LWIxMDctZTAxNDA3YWUyYWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQwd2lLmsmU2UwhJ7XGDHM02hxvWYMeTOwQ7
ozKH/BhxyHsjCrFZkjpmq2QZXJ20hKyTtqYj3hdp6WsZTqfcQ4gUk6F+Hz9eEcgg
Rt+QRGVy1ePEupVro03zvXexE5LnCIK03CWX5iTXURGRtYR9jJfcr2M6QA2NtVvQ
mDrRX9RsNkFfStFF2IsKPxoYMAxCp2RZQzxhPg+5irQH4Cv1g10jqHjE5RMHRiTI
hf+OlssiIgOtf7vF/0kRSnPfD0kCbU/T5DsBBDjFYnS8FfHC/ry9jQcIg44qkiSn
oYksRv2s3B1gYRtchO29KRiBR2vRwrr13PRXMSI4TY0GnuSQ4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKrlMI7ES+iifZObl+FbeO/veNJtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWIyZDI2ODktZDcyZC0z
YWYwLTllODgtMjVjYjZmMDJkZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAItZKg2/2ZvXZi8azXuGK7QOQC2ezqlpXW163CttUinXuyfMFBGq
VbVj4PijGebkRDl+FbQaggj5NvqVvrb6ak7vC55p5azb/aGQ+HPKONhK8+lDmx8u
30oVlBVLycA+eYQtr0opllT/O6MspLNbauSwcvJHHv64EuCsNZeA7wASNnGwIuxa
UFqPxJvKslJDOOaj5xSpdZcYyrd9qJEd7P3ZFEkHzmSbQUCVOjJ1v9CqHi0GkGNP
B9WvLGEnjdI0rhYIDibkNex5uuYhDBETi1Fx5iCrAakcTS+Pm6a1vMnvnaI47AnF
X0wguV9Xh4lbZUEOidUsWLfHXxukGt5JMQc=
-----END CERTIFICATE-----
Generated at Wed May 13 07:54:29 2026 by rpki-client