Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e211c6c1-3b86-33dd-a693-2dc4a53c1886.roa
File:                     e211c6c1-3b86-33dd-a693-2dc4a53c1886.roa (raw, json)
Hash identifier:          /ba+a/bRAcSCwUKdR0MOF2jL2AFz0wwR0VLKnm1otDw=
Subject key identifier:   EC:C2:98:11:00:E9:80:C7:6E:2D:B3:3A:40:93:47:79:2E:2A:35:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D1F4A19834CF1E8D7E1781A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e211c6c1-3b86-33dd-a693-2dc4a53c1886.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     9927
IP address blocks:        2001:470:48d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:19:83:4c:f1:e8:d7:e1:78:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=1ca3ace2-38a8-4764-aba5-748566090d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:87:bb:8b:90:92:b2:48:0b:a0:d2:62:94:
                    58:9f:81:8a:c2:f0:ae:b1:dc:4a:ca:a2:1d:b1:d7:
                    f3:a9:ca:4b:95:de:83:2f:5a:d1:55:0e:28:6b:ce:
                    33:a2:f5:c6:e0:ba:0a:d0:03:4f:fe:9d:82:07:c1:
                    ca:4d:fc:a4:5a:10:9c:09:6c:83:8e:68:88:6e:23:
                    d3:d2:c3:61:2d:94:f6:82:f5:81:14:06:52:75:5a:
                    45:6c:6e:32:2a:e5:e3:47:27:2d:97:e3:46:6c:06:
                    ed:30:1c:49:af:c0:48:b1:52:97:83:7a:4d:14:b2:
                    13:84:e3:1f:4e:a8:56:5f:bb:40:05:92:2d:ea:78:
                    f6:c2:4c:49:47:cc:da:4c:62:7d:5a:96:8c:fb:7f:
                    9b:82:e7:88:e3:23:0b:9e:01:d6:88:f4:76:71:ff:
                    25:29:38:fa:a7:c1:3e:7d:6c:df:b8:6a:5d:a3:81:
                    c0:0d:70:3a:ed:4b:3c:ff:0a:b4:be:4d:06:a3:3d:
                    57:0e:61:81:34:64:04:27:9a:c3:f7:cb:64:cf:e1:
                    8a:57:88:c6:17:d1:bf:af:5f:97:44:ef:c7:1e:29:
                    f5:ce:b7:7b:cb:c4:be:50:3d:9e:05:8b:84:9a:78:
                    cc:19:ff:81:f8:33:cc:dd:34:86:70:8c:cc:d7:b8:
                    c5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C2:98:11:00:E9:80:C7:6E:2D:B3:3A:40:93:47:79:2E:2A:35:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e211c6c1-3b86-33dd-a693-2dc4a53c1886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:ca:99:02:60:4a:e8:71:4c:07:a2:58:e1:25:b8:c9:bd:
         e9:c1:81:0c:ab:d2:65:a2:79:f2:65:45:f5:e9:c2:2a:e8:21:
         ac:a6:8c:f8:69:f4:3e:e0:11:38:0a:2c:26:40:3e:b4:ee:8d:
         7e:d7:9a:2b:fd:d5:25:7c:49:ba:44:19:25:8f:c9:0e:45:da:
         a1:93:4d:7f:90:a5:14:59:64:77:e8:eb:b2:c9:dc:fe:ae:af:
         46:6c:6e:41:dd:3e:56:c2:20:55:28:81:c1:d9:25:14:23:38:
         fb:ca:4a:5e:52:03:60:fb:df:ee:1d:81:f0:c6:cd:84:85:72:
         a0:fe:d7:9e:29:5c:59:ff:c7:57:4b:7d:32:40:90:b6:e1:44:
         1a:18:e7:ea:44:f7:4a:aa:ce:65:46:eb:f9:4c:fc:f1:e2:95:
         43:e6:01:ce:28:6d:ac:5e:be:7d:ae:3f:f0:78:28:98:de:f7:
         e5:dc:84:c3:99:72:2e:3f:25:6b:c0:b0:ed:99:cb:78:8a:e7:
         8a:fc:5e:75:7f:1c:55:91:7f:b4:64:ec:53:1a:83:ca:71:18:
         78:e5:d1:ab:95:01:68:e9:02:c8:ca:0e:1e:c1:2e:02:04:c5:
         45:8d:d7:df:3e:b3:a8:67:1d:47:7b:98:c0:bf:93:06:ab:51:
         ed:3e:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:31:08 2026 by rpki-client