Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ed5164e-ada1-3369-bbca-8c004cc30c3d.roa
File:                     2ed5164e-ada1-3369-bbca-8c004cc30c3d.roa (raw, json)
Hash identifier:          sRukCFeG5PE615+mVQvgi0JZm0j+bpVtHUizTie3XHQ=
Subject key identifier:   F7:03:55:8A:CC:B8:0D:97:A9:27:96:C7:68:2A:A9:4D:FE:32:89:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B48F070D707705EE0FA4C7D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ed5164e-ada1-3369-bbca-8c004cc30c3d.roa
Signing time:             Tue 23 Sep 2025 01:30:22 +0000
ROA not before:           Tue 23 Sep 2025 01:30:22 +0000
ROA not after:            Mon 22 Dec 2025 02:30:22 +0000
asID:                     62161
IP address blocks:        2001:470:10e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:f0:70:d7:07:70:5e:e0:fa:4c:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 23 01:30:22 2025 GMT
            Not After : Dec 22 02:30:22 2025 GMT
        Subject: CN=c2217839-305c-4ec2-84a4-dbe664e45ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:d3:13:fa:35:2f:c7:39:7f:1b:54:91:b0:
                    d8:52:16:4a:02:35:a3:e3:f8:70:55:07:19:c5:16:
                    ac:db:00:e4:e8:61:20:e9:23:02:fd:8a:36:ea:11:
                    ba:57:c9:ef:e3:2d:26:60:be:16:c4:5a:84:88:b6:
                    43:3e:b5:7a:af:f3:e7:3c:e8:45:1b:37:47:eb:71:
                    94:9d:05:75:7e:0e:a6:ef:6e:99:6a:4d:c4:8d:a7:
                    16:d9:c5:37:16:f5:07:ea:3f:d6:6a:2d:ec:3d:1d:
                    22:70:32:c7:1d:19:58:1f:5d:f5:34:bb:b8:f5:6d:
                    6e:47:56:a4:34:ef:70:d3:88:03:d4:78:e1:30:8e:
                    dd:9f:24:26:d0:fa:df:a1:e2:3e:e3:3c:dd:57:2f:
                    6e:d0:45:09:e6:34:db:df:5f:0c:ab:7d:cc:16:a5:
                    a2:62:56:a5:e1:c9:02:8a:95:58:6b:56:6d:83:6b:
                    0e:5b:a4:c1:e8:5a:3b:32:c3:79:f3:d7:91:0a:41:
                    90:3a:b9:2c:20:ce:59:84:53:94:c4:6e:ae:cc:03:
                    b1:75:7f:f8:4e:bc:30:37:1f:fd:d2:bc:55:d2:d7:
                    b4:1d:f4:f7:a1:15:e0:c8:cd:6a:59:ee:98:d5:49:
                    42:15:7b:76:47:d0:2f:ab:00:89:aa:63:9d:7b:d4:
                    36:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:55:8A:CC:B8:0D:97:A9:27:96:C7:68:2A:A9:4D:FE:32:89:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ed5164e-ada1-3369-bbca-8c004cc30c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:2e:7b:cd:01:3f:9b:6e:8d:e9:12:5f:ce:24:8e:4e:12:
         cc:50:55:ab:27:30:27:d8:cf:6e:24:b7:ea:4c:c3:d7:c1:5f:
         61:3c:03:fb:1d:f8:7c:91:6c:d0:37:6b:c2:12:c9:e1:34:6f:
         da:9f:f6:e3:3f:66:9f:c7:49:74:ce:e7:70:56:c9:42:8c:5c:
         9a:49:de:a3:74:ad:01:84:b7:6a:fa:a5:d8:58:ae:f5:49:94:
         74:bf:d0:86:a7:96:0b:80:8d:b6:bb:d9:ba:ab:20:01:de:51:
         6f:de:19:f7:1f:46:87:e7:66:87:34:b3:8d:75:20:df:18:5a:
         e0:24:1e:c2:20:94:5b:44:88:6d:9c:35:2e:a5:92:6d:b5:ec:
         78:7f:17:73:44:f2:a4:63:7c:68:2f:5e:93:c8:94:6a:4e:f7:
         a3:9d:26:f7:08:ae:42:e9:eb:64:cc:e5:54:fd:a4:29:72:71:
         68:7a:a7:0b:db:7a:23:b1:96:70:cc:a0:bb:f5:42:30:8b:ca:
         87:99:fc:67:48:fe:08:0a:41:71:33:04:a2:be:90:c6:65:35:
         73:2d:b7:99:0c:87:31:dd:de:30:2e:19:e3:bb:6c:44:ed:99:
         17:31:d8:6a:8e:8b:b9:51:bd:67:eb:f2:76:11:f0:a8:4f:c8:
         0e:d5:1b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:56 2025 by rpki-client