Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30be54fd-9303-3efa-ba3e-bef6b3155bea.roa
File:                     30be54fd-9303-3efa-ba3e-bef6b3155bea.roa (raw, json)
Hash identifier:          ib0nIyRTtfk6fAN/xb9Z38G994R5tfxmvWDxZjxjix8=
Subject key identifier:   F9:AE:26:1B:1C:B5:22:CB:2A:F1:8D:BB:D5:95:2B:6E:1D:3A:2A:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7C96028BD84E2C7A9D89FC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30be54fd-9303-3efa-ba3e-bef6b3155bea.roa
Signing time:             Sat 11 Oct 2025 13:30:11 +0000
ROA not before:           Sat 11 Oct 2025 13:30:11 +0000
ROA not after:            Fri 09 Jan 2026 14:30:11 +0000
asID:                     135300
IP address blocks:        2001:470:4ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:96:02:8b:d8:4e:2c:7a:9d:89:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 11 13:30:11 2025 GMT
            Not After : Jan  9 14:30:11 2026 GMT
        Subject: CN=dc863bd7-dbf5-44db-be1c-52ee3ad80f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5b:c5:d5:f9:3a:cf:66:19:37:da:0d:d9:29:
                    91:8c:cc:94:cb:37:e1:32:29:00:6a:13:8f:54:78:
                    31:ac:7c:3a:ed:2b:50:dc:d4:f2:89:f7:59:91:df:
                    b5:bf:d6:e3:3e:bf:de:17:63:eb:ab:58:db:e1:ba:
                    69:7d:bf:da:a7:dd:0d:00:3d:9f:d4:5d:cf:f9:11:
                    1e:e2:70:ae:78:d1:d4:d7:94:db:6f:7c:95:14:9c:
                    b9:ba:9d:b6:5e:5f:8f:67:93:da:06:13:08:73:f1:
                    c7:35:46:97:01:ac:5a:bd:4f:14:1a:b1:89:a1:48:
                    e4:7b:4c:9c:97:7f:5d:f8:5e:9e:b2:a3:44:05:47:
                    92:69:68:83:54:1b:60:a0:5b:c8:13:37:8a:fb:a8:
                    77:6d:64:e4:ca:f9:52:19:cd:e6:2d:90:c3:25:73:
                    23:9b:94:b7:53:b2:bb:81:37:df:91:13:f3:55:ef:
                    27:c1:ba:75:9e:b9:83:73:b4:65:9a:67:c8:ea:c5:
                    1b:15:eb:77:7e:6c:e9:b4:f3:03:e0:2f:aa:65:ce:
                    98:cd:87:58:11:53:d5:6d:c7:de:77:14:d7:bd:b8:
                    31:23:ea:6b:fd:10:56:1f:c1:b6:30:ab:f1:40:50:
                    bd:45:94:96:ba:31:4f:0f:8e:35:3a:cd:38:d4:a1:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:26:1B:1C:B5:22:CB:2A:F1:8D:BB:D5:95:2B:6E:1D:3A:2A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30be54fd-9303-3efa-ba3e-bef6b3155bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:a0:e4:75:67:b7:75:c0:69:3d:ea:1b:d3:bd:d8:fd:32:
         f6:20:f5:6c:d0:66:1b:ae:ce:e4:93:3f:4d:60:2c:c0:7e:ca:
         65:4e:e7:a6:c2:42:5b:47:29:6e:a7:c4:aa:97:a3:c8:36:aa:
         c5:55:9c:73:8e:09:4c:1c:a3:d8:43:21:c5:f5:7e:7d:25:54:
         3c:e2:68:cb:9d:76:7e:5a:9b:7b:b2:d0:80:bb:fc:44:8f:87:
         3a:86:26:7b:ff:e3:01:5c:8b:08:9f:fd:6c:56:b1:00:eb:cc:
         69:e0:30:fb:06:3a:af:c0:e9:78:e1:62:1e:6a:09:cd:38:d3:
         7f:c2:bf:50:91:66:c5:1e:78:82:03:79:fc:a8:4f:d0:e4:47:
         93:04:16:84:2c:62:94:d4:9e:c6:c9:e6:32:86:34:0d:47:77:
         ab:2f:53:17:84:82:0a:88:39:08:10:31:ae:90:50:3e:92:01:
         3c:45:21:51:b3:2b:d4:b2:80:4c:00:70:13:a4:b1:45:6c:43:
         be:6a:d6:06:06:ae:a0:5f:81:15:db:e7:f4:a6:6a:fe:2b:b6:
         2d:b6:6e:d8:cb:9c:43:e2:e5:e5:9a:2a:79:31:32:97:6c:4a:
         c2:bd:4b:15:b8:c6:0f:61:d2:6f:36:aa:4e:e0:07:4f:b3:1a:
         69:16:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:59 2025 by rpki-client