Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa
File:                     33dea899-220d-3218-b52e-74f14da3ffda.roa (raw, json)
Hash identifier:          k/p1sdNjeU2YGyLjICq2ULdksC5GMU+iLK5hsAWd0D4=
Subject key identifier:   D5:E8:B4:5F:58:E7:19:61:3D:70:37:F5:D3:84:2C:FF:6C:D2:A7:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B2A3AD33686333BE1B3176200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa
Signing time:             Fri 12 Sep 2025 01:30:11 +0000
ROA not before:           Fri 12 Sep 2025 01:30:11 +0000
ROA not after:            Thu 11 Dec 2025 02:30:11 +0000
asID:                     17290
IP address blocks:        2001:470:4d2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:3a:d3:36:86:33:3b:e1:b3:17:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 12 01:30:11 2025 GMT
            Not After : Dec 11 02:30:11 2025 GMT
        Subject: CN=e85a2479-8fc5-43ec-9c66-fa71581ffd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a9:0d:3c:70:2d:b8:01:46:06:a5:0e:65:70:
                    30:d7:f3:fd:20:f8:47:77:aa:c0:c3:9c:93:c1:7b:
                    8f:9e:72:ba:a3:aa:cc:28:60:ec:f7:22:3b:64:69:
                    24:2c:6e:7e:c8:3a:57:00:cf:1d:9f:84:21:d7:26:
                    42:01:58:53:84:e1:89:48:8c:33:86:44:d8:7e:eb:
                    d3:26:3b:54:ea:e6:80:6f:9a:ff:cf:bd:f5:bb:0c:
                    e7:10:4a:75:61:be:0a:f2:44:29:50:3e:e5:da:eb:
                    c4:bf:2a:c9:67:66:9f:06:8a:60:54:79:d3:80:cd:
                    0c:b0:08:b6:d8:ea:23:01:a9:a2:16:df:c8:6b:74:
                    32:d8:6c:d0:69:07:f0:d0:ca:35:6e:d5:42:4d:ba:
                    e7:9d:cb:1f:18:8a:af:fa:bd:e0:91:c8:4f:09:17:
                    99:7a:3f:cc:b7:f7:a8:9f:ff:e6:1d:e8:ec:5c:47:
                    5f:d2:ab:c6:be:f1:ce:c9:50:27:e4:4b:f2:20:8f:
                    2f:2a:fd:24:17:2a:10:ff:dc:0c:b0:46:ee:0c:c5:
                    24:4b:2f:04:0d:d7:bc:35:40:f6:fc:01:2f:05:fa:
                    0a:61:c3:09:40:07:39:c0:48:85:45:4d:74:7c:d3:
                    99:ab:35:9c:0c:5e:91:86:20:98:52:e4:05:41:24:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E8:B4:5F:58:E7:19:61:3D:70:37:F5:D3:84:2C:FF:6C:D2:A7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33dea899-220d-3218-b52e-74f14da3ffda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:09:6c:f0:89:a6:7c:f0:bd:49:2a:97:f8:4a:2b:fb:6b:
         33:ae:d1:ec:a3:8f:18:e4:42:04:4f:b1:47:4a:f2:53:c6:ac:
         57:8a:86:47:4c:4c:b4:d0:fd:2f:80:d3:dd:25:2c:2d:03:c8:
         80:8e:bd:9d:9d:b1:79:fb:cf:ad:ba:2f:69:8b:3b:59:97:15:
         e7:28:1d:37:85:20:23:15:6b:4a:97:dc:ab:01:57:36:07:4d:
         c5:16:39:12:41:29:58:38:5c:be:ed:89:f1:0c:1a:77:dd:e5:
         db:3e:a2:35:0b:a5:f7:9f:d0:b5:43:f1:70:4a:23:9f:0f:6f:
         d1:b3:e7:35:22:6a:89:99:16:5e:0e:ab:0c:fc:8f:5d:b3:60:
         44:7a:99:2e:ac:4f:b1:5f:cf:90:21:28:68:dc:73:54:26:48:
         a5:ba:51:c0:c5:ce:f7:d0:a4:54:b0:6d:1a:6d:30:e3:88:60:
         aa:b8:4c:88:32:1e:6f:04:52:8e:95:7c:15:15:f7:cc:f8:e2:
         5d:6c:01:eb:8c:a3:d6:54:8a:4d:08:a2:7c:31:f4:03:cc:a3:
         8e:4c:ee:89:b0:67:f3:d0:1b:6e:c8:28:70:ee:08:82:1d:f9:
         f8:1e:85:23:c8:6a:77:d1:13:d3:dc:d8:d0:c5:d8:6b:5b:4b:
         86:ab:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:41:07 2025 by rpki-client