Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa
File:                     4b517c43-ea97-343a-99fc-280d4c978941.roa (raw, json)
Hash identifier:          EVF/e2+0yUaqzPONP3IbKhapDbEs4VlZ7MBH7kVdOx8=
Subject key identifier:   A3:63:44:31:07:94:54:26:07:1D:0A:39:FF:9C:8B:A2:38:22:CA:BE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B1F0180F15CE9B6D425DB0000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     400535
IP address blocks:        2001:470:3ee::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:80:f1:5c:e9:b6:d4:25:db:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=b4c25d15-fbb1-4d6a-9eb8-e9a48eef66c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:74:72:10:6d:34:8e:25:53:bd:ad:f1:22:f2:
                    50:50:e5:33:aa:00:f2:46:f6:fc:15:e3:99:aa:d1:
                    12:0e:3a:2e:03:95:05:c7:b0:44:37:e5:80:14:cc:
                    9d:24:69:ac:39:80:66:9b:29:ae:f9:9d:26:6f:3c:
                    f8:50:e1:a9:1e:de:23:38:70:05:8d:48:f1:e4:70:
                    3f:d2:f6:40:ec:c6:66:17:1d:01:9f:4c:a4:78:62:
                    70:c5:34:24:90:88:ac:fc:6e:98:bc:51:42:12:ad:
                    c3:4d:f5:ce:c6:21:2b:2e:e0:88:0e:02:e9:8a:f3:
                    37:5a:83:cf:e2:93:24:fe:bc:41:ea:da:09:62:6c:
                    06:35:5c:50:93:6c:ce:8a:ce:eb:ae:1d:62:4c:22:
                    29:8f:e4:1e:dc:e7:3b:f0:bd:af:a6:72:4a:8b:49:
                    44:c6:d8:39:93:13:35:42:34:58:15:dc:a9:3d:ad:
                    15:17:8a:35:9a:71:bd:21:29:4e:90:f4:d0:f3:15:
                    51:f2:79:e1:3f:2a:60:7f:1e:fa:1a:37:f4:8b:fb:
                    d1:65:2d:e3:cb:8e:25:8e:ff:72:86:fa:6c:5c:4e:
                    d0:6b:ce:d1:22:43:bb:04:95:ff:5a:df:ae:31:cc:
                    06:e8:11:28:f7:92:cf:56:5c:5e:e3:ae:a0:d8:e6:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:44:31:07:94:54:26:07:1D:0A:39:FF:9C:8B:A2:38:22:CA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b517c43-ea97-343a-99fc-280d4c978941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:10:70:b9:46:90:36:40:96:21:24:5c:d5:07:b5:8c:63:
         82:2b:a1:95:05:35:4d:09:f2:52:4c:24:f4:83:53:15:8d:73:
         14:1e:ab:70:0a:6f:c4:1e:08:a7:67:6a:91:25:62:17:68:35:
         66:12:98:57:5b:26:55:bf:78:25:c9:64:27:6f:d1:f1:92:e5:
         96:28:8a:55:ec:87:e7:56:35:02:83:cb:48:06:9a:02:ab:40:
         2c:27:6a:6f:46:bb:50:5e:48:47:09:1f:c6:a4:a3:74:b0:13:
         f4:af:15:e4:e0:45:92:91:25:d0:d5:2f:da:79:a3:2c:8d:50:
         d7:14:9e:a1:c3:8d:42:00:01:f1:fc:ee:4a:1d:2c:c5:a8:27:
         9f:86:91:fc:ed:cb:51:e8:be:ed:13:14:a7:a9:06:16:67:f5:
         32:76:0b:d8:45:cf:ce:0a:b9:a2:d5:02:4c:d4:10:39:14:5a:
         65:46:a0:b8:cc:96:38:9f:b2:f0:48:39:cc:d0:24:34:e6:e1:
         13:9b:fb:1d:3b:35:f4:f1:4e:d6:a5:b7:55:4f:35:df:26:dd:
         e0:31:78:d6:90:48:3b:93:e6:62:b4:b7:cf:45:8d:c0:e8:2a:
         4c:1a:05:15:59:08:0d:6b:9c:eb:d4:09:3a:6d:06:88:0e:3c:
         3a:76:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:39:22 2025 by rpki-client