Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/503fff4d-b29e-3fc7-9f20-f50b2823defa.roa
File:                     503fff4d-b29e-3fc7-9f20-f50b2823defa.roa (raw, json)
Hash identifier:          cMRmLd1N1Tl5UCu9iVpUPVaCYgLDMtHdWEz7Ah63Z+s=
Subject key identifier:   02:06:13:D3:B6:48:7A:FE:F3:CF:DF:66:80:EC:97:6F:7A:FA:FB:D3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B5DD20D1E532A45D2B2EE4280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/503fff4d-b29e-3fc7-9f20-f50b2823defa.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     151872
IP address blocks:        2001:470:48c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0d:1e:53:2a:45:d2:b2:ee:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d4081cce-3fc6-4f3b-8851-d7f1eb3b7fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:41:16:ab:6a:b4:96:ba:5f:6e:23:61:ac:
                    33:bd:f6:36:26:3e:e4:9d:a9:46:31:dc:51:90:ed:
                    d9:e7:c0:8d:d8:92:27:05:76:2a:dd:49:ee:45:02:
                    d4:96:69:ea:a0:d6:71:8d:ce:51:b7:a8:93:ad:7f:
                    8c:9d:bd:2f:5f:e0:d4:a4:30:cd:18:6b:a8:7f:72:
                    52:f3:4d:36:e5:f3:03:b3:f4:91:e6:b4:8d:45:03:
                    a8:99:73:a6:86:f2:9c:1e:6c:3a:56:91:19:e5:c2:
                    9b:c9:2f:ac:3b:02:94:8c:d7:52:0e:ba:18:e6:95:
                    c9:5d:8c:c8:16:18:7b:a0:8e:25:11:95:d8:43:09:
                    18:0e:f6:15:23:d1:d8:44:8a:03:38:4b:ac:41:19:
                    18:27:e6:b2:a2:fc:0f:ee:1e:87:a5:16:8d:f3:a1:
                    55:f4:c8:57:02:0a:67:37:28:8f:5f:ca:b8:43:e0:
                    c6:bf:b6:8b:7d:6b:37:c8:36:91:87:be:fc:e3:be:
                    9b:18:f0:a9:fd:10:54:24:85:73:f8:08:21:a5:2e:
                    53:13:3c:86:54:90:3e:89:30:e9:de:15:06:00:18:
                    60:39:5b:eb:24:4a:f9:1b:dd:cf:3b:45:86:69:f6:
                    ba:b9:17:fe:ea:24:84:f5:2c:a0:a0:73:4b:6f:7a:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:06:13:D3:B6:48:7A:FE:F3:CF:DF:66:80:EC:97:6F:7A:FA:FB:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/503fff4d-b29e-3fc7-9f20-f50b2823defa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:e9:56:fd:93:96:5e:d0:90:5e:bd:2c:70:d1:1b:12:50:
         87:7d:5b:1b:e8:91:50:f7:ab:32:07:96:b9:01:16:17:f0:cc:
         fc:3a:38:9f:2a:36:cc:f0:e5:54:cb:64:1d:ad:ce:23:53:f5:
         c7:a0:a7:0a:2c:2f:f0:84:d2:d1:83:33:2e:c4:2d:d1:4f:93:
         54:b9:0a:60:9c:42:a8:61:06:61:87:46:e9:c1:b0:b1:14:d7:
         9b:9b:78:61:7a:36:f5:b2:1b:38:d5:b7:8c:de:99:34:1c:2d:
         e2:71:3e:4b:39:c7:f8:0b:43:af:c5:a6:72:0f:dc:1e:d0:da:
         2b:8d:c2:f4:c7:e0:3d:8a:7b:f8:c8:30:60:e3:6c:c5:2c:ae:
         32:eb:7f:a7:52:89:ee:e4:a8:11:d6:75:9d:54:4d:87:69:1e:
         1c:70:67:d7:42:24:21:98:85:28:82:09:b7:a9:34:d9:ed:73:
         0b:0e:06:85:8a:c9:eb:36:3e:bc:4f:72:de:d1:41:d0:1b:57:
         fe:e8:b0:3a:b4:c9:15:9d:0f:f9:27:5b:e8:6a:51:98:c6:42:
         38:29:f3:a4:f6:79:6e:f8:3f:12:ce:b1:fd:c0:5c:36:6c:e5:
         49:f8:b2:b1:8f:30:fd:d2:54:b6:91:24:30:fc:1c:b2:7d:51:
         09:b3:b0:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtd0g0eUypF0rLuQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZDQwODFjY2UtM2ZjNi00ZjNiLTg4NTEtZDdmMWViM2I3ZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+NBFqtqtJa6X24jYawzvfY2Jj7knalGMdxR
kO3Z58CN2JInBXYq3UnuRQLUlmnqoNZxjc5Rt6iTrX+Mnb0vX+DUpDDNGGuof3JS
80025fMDs/SR5rSNRQOomXOmhvKcHmw6VpEZ5cKbyS+sOwKUjNdSDroY5pXJXYzI
Fhh7oI4lEZXYQwkYDvYVI9HYRIoDOEusQRkYJ+ayovwP7h6HpRaN86FV9MhXAgpn
NyiPX8q4Q+DGv7aLfWs3yDaRh778476bGPCp/RBUJIVz+AghpS5TEzyGVJA+iTDp
3hUGABhgOVvrJEr5G93PO0WGafa6uRf+6iSE9SygoHNLb3pbOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAIGE9O2SHr+88/fZoDsl296+vvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTAzZmZmNGQtYjI5ZS0z
ZmM3LTlmMjAtZjUwYjI4MjNkZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAie6Vb9k5Ze0JBevSxw0RsSUId9WxvokVD3qzIHlrkBFhfwzPw6
OJ8qNszw5VTLZB2tziNT9cegpwosL/CE0tGDMy7ELdFPk1S5CmCcQqhhBmGHRunB
sLEU15ubeGF6NvWyGzjVt4zemTQcLeJxPks5x/gLQ6/FpnIP3B7Q2iuNwvTH4D2K
e/jIMGDjbMUsrjLrf6dSie7kqBHWdZ1UTYdpHhxwZ9dCJCGYhSiCCbepNNntcwsO
BoWKyes2PrxPct7RQdAbV/7osDq0yRWdD/knW+hqUZjGQjgp86T2eW74PxLOsf3A
XDZs5Un4srGPMP3SVLaRJDD8HLJ9UQmzsMc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:58 2025 by rpki-client