Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f21239d-864f-348d-a1c5-49c7149dc73b.roa
File:                     5f21239d-864f-348d-a1c5-49c7149dc73b.roa (raw, json)
Hash identifier:          cMD3ddbjNy1DOTU10ExtIwuA4O4zrIQrNcFt9cgTLhs=
Subject key identifier:   2C:8E:C6:BC:E2:E6:88:83:3C:AA:61:CB:3A:9D:A0:48:E7:80:0E:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AEF9A759E3E5DA2E07D022940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f21239d-864f-348d-a1c5-49c7149dc73b.roa
Signing time:             Fri 22 Aug 2025 01:30:10 +0000
ROA not before:           Fri 22 Aug 2025 01:30:10 +0000
ROA not after:            Thu 20 Nov 2025 02:30:10 +0000
asID:                     204875
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:9a:75:9e:3e:5d:a2:e0:7d:02:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 01:30:10 2025 GMT
            Not After : Nov 20 02:30:10 2025 GMT
        Subject: CN=8b801085-3317-482d-816f-c072624ee2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:a7:83:2d:a4:bc:d7:72:0e:e3:7c:c5:82:
                    2e:13:fb:e1:76:48:96:61:89:47:60:44:73:b4:cc:
                    e1:dc:0c:70:aa:4a:ae:60:3a:91:f1:1a:13:cf:e6:
                    93:e9:6d:c5:ba:60:28:17:8c:b5:5f:d7:b0:f2:6e:
                    8f:89:9c:fa:9e:45:eb:a4:e2:1e:0b:e8:c0:82:66:
                    f4:11:a3:9b:c6:04:bf:0c:4f:83:4b:0f:ab:8d:3e:
                    f2:d2:fb:b1:1f:04:6b:f2:6f:8e:ca:03:e0:49:a3:
                    41:94:1f:a4:c2:61:5d:a4:f2:9f:1b:bc:f1:a2:6d:
                    c4:20:a6:5a:3d:d2:99:ee:0f:b7:56:e7:cc:24:ae:
                    bf:57:48:1a:da:1c:97:fb:45:21:80:74:36:e7:f7:
                    05:45:8e:67:47:92:64:ec:f0:07:de:79:a1:1f:72:
                    dd:91:40:d0:d5:cf:fa:e7:59:ec:d0:a5:af:fd:4b:
                    78:50:0e:e4:99:4a:22:95:93:a0:97:16:b0:98:1c:
                    2e:08:6f:db:a1:3b:b2:53:a5:05:9b:71:d0:6a:22:
                    b2:85:98:12:36:18:10:99:4d:ea:3c:f8:8e:82:e6:
                    6f:6d:c9:73:e7:77:00:4a:04:40:58:21:a8:2a:3b:
                    f6:dc:c7:fd:7f:0f:35:a9:55:37:50:f5:7d:4d:16:
                    2f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8E:C6:BC:E2:E6:88:83:3C:AA:61:CB:3A:9D:A0:48:E7:80:0E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f21239d-864f-348d-a1c5-49c7149dc73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:dd:40:1a:fa:5f:0f:5e:91:f0:9f:69:d2:c2:57:5b:78:
         23:3e:52:a4:0b:73:e3:b8:04:8a:50:b2:f0:bc:1f:6d:23:ad:
         83:9a:90:09:76:c9:39:cc:cc:90:c2:ff:fb:6e:32:a7:76:74:
         22:fa:f8:09:dc:46:10:a4:07:97:45:ee:22:c6:18:08:34:e0:
         34:3e:58:4a:b6:b9:b9:f9:68:1b:be:46:b9:05:34:af:ed:ab:
         e6:16:f6:f9:22:3f:b7:8a:0d:bd:3d:4e:0b:51:12:6b:0e:5c:
         09:d8:05:76:2e:f2:2b:8e:58:8d:f6:9e:0c:a5:03:aa:81:3a:
         86:db:03:0b:a8:aa:2a:e6:b2:44:cc:cb:c4:f5:ae:3f:f5:65:
         db:25:6a:20:63:bf:3d:e8:11:e1:d6:d2:bf:94:3e:84:2a:0f:
         50:e1:b3:8a:8a:5d:59:8e:2e:46:0e:d9:0a:f9:75:b7:4a:50:
         da:d3:2a:07:88:ef:22:0b:93:0c:24:66:0f:1d:5e:96:60:1e:
         07:79:5b:2f:3d:ea:9e:c1:d6:73:81:30:f8:28:a3:14:4a:dc:
         ba:c1:e6:85:48:e9:12:a7:e5:9e:1a:79:20:11:70:79:a8:ff:
         04:83:80:7f:84:95:f1:18:97:2b:b4:d3:97:5b:15:9c:5e:0f:
         ba:c8:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:29 2025 by rpki-client