Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa
File:                     61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa (raw, json)
Hash identifier:          DdzMnv0ABsQQzXcaN85Ip/npozGFWXtu4RKsJDnvtaw=
Subject key identifier:   96:AD:2D:0D:4B:28:0D:63:87:CA:72:50:6F:AC:1C:52:8F:9F:AE:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B7DECC28B938BF92C7BC67A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     58061
IP address blocks:        2001:470:37e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c2:8b:93:8b:f9:2c:7b:c6:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=bd3cc1b0-12c1-4aa0-82b7-9fe792cdc8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:c0:41:81:6a:83:cd:9d:03:e8:70:9a:f3:
                    79:f2:96:ad:8e:d6:10:56:eb:84:25:10:67:01:52:
                    bd:81:90:7e:09:5b:53:87:55:53:62:44:18:ae:87:
                    bd:1d:89:d9:bb:55:f6:e9:67:99:61:30:2b:10:00:
                    2f:ea:80:c7:47:75:4b:0a:e6:55:79:f5:ba:ce:b5:
                    5b:86:de:96:da:5e:d3:59:d3:1c:c8:52:8b:0d:0d:
                    da:26:81:86:86:43:c2:3b:e5:37:63:d3:66:d5:d7:
                    31:ed:82:1f:e4:48:8e:3c:d0:0b:8c:17:e0:12:58:
                    6f:97:4f:37:c2:5d:23:3d:65:36:fb:60:07:4b:f0:
                    d8:e0:60:a7:cd:92:6d:1e:94:86:21:47:70:19:47:
                    a2:bf:5e:50:0f:7a:c4:29:b3:af:b5:8c:37:5e:54:
                    03:e3:75:6b:a6:d7:d0:15:04:35:f3:87:a3:3d:9b:
                    6c:f7:3a:f6:1f:3b:ac:49:80:70:78:34:70:81:43:
                    e5:dd:5c:90:cd:44:42:81:b8:1c:bc:65:99:9e:df:
                    db:44:68:fa:21:95:dd:f3:59:bb:97:3f:f2:af:7c:
                    c1:65:df:9f:bf:94:cf:72:9b:66:33:d4:fc:b3:71:
                    4f:6a:97:3e:24:84:57:a7:61:56:db:ae:a1:60:26:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AD:2D:0D:4B:28:0D:63:87:CA:72:50:6F:AC:1C:52:8F:9F:AE:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:2e:37:ba:dd:a8:6c:86:00:d9:1a:ff:ca:71:9e:59:8a:
         e8:9a:c1:d8:31:95:20:82:98:57:99:67:0d:84:09:ce:71:66:
         17:a4:04:8a:7c:c9:fc:0c:23:80:66:49:93:1a:fc:12:c8:86:
         23:78:27:9d:76:e1:fb:28:75:13:30:46:b3:2e:e3:d3:d5:2a:
         9d:91:42:ab:d3:b8:a7:01:de:3a:22:fb:82:da:b1:1c:29:b5:
         fc:65:41:de:e9:21:6d:42:7f:fc:09:8d:53:c2:f8:4d:c8:55:
         73:3d:9a:cf:72:11:3f:6f:d9:bb:c4:ce:77:e3:cd:23:cf:00:
         20:d6:23:27:4c:43:ed:cb:b3:13:dd:1d:29:a7:72:fa:ce:c8:
         f0:2e:59:f3:d9:8a:d8:5b:52:ab:4b:e8:88:9b:b4:4e:ef:2b:
         a8:8e:1a:d6:5b:6e:b1:4f:1e:3a:3c:56:f2:eb:e8:2e:84:04:
         9d:b1:ec:7c:71:7d:55:97:f5:0c:7b:20:e6:f4:d7:cb:04:c4:
         69:72:62:56:11:d1:ff:10:7a:96:07:c3:92:22:02:b1:ae:c9:
         de:39:82:fc:23:1f:19:0b:e0:36:e1:d3:c6:12:54:52:aa:8c:
         33:65:75:f1:e6:8e:c2:21:d7:a1:ce:5e:17:05:15:e9:32:f6:
         09:16:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:03:12 2025 by rpki-client