Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa
File:                     6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa (raw, json)
Hash identifier:          Qco0mVty6ZUynMzucX3CUYOHE887cusIqgcdKhWtH98=
Subject key identifier:   BB:5D:56:AA:D7:0E:13:13:7B:50:FB:49:72:D9:9A:39:75:B5:2C:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B6D2C8E83E5D100631BF07380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     12097
IP address blocks:        2001:470:410::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8e:83:e5:d1:00:63:1b:f0:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=453bdb11-d698-4888-bc8c-dbc975c6316d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:08:e7:1f:08:d5:c7:f8:2e:17:dd:e4:a4:65:
                    2b:dd:37:fe:85:e3:da:4b:4d:f2:e0:da:bf:4d:59:
                    9c:a8:e7:99:a8:7b:7d:8e:4c:77:d0:d3:b4:ff:5e:
                    14:b6:73:86:d1:94:ca:66:8f:6c:db:a2:e0:44:93:
                    fe:ab:26:87:cc:83:ee:8d:07:50:02:ab:4a:51:04:
                    73:7e:c3:ad:8e:c4:63:df:06:f0:9a:80:3c:6d:92:
                    b8:58:6f:3b:06:62:65:a2:2e:88:93:c8:eb:ad:f0:
                    cf:f6:79:61:01:7a:f3:fa:78:82:6e:72:3f:2e:15:
                    a2:45:4c:d9:d5:c6:32:19:25:34:b2:7b:f3:64:b9:
                    85:d1:db:ca:04:6b:8d:b1:ba:28:bd:ad:c5:fe:5f:
                    ad:72:b5:fd:17:05:06:f0:c7:a8:dd:21:fc:30:6f:
                    26:39:03:d7:ed:49:f4:c0:95:9e:59:cc:d3:e9:6b:
                    3e:0c:9f:4f:56:7c:27:32:4c:f3:48:eb:46:4f:4a:
                    0a:75:f0:fc:24:1d:bc:36:51:22:79:a4:94:28:ed:
                    f8:82:f6:a5:b6:58:ff:53:6c:68:11:98:30:27:24:
                    c4:cb:c7:d3:56:39:97:ed:4d:e8:ca:b7:44:7e:02:
                    ef:68:fb:00:68:4d:71:7e:e2:8c:58:ce:fc:4c:37:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:56:AA:D7:0E:13:13:7B:50:FB:49:72:D9:9A:39:75:B5:2C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d8deb70-57fa-3c23-9119-0ae2f6c9c5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:410::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:6a:1a:2c:d7:5b:5c:c6:22:60:2f:51:a7:b2:7e:f3:50:
         bf:1f:76:b1:f8:a2:e4:1b:0a:5b:37:91:2e:e2:bd:a6:28:6d:
         3b:e9:60:47:d7:b3:79:7b:d3:8a:68:33:a3:08:36:72:a3:bf:
         54:99:15:04:26:a5:a3:d3:35:42:ae:27:9d:aa:23:c4:47:08:
         a3:cc:4c:d4:27:8a:6f:4c:34:49:f8:82:ac:01:5a:d6:ed:40:
         cf:68:aa:42:b0:7d:00:cd:92:1b:99:25:1b:f8:a6:56:b7:72:
         6e:5f:ee:7b:0a:f2:25:7a:a1:ea:9b:d3:cb:3b:d7:ca:d5:c8:
         7d:c2:cc:ed:79:d9:d6:34:3c:9e:05:39:e9:3b:79:33:25:1e:
         8f:36:8f:22:88:1f:a6:df:8a:0b:c3:90:03:ca:0e:5f:39:fc:
         f8:bb:64:1a:e7:ad:61:4d:e4:2f:20:36:7b:7e:31:83:42:c7:
         49:4c:9d:47:cc:57:ef:8a:ff:1e:23:27:93:b3:6a:7c:bc:94:
         32:d4:43:0f:81:c8:d1:71:62:99:90:ba:7a:bd:d1:ab:18:e2:
         ca:94:e1:6d:ba:11:84:de:a0:11:9c:55:bf:f8:10:96:d7:0d:
         70:27:93:ce:93:18:e1:aa:7c:f6:1f:a1:0a:17:99:c9:b7:75:
         36:c3:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:35 2025 by rpki-client