Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa
File:                     814315cb-21d5-3186-af0c-7aed6d449a67.roa (raw, json)
Hash identifier:          BtCMYVdSyBkbmV38zhcF7XVC/7x7k3lVtUNQOK8Zy2w=
Subject key identifier:   48:70:1B:0A:F6:A3:8D:DF:46:81:23:27:99:3B:7E:A6:DD:A5:9F:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B5C6CB034F312BDFE6EB46F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     13943
IP address blocks:        2001:470:89::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b0:34:f3:12:bd:fe:6e:b4:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=9f3ce5ad-288e-4078-8b08-eb8044ec5421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:a6:0e:a7:d8:3b:3f:14:84:a3:ab:2f:e6:
                    ee:fd:d6:77:cb:f5:9f:1f:ad:ac:b1:1d:b9:1e:3d:
                    de:ea:fe:07:e0:34:e6:62:52:9e:e9:a1:1e:ed:c4:
                    c6:bc:ae:69:c8:55:11:49:48:6c:e0:cd:05:68:e6:
                    43:c6:c3:ab:b4:34:c4:dd:63:eb:aa:d9:88:0e:41:
                    ac:b2:d2:0d:52:e2:49:29:e6:bf:0c:f8:d8:ac:58:
                    97:5d:f6:d1:f5:6f:26:91:6b:6d:4f:ba:23:93:58:
                    bc:7c:45:64:c8:6b:88:f2:64:d1:cc:d2:5e:a5:22:
                    7a:18:01:09:b9:5a:3c:0b:84:62:b8:b1:6e:40:29:
                    c5:42:60:9b:be:eb:8c:3b:20:9d:91:4a:e3:e5:fa:
                    2f:aa:25:30:4e:ac:33:72:8a:b5:52:3d:a7:0b:61:
                    94:cc:ff:d8:8d:4a:73:22:4e:c7:f9:ed:f8:e7:0c:
                    72:c6:c1:0c:97:c1:16:b8:45:79:b2:51:10:2a:e0:
                    eb:da:b9:8f:dc:3e:df:ee:85:44:59:2f:99:7e:a9:
                    84:e3:3b:34:df:41:76:0a:ba:eb:71:7e:47:bc:71:
                    c9:01:cc:54:4c:e4:9c:00:da:d8:23:03:b4:a5:48:
                    71:9a:af:62:0b:df:49:74:ee:c9:46:c8:95:c3:fd:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:70:1B:0A:F6:A3:8D:DF:46:81:23:27:99:3B:7E:A6:DD:A5:9F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/814315cb-21d5-3186-af0c-7aed6d449a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:89::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d7:19:77:d0:f6:77:09:88:a9:a3:fb:fc:dd:7f:aa:7a:44:
         48:b6:8c:b3:a7:90:ee:86:fb:59:80:3e:a5:88:20:bd:ef:e2:
         28:58:78:25:27:b7:58:b9:86:8a:77:2f:74:a6:88:94:21:85:
         5a:af:ca:c3:dc:e3:d7:c8:20:70:5b:a7:10:b5:76:4f:ea:f5:
         d3:08:95:59:e8:5a:6e:27:b5:28:ac:cf:19:df:1d:75:13:61:
         2d:4e:f5:01:1f:fc:e4:78:15:4e:f4:8f:56:1b:cc:7f:f2:ad:
         12:a1:00:95:64:78:88:42:d1:f5:71:f9:c6:09:60:11:f2:a8:
         7b:d2:4b:1d:39:5d:9e:65:b0:ab:4d:78:d5:63:dd:0e:7a:50:
         70:b7:68:88:32:0d:87:6b:0b:c9:32:1e:74:e8:28:00:3c:9b:
         0c:ab:68:43:6c:b2:9a:85:ba:8b:2f:3a:47:e4:86:e4:90:10:
         f4:de:4c:66:d4:9d:9a:0c:78:e6:d6:b5:df:c9:4b:1f:82:52:
         db:ae:a9:71:fe:9e:2e:86:e6:8d:9b:f2:14:7b:0c:68:72:b9:
         e2:7b:cb:4d:5b:78:98:33:36:41:b2:72:f7:37:34:f8:14:e2:
         09:17:77:10:90:7c:98:7f:db:ef:20:0a:31:b0:57:a8:36:9b:
         25:5b:3b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:35:16 2025 by rpki-client