Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
File:                     82945325-27be-3940-b66b-e46080d0a632.roa (raw, json)
Hash identifier:          xAdT/KQQyh8K1ESzqIO9ebkc5Pz6AJmcc9kOFgE+zvA=
Subject key identifier:   CD:7C:BC:84:48:16:33:9C:F7:A1:41:47:B3:0F:8D:AD:7E:D0:B5:7B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B92DD3DA4D46026F82B6A2200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22612
IP address blocks:        2001:470:c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:3d:a4:d4:60:26:f8:2b:6a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0b1f3d5b-1efd-4d5c-b275-31997e46ecc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:d1:2c:08:da:9a:54:8f:6d:fc:34:90:8e:
                    c7:2a:70:22:ad:52:72:d9:17:99:0f:65:c0:17:76:
                    ca:8f:49:42:38:37:7e:f9:ea:86:89:c4:bd:2a:43:
                    67:d6:3d:44:2f:4e:d1:88:43:68:43:07:23:ec:1d:
                    39:48:89:4b:88:fd:82:1a:03:3f:3c:31:86:1e:26:
                    bb:b4:9c:7a:b5:71:b6:74:27:43:61:66:0d:c1:c7:
                    ac:9d:3d:9b:64:7e:d1:9d:35:f6:c5:df:8e:c7:0a:
                    6b:c1:fe:4f:40:32:10:db:4d:ef:f1:eb:2d:ff:a2:
                    6f:c2:7a:1f:19:aa:f2:b9:ea:16:af:32:d3:ab:71:
                    80:44:e3:c3:ba:39:ab:a4:91:5d:29:17:d3:21:2f:
                    7d:d9:76:46:6d:c4:d9:b2:28:97:e2:29:0e:87:48:
                    da:2e:15:dc:47:c8:67:99:a8:0b:31:2c:7f:09:01:
                    77:24:d2:10:69:b1:b4:9c:24:78:d7:31:59:53:29:
                    24:fe:fc:66:2f:63:01:e9:f2:f9:10:b5:bd:be:f9:
                    bc:2d:95:fd:5e:f6:cc:f6:24:57:a9:94:6a:4a:f1:
                    73:de:e1:f7:05:a4:09:dc:2b:8a:dd:89:dc:13:35:
                    db:14:3b:27:34:14:19:e1:cb:0b:24:a6:b7:8f:7c:
                    f9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:BC:84:48:16:33:9C:F7:A1:41:47:B3:0F:8D:AD:7E:D0:B5:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:09:7f:e5:29:3a:8b:58:cc:a0:0a:88:e8:4b:f6:a0:f6:
         af:c9:a6:b3:a9:a2:94:6c:ad:8e:fc:2e:f4:c8:02:93:47:07:
         9b:e5:24:60:46:b3:1f:cc:e7:9b:6b:d4:ac:15:45:05:77:bf:
         0a:43:05:ae:61:fb:96:1a:34:5e:9a:f7:8a:87:4d:7b:ff:86:
         b9:d1:24:9c:3f:83:82:0e:3f:f0:fd:5a:f5:c8:3e:cc:ae:ce:
         9f:bc:0a:18:84:a5:f6:03:52:db:ce:78:57:aa:45:82:2d:16:
         3f:72:a9:88:68:16:69:bc:f0:43:ae:ca:cf:a9:71:84:7c:36:
         18:44:5d:7e:cf:c6:11:7a:4e:d9:72:0b:67:00:20:2f:35:1b:
         96:cd:2e:1c:4e:6b:42:24:7d:62:3a:6c:3a:1d:da:f9:88:0c:
         f2:b5:cc:04:f5:72:23:5e:5f:ba:5a:d8:43:f6:ff:06:e0:06:
         e1:8d:93:de:43:c2:e9:f1:cf:37:10:58:32:d4:3c:1f:8a:f0:
         9b:a5:15:7b:45:78:06:87:ba:4a:ad:9e:57:d3:ee:4b:1f:a7:
         8f:2e:9b:f2:ef:99:42:64:0d:19:9b:97:48:76:82:3b:3f:3a:
         f9:5c:24:91:4a:00:fb:e0:e0:d6:de:81:b0:60:9c:52:36:fe:
         31:b7:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:34 2025 by rpki-client