Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa
File:                     bf12730f-41eb-3d62-8d68-933218794fe7.roa (raw, json)
Hash identifier:          Sau7q1jY12H4E3YJzkpmTfMxfn+Lnl32Nka03rsqsIo=
Subject key identifier:   C1:D5:4C:EB:74:17:C0:C7:4F:C7:4A:65:99:43:91:14:C6:E4:C8:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AEF9A8A9254F0A78B293B2F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa
Signing time:             Fri 22 Aug 2025 01:30:20 +0000
ROA not before:           Fri 22 Aug 2025 01:30:20 +0000
ROA not after:            Thu 20 Nov 2025 02:30:20 +0000
asID:                     48422
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:9a:8a:92:54:f0:a7:8b:29:3b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 22 01:30:20 2025 GMT
            Not After : Nov 20 02:30:20 2025 GMT
        Subject: CN=23daa272-ad72-44fb-972b-9a9854dd015b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c4:da:94:a2:51:e1:e3:8d:0e:13:88:16:17:
                    cf:8a:80:7d:05:53:e3:ae:27:4d:71:82:ff:fd:a2:
                    70:46:73:7b:27:00:11:02:64:f6:ae:c1:25:62:f0:
                    0b:aa:07:9f:7e:36:6f:6c:4f:cc:dc:bf:ed:14:33:
                    88:32:64:26:16:18:f5:dd:22:e2:4b:8b:5c:f5:ac:
                    54:91:6f:74:6c:1b:e5:99:8f:38:1a:e6:e5:17:14:
                    e4:dc:e0:1a:7c:dc:a4:f3:a3:97:70:f6:d5:0f:4c:
                    53:04:20:be:f3:f9:db:79:77:e0:93:30:57:75:d8:
                    d7:41:26:10:26:d9:0e:0e:b5:92:d2:c9:16:2e:14:
                    9a:12:e3:48:5e:24:e7:e2:60:fb:14:93:17:e1:1d:
                    df:17:f9:93:4f:2b:5d:f2:d4:a5:82:db:cb:64:88:
                    55:51:e8:71:ab:f0:70:ae:ae:5c:79:27:ec:63:98:
                    f3:9e:2d:ec:2d:d8:cd:f9:68:3b:8d:ba:28:88:b6:
                    19:14:4f:0b:16:fc:47:4d:ea:56:32:b8:46:55:72:
                    f2:cd:ef:5e:0a:f2:93:ed:42:b2:16:c3:89:3d:50:
                    88:44:a1:d9:4f:8e:18:a0:1b:eb:4d:f2:e9:c8:7d:
                    89:1f:c6:0b:5b:bc:a2:89:88:08:98:42:90:88:5a:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:4C:EB:74:17:C0:C7:4F:C7:4A:65:99:43:91:14:C6:E4:C8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:75:34:94:a1:e3:a1:fa:11:84:88:f7:25:95:91:3b:e3:
         7c:60:77:e8:3b:ea:70:42:5c:47:28:49:b8:95:1c:54:65:bf:
         f3:b7:11:07:e0:a6:fb:ab:ca:4b:fe:f4:aa:a5:27:51:ea:b7:
         3a:40:18:70:3b:48:b8:67:0d:90:61:73:be:01:c1:26:94:39:
         98:8f:5a:35:78:20:c4:89:fe:73:4c:69:29:46:41:a4:29:81:
         27:a5:fb:49:8b:4a:5d:f6:98:fd:ac:fa:ce:2a:90:5d:ac:db:
         16:64:8b:5d:73:18:6d:c4:2c:ec:21:85:70:0d:62:3a:d1:e5:
         5f:ac:3f:51:f3:03:63:ea:cc:35:9f:9f:4c:73:4d:6b:3e:f1:
         7b:00:f9:cb:ac:c5:5c:06:17:e9:08:39:b6:19:40:01:f6:f2:
         23:80:df:29:b5:72:87:21:0c:aa:5d:6a:04:57:92:ea:55:33:
         0c:c0:01:f7:24:43:b0:97:48:75:a0:c7:ab:d1:bf:e2:45:f7:
         85:6f:a2:0b:a2:44:26:91:6f:91:27:1c:f0:ec:7f:ea:cf:e7:
         c1:39:59:b0:c8:a0:7d:ab:bf:d3:43:41:37:67:5e:7d:e8:64:
         f8:59:f5:a8:ee:be:d0:88:37:4d:2d:5b:e7:1e:01:bf:d2:df:
         38:47:6c:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErvmoqSVPCniyk7LwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgyMjAxMzAyMFoXDTI1MTEyMDAyMzAyMFowLzEtMCsGA1UEAxMk
MjNkYWEyNzItYWQ3Mi00NGZiLTk3MmItOWE5ODU0ZGQwMTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsTalKJR4eONDhOIFhfPioB9BVPjridNcYL/
/aJwRnN7JwARAmT2rsElYvALqgeffjZvbE/M3L/tFDOIMmQmFhj13SLiS4tc9axU
kW90bBvlmY84GublFxTk3OAafNyk86OXcPbVD0xTBCC+8/nbeXfgkzBXddjXQSYQ
JtkODrWS0skWLhSaEuNIXiTn4mD7FJMX4R3fF/mTTytd8tSlgtvLZIhVUehxq/Bw
rq5ceSfsY5jzni3sLdjN+Wg7jbooiLYZFE8LFvxHTepWMrhGVXLyze9eCvKT7UKy
FsOJPVCIRKHZT44YoBvrTfLpyH2JH8YLW7yiiYgImEKQiFoi6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMHVTOt0F8DHT8dKZZlDkRTG5Mh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmYxMjczMGYtNDFlYi0z
ZDYyLThkNjgtOTMzMjE4Nzk0ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABz+dTSUoeOh+hGEiPcllZE743xgd+g76nBCXEcoSbiVHFRlv/O3
EQfgpvurykv+9KqlJ1HqtzpAGHA7SLhnDZBhc74BwSaUOZiPWjV4IMSJ/nNMaSlG
QaQpgSel+0mLSl32mP2s+s4qkF2s2xZki11zGG3ELOwhhXANYjrR5V+sP1HzA2Pq
zDWfn0xzTWs+8XsA+cusxVwGF+kIObYZQAH28iOA3ym1cochDKpdagRXkupVMwzA
AfckQ7CXSHWgx6vRv+JF94VvoguiRCaRb5EnHPDsf+rP58E5WbDIoH2rv9NDQTdn
Xn3oZPhZ9ajuvtCIN00tW+ceAb/S3zhHbKU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:54 2025 by rpki-client