Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa
File:                     bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa (raw, json)
Hash identifier:          Oe1E3hF1VglYtKUQRvLUin49KAt67MzOJ61lT0z9h1k=
Subject key identifier:   39:A3:3C:83:AA:9E:E3:75:D2:20:A2:5C:24:FF:89:CB:60:B7:82:04
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B1806EB45E0DC99BB6E3B4500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     14012
IP address blocks:        2001:470:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:eb:45:e0:dc:99:bb:6e:3b:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ea8b3048-a97a-4a9e-b43c-905f82ef6617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:a4:d4:05:92:c0:28:66:61:88:7d:97:c9:
                    3d:f3:3b:17:bc:1f:01:cd:54:8b:2c:36:af:27:2f:
                    34:49:79:81:ad:d7:69:e6:26:35:38:3b:99:47:eb:
                    f5:fe:2a:66:39:b8:92:f0:82:f2:81:2d:ec:83:52:
                    ec:7c:30:33:b8:47:e8:4a:b8:f8:ac:72:1b:dd:3a:
                    8a:eb:3c:54:60:79:fc:0e:0f:aa:9c:c2:0e:13:9b:
                    17:b3:4c:27:fb:ec:3b:bf:1f:8c:41:a9:37:2c:c4:
                    1c:fd:ae:45:8c:c4:24:8c:9e:19:cb:e7:ab:4a:77:
                    cc:34:c1:e2:bf:91:c2:68:c8:20:01:d8:92:90:ca:
                    bf:cc:62:40:c5:82:29:67:3d:2f:8b:29:1a:10:2b:
                    9d:e9:00:00:00:6e:32:64:5f:a4:47:74:91:d5:01:
                    3b:df:b0:40:fe:2e:8b:19:ef:63:cc:d8:f9:99:b0:
                    52:10:a8:67:09:2e:16:af:e2:8d:42:26:34:fe:7f:
                    b7:3c:fe:5f:e7:42:70:95:a0:f6:d0:db:87:8c:1f:
                    76:06:ec:57:e4:c0:28:73:e3:1a:bb:d8:8c:f8:9a:
                    fb:bb:58:d4:97:dd:f6:3f:65:f0:2b:a6:52:ab:78:
                    ab:41:e5:a6:63:b5:d5:f6:a0:0e:eb:b4:00:c2:1d:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A3:3C:83:AA:9E:E3:75:D2:20:A2:5C:24:FF:89:CB:60:B7:82:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf51dd06-7be2-3e3c-b997-81dc2c0db66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:68:76:f5:ea:f5:fd:ec:78:f9:29:f5:60:16:2f:cc:ea:
         90:36:3d:3e:41:1c:c7:9d:95:e7:2c:bb:d7:8b:03:53:33:05:
         66:34:44:03:e3:4d:ea:dc:5d:0b:1c:fc:de:c6:a1:ec:d1:8b:
         72:6a:40:70:ef:39:1c:78:e7:be:8f:f3:06:a5:08:6d:aa:55:
         61:ea:ea:c8:b4:d9:5a:43:1b:c0:7c:21:92:ac:a5:5f:e4:63:
         ba:9d:20:af:93:63:3c:07:f4:8f:dc:0a:58:bd:30:a2:9f:b3:
         94:53:aa:44:69:c1:62:4f:64:67:ab:63:65:c5:19:96:df:5f:
         be:0f:7f:91:f7:55:bf:26:e9:a4:f0:ed:03:f5:d3:ce:16:43:
         85:72:8b:43:56:75:2a:df:d4:09:75:d3:7f:5b:29:d6:63:6d:
         e9:dc:33:36:35:d1:e3:62:8e:2c:a9:c8:c8:17:09:26:cd:68:
         9f:cb:ec:f4:a4:cb:12:b4:de:4c:55:0d:f8:1d:11:d2:c6:c6:
         88:bf:78:0e:96:b2:88:a2:2a:37:b1:8c:83:b5:57:4c:9e:ca:
         53:fc:f1:85:db:17:4f:66:5b:a1:fa:ad:01:28:3d:50:a4:d7:
         48:fc:7d:87:c3:b7:ae:e2:25:1c:c1:f8:85:c9:1a:af:43:87:
         95:7d:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:41:02 2025 by rpki-client