Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
File:                     cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa (raw, json)
Hash identifier:          UsHK+WnTf0ItXgjBjtJZVbgSUFR/yWN2UCoUcZFLGnE=
Subject key identifier:   6F:28:EA:AA:F6:F3:E6:BC:49:6A:A9:54:41:9D:2E:FF:41:AC:DD:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AF25672C56FEB489F603732B0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     215492
IP address blocks:        2001:470:426::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:72:c5:6f:eb:48:9f:60:37:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=b4202363-4bae-4351-a7f7-b8cc27273504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:16:d4:0c:1b:28:1f:87:37:7d:56:7a:6a:
                    30:cf:88:fd:07:15:9b:9f:e5:05:35:f7:6e:98:7c:
                    7d:52:f4:7c:3e:c1:87:f6:46:6d:3f:8e:84:f2:03:
                    03:ed:b9:de:c0:d9:5e:4f:78:5f:8e:02:45:1a:a2:
                    23:b0:f7:b8:64:0a:34:d0:71:b3:ab:2f:2a:a8:3e:
                    54:48:f1:6d:3f:f8:e6:92:60:71:1c:b6:35:fa:1a:
                    c5:89:a3:0a:a3:f1:de:e7:77:57:84:6d:4e:83:de:
                    7d:be:98:d8:42:fa:c9:65:3c:ec:6a:17:72:04:80:
                    67:97:9f:bf:55:c3:5c:44:73:37:bc:e1:c1:80:27:
                    31:61:8b:50:12:ea:fc:ca:2c:e4:a6:85:6d:3e:18:
                    f0:4c:10:7a:89:d3:d9:7a:83:98:a8:8f:99:78:48:
                    95:ed:f2:c6:d4:c9:58:e9:3b:b3:32:a2:4e:9f:e0:
                    36:92:dc:a7:6e:15:c9:59:ee:4c:6e:b9:c0:ff:95:
                    d5:b6:8c:6c:f1:e1:5c:02:3e:c6:13:9f:6c:da:be:
                    85:35:ec:08:63:87:f7:10:e2:29:36:97:8d:00:18:
                    2a:e9:7d:bb:ab:bd:e8:b6:bd:a7:2c:06:b3:eb:15:
                    a9:bc:44:34:01:b8:f3:1b:77:31:e2:ff:a3:48:e0:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:28:EA:AA:F6:F3:E6:BC:49:6A:A9:54:41:9D:2E:FF:41:AC:DD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:426::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:87:e7:93:4d:33:4c:a0:14:e7:b2:d2:01:d0:ce:d5:61:2f:
         5c:37:0e:b0:91:f3:4e:dd:22:cc:3a:5a:20:e6:e6:6a:ed:98:
         42:2a:b4:18:2e:b8:df:b4:5f:25:f9:33:ef:55:a9:df:40:65:
         ef:69:a6:c5:c5:92:a5:1f:46:12:2d:a3:9f:20:a6:3c:a6:5e:
         b8:f9:3e:73:bf:1b:39:ad:47:c9:86:aa:62:5c:bc:c8:a5:f3:
         b8:34:4a:91:d4:c7:ca:aa:76:a7:ae:1d:45:cc:63:51:a3:b0:
         46:35:c3:a8:b9:a6:5d:77:78:d7:ac:f2:52:51:28:b2:bf:36:
         35:96:a6:4a:c4:5c:00:84:06:b0:c8:ea:f8:b7:e4:39:bf:cc:
         e1:1e:da:49:02:47:5e:70:3e:d8:62:4d:63:b9:ad:a9:5a:75:
         16:e6:f2:5c:ae:03:cd:84:0d:71:7a:f1:8d:ef:25:60:eb:c0:
         3c:cf:70:66:c6:f4:41:2a:d6:31:8f:29:38:0e:41:8f:d0:5d:
         1c:bb:74:48:cb:aa:c1:a2:7a:5e:ac:a7:07:72:fc:a4:32:83:
         1b:e6:98:d1:39:84:81:a9:62:91:16:3e:b9:f3:ef:b0:ce:6a:
         fc:ae:d9:40:d9:5d:ce:71:ad:be:a1:d1:2e:e2:e2:0e:20:77:
         4c:21:19:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEryVnLFb+tIn2A3MrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
YjQyMDIzNjMtNGJhZS00MzUxLWE3ZjctYjhjYzI3MjczNTA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil8W1AwbKB+HN31Wemowz4j9BxWbn+UFNfdu
mHx9UvR8PsGH9kZtP46E8gMD7bnewNleT3hfjgJFGqIjsPe4ZAo00HGzqy8qqD5U
SPFtP/jmkmBxHLY1+hrFiaMKo/He53dXhG1Og959vpjYQvrJZTzsahdyBIBnl5+/
VcNcRHM3vOHBgCcxYYtQEur8yizkpoVtPhjwTBB6idPZeoOYqI+ZeEiV7fLG1MlY
6TuzMqJOn+A2ktynbhXJWe5MbrnA/5XVtoxs8eFcAj7GE59s2r6FNewIY4f3EOIp
NpeNABgq6X27q73otr2nLAaz6xWpvEQ0AbjzG3cx4v+jSOBKAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG8o6qr28+a8SWqpVEGdLv9BrN0NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JiMjViMWYtZmQzYy0z
NTExLWFkN2UtZWI3M2NhNTNjZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACKH55NNM0ygFOey0gHQztVhL1w3DrCR807dIsw6WiDm5mrtmEIq
tBguuN+0XyX5M+9Vqd9AZe9ppsXFkqUfRhIto58gpjymXrj5PnO/GzmtR8mGqmJc
vMil87g0SpHUx8qqdqeuHUXMY1GjsEY1w6i5pl13eNes8lJRKLK/NjWWpkrEXACE
BrDI6vi35Dm/zOEe2kkCR15wPthiTWO5raladRbm8lyuA82EDXF68Y3vJWDrwDzP
cGbG9EEq1jGPKTgOQY/QXRy7dEjLqsGiel6spwdy/KQygxvmmNE5hIGpYpEWPrnz
77DOavyu2UDZXc5xrb6h0S7i4g4gd0whGdk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:06 2025 by rpki-client