Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa
File:                     f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa (raw, json)
Hash identifier:          X5r7orxaLXh9y9OaVL3SGLyRHKaO1a6UXNcXbwp7OKU=
Subject key identifier:   BE:72:DA:E5:88:31:18:4B:01:34:F4:AE:ED:CB:56:C4:9C:78:FF:D2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B8BE23993F99DA954EF02DD60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     36493
IP address blocks:        2001:470:45f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:39:93:f9:9d:a9:54:ef:02:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=7338d65e-8ab5-454d-93c0-83dfbeae45c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:99:08:4a:26:b1:77:cc:e7:9e:84:d4:2e:fa:
                    d6:c3:90:2f:89:2c:a9:de:54:99:65:6e:54:b8:81:
                    db:ae:e4:98:39:a8:cc:fb:56:a7:a3:f2:e3:16:4d:
                    58:54:60:97:67:fe:49:67:fe:34:c9:ab:a1:26:28:
                    0e:ec:8d:00:77:85:9d:fd:72:16:9c:95:0c:69:bb:
                    7b:90:71:38:be:a1:f1:4a:ca:08:b6:cf:ff:b7:ff:
                    70:d3:81:3d:80:97:cf:df:d3:3d:4a:2d:05:e4:51:
                    73:40:9c:f6:1b:1a:c1:32:7a:b3:86:ac:75:d3:de:
                    ef:48:ba:09:66:b7:78:89:ae:73:fb:52:22:01:c3:
                    cc:6e:f4:e5:e0:88:e1:c5:a8:23:b4:ef:ea:0f:e4:
                    08:a4:af:d2:96:3f:ba:00:c5:97:48:e5:c2:25:ab:
                    cb:ab:98:12:e8:d0:19:e4:a1:c9:20:e8:df:ad:24:
                    b3:b3:0c:0a:d9:0a:d8:a6:26:e4:69:ea:36:e2:d9:
                    18:18:b3:8e:33:64:05:ab:b0:11:3d:59:5c:d0:32:
                    a7:b1:74:73:e6:ba:4e:00:75:e7:f0:58:90:dd:27:
                    b1:24:cd:92:e9:af:47:2c:3b:75:12:73:af:fa:4b:
                    ad:83:f2:4e:74:7b:f4:d6:58:f0:dd:58:24:8b:de:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:72:DA:E5:88:31:18:4B:01:34:F4:AE:ED:CB:56:C4:9C:78:FF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f4bed3ab-44be-32ad-8d1b-e3a2319568f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:45f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:b1:2d:06:e3:ae:05:b4:ac:a8:ff:33:7e:7c:a6:d9:3e:
         e6:43:a7:9a:81:79:04:c3:3c:12:23:72:4a:20:30:9b:0f:9e:
         5c:de:3d:f3:8d:6f:32:cc:b0:f5:ea:78:af:6d:76:52:38:cf:
         06:9f:4c:23:fe:b6:f6:51:2b:02:fe:59:ec:ec:13:8e:a3:d9:
         65:1d:2f:e9:66:88:3d:7b:8c:f7:82:b0:a3:fc:15:f3:fb:89:
         5c:33:bf:c8:df:9a:66:a8:18:db:d2:02:b2:96:90:80:70:5e:
         2a:58:01:ca:a5:0c:89:7c:81:87:a0:29:ba:6e:5a:3f:5d:be:
         c0:d5:a7:f0:28:50:9a:5d:cc:38:f5:46:4b:7f:be:75:ed:4a:
         bf:ce:90:3c:bd:26:e5:78:f8:c4:d3:74:ec:d9:34:b5:31:38:
         61:81:c8:ac:9c:25:98:d9:1b:70:8d:2d:4e:6b:4b:92:8f:80:
         93:fd:65:03:92:a4:97:cd:24:ff:c2:79:6b:6d:24:1c:79:9b:
         24:4d:66:bc:7b:ef:2f:6e:5e:f6:3e:fc:12:c2:e6:b9:c0:fd:
         f3:06:c2:b6:a0:43:d9:f7:ee:1b:4a:7b:4c:91:d6:a4:2e:20:
         31:e5:99:6b:70:91:9a:9c:78:b9:57:c7:cc:71:66:5b:15:1c:
         7c:14:89:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:07 2025 by rpki-client