Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
File:                     1048d88b-8309-3f5f-9d3b-cdb555b881db.roa (raw, json)
Hash identifier:          8R09KzBblROxs9wU+GBcpbVTbKbEH7Vndec3aQ+QJ6Y=
Subject key identifier:   17:05:33:85:CD:3E:BF:AD:AD:13:6F:F8:53:F1:D7:55:5F:A2:81:88
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F39B64451CA658183180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     59895
IP address blocks:        2001:470:244::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f3:9b:64:45:1c:a6:58:18:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f634e90c-6a00-450c-943a-eddf91be1cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:ad:a6:35:56:ae:40:fb:60:76:99:1c:b2:
                    2c:6b:72:ed:cc:b5:3b:8c:15:17:f3:a5:1c:63:e5:
                    1f:a7:7f:a0:76:4d:d6:c7:db:5c:27:6e:9c:7f:5b:
                    3b:a8:8e:0e:c4:b1:bb:df:0a:f2:73:d8:9c:ae:0a:
                    8f:31:86:90:53:70:d2:32:65:76:0f:22:b3:ee:56:
                    fb:d4:7c:2c:dd:b0:a7:fd:46:5e:47:1f:e7:63:b4:
                    72:f1:ec:a5:9f:29:7e:ee:a7:c7:3d:ab:b9:d5:e3:
                    c6:dc:0f:30:de:f6:17:ff:15:6c:73:19:59:50:75:
                    0b:d2:8f:98:b0:db:de:c5:65:44:d4:b3:15:c8:9e:
                    a7:48:f6:d8:81:5d:cb:7f:83:de:8c:d0:1b:f9:2d:
                    e9:ab:b7:05:f3:0f:cb:f8:a2:d3:61:3d:45:98:b6:
                    21:25:b5:b9:45:8d:97:ef:64:80:e4:8b:54:5a:07:
                    cb:59:9b:69:e1:79:9c:54:4f:32:26:d8:f0:b4:1e:
                    f5:66:8e:5b:4b:f4:99:9c:e7:48:f2:c1:03:b7:73:
                    d7:d6:8a:8b:a1:30:83:4f:8c:9b:b7:0f:71:20:db:
                    94:09:e3:2b:b2:e6:26:5a:5a:53:8e:c0:da:c8:59:
                    8f:6c:a3:bc:84:72:6e:5c:72:3b:41:a4:83:81:e3:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:33:85:CD:3E:BF:AD:AD:13:6F:F8:53:F1:D7:55:5F:A2:81:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1048d88b-8309-3f5f-9d3b-cdb555b881db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:244::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:2d:9a:4f:e9:7d:18:39:89:db:af:35:00:88:e4:00:3f:
         71:e6:33:c0:ce:75:21:12:8a:35:7b:b3:a9:19:b3:9c:b6:c2:
         22:3e:41:e5:c9:e5:41:b4:bc:44:16:3c:47:0c:1e:ba:e1:eb:
         8b:20:c8:73:58:d6:36:cc:79:22:97:ca:0a:6e:57:b0:66:dc:
         1b:65:9d:e8:ad:9e:e7:5d:76:4a:6b:d4:a0:a6:85:cb:63:98:
         5d:d9:d6:97:67:76:d1:47:2b:b1:e2:26:40:db:05:e1:4a:e4:
         37:e7:07:e0:7c:fd:96:f6:31:fc:e3:5f:5d:05:b9:65:d2:55:
         25:a0:8b:bc:bf:63:58:5a:f7:a9:5b:57:8a:c6:ee:a0:89:7d:
         73:17:9a:b4:35:92:8c:6a:8f:73:48:46:b3:06:07:60:0c:46:
         11:de:f9:af:3e:e9:ce:12:d4:be:0b:6d:16:80:f4:15:4d:33:
         52:16:e0:7e:c7:df:b6:9e:84:50:ba:b5:b8:8d:68:9b:19:ed:
         f6:49:a6:bf:de:a5:32:c0:91:fa:8d:6e:92:9a:98:c1:2e:f5:
         f4:5f:5f:95:f2:c0:ef:b1:c1:3c:7d:eb:73:a8:f6:41:0c:3a:
         60:95:b2:9c:ba:51:8b:9c:8b:e5:51:b3:4b:cb:f6:c6:34:b2:
         00:93:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:30:20 2025 by rpki-client