Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa
File:                     85521fc9-726a-3f50-9e0b-e9325c1b475a.roa (raw, json)
Hash identifier:          ZTGCgcjlfY1Tcm6D06ME5xoYN++WrzOtqRYwVnAmdn8=
Subject key identifier:   F4:EA:E9:7D:2E:7F:C7:27:9F:CF:48:63:12:55:1B:ED:5B:86:4B:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7D19FC04177437541C780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     19523
IP address blocks:        2001:470:2a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:d1:9f:c0:41:77:43:75:41:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=fae01681-0690-43f8-af8b-11dfcb5829ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:ec:ed:e1:32:48:3f:47:09:4c:eb:6d:04:
                    a9:38:22:ba:91:6a:f4:e5:a9:18:32:9a:c6:65:d6:
                    08:33:e0:14:f1:22:8e:bd:6d:50:41:b8:ee:96:f6:
                    f8:79:84:99:be:68:11:43:48:40:fb:7c:cf:6f:ae:
                    38:85:c4:9a:d9:8d:0c:a8:f4:ca:09:ef:16:e8:fd:
                    90:ca:88:cb:3e:9a:41:a2:26:e8:1f:c7:c9:af:09:
                    f8:50:43:fb:a5:1c:2b:3e:fc:67:75:5b:75:07:a7:
                    40:da:ba:72:b3:85:d7:a3:3b:bb:9a:9b:1d:8c:ac:
                    30:cb:48:22:e1:09:af:ab:18:30:7a:d7:0d:58:13:
                    a2:f4:c7:a1:d9:2a:fa:b1:57:63:d1:cb:25:1a:b7:
                    48:e1:7d:26:5c:b6:d0:fe:82:af:81:81:da:52:40:
                    50:6c:68:f3:7c:0d:3e:db:62:f7:7c:87:73:45:33:
                    eb:0c:f8:d4:59:25:a5:86:83:e3:c0:2f:a7:7b:ad:
                    2a:46:29:32:ff:68:dd:e4:35:58:3d:64:51:80:3a:
                    83:bb:ec:f4:f6:d4:ed:16:7f:b0:91:04:e3:c0:e1:
                    7d:62:17:7e:05:47:ee:fa:17:6c:5c:99:84:6d:93:
                    68:70:fd:c6:47:4e:d5:79:81:2b:b0:ef:78:a4:5a:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:E9:7D:2E:7F:C7:27:9F:CF:48:63:12:55:1B:ED:5B:86:4B:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85521fc9-726a-3f50-9e0b-e9325c1b475a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ff:79:20:66:a9:60:1b:ae:5f:20:36:b8:68:c9:ce:d7:16:
         70:ac:83:b1:be:b6:f8:b4:c1:19:d2:be:3c:8f:67:3a:bd:1f:
         7d:7b:9f:e8:f2:bf:1c:96:62:fd:50:64:8b:57:c6:70:8b:ae:
         14:38:22:3d:3d:88:61:ce:92:aa:96:71:28:bd:ef:dc:ed:af:
         63:40:95:8a:e9:1e:26:54:09:8d:1a:66:0f:6f:04:5b:00:7d:
         8f:c9:a4:a9:ea:cf:66:9c:7f:29:b4:83:e9:22:70:3e:24:6d:
         f6:66:2c:26:2c:e7:50:90:d6:d3:2e:26:0b:93:2b:ac:9e:60:
         53:fb:9e:f0:c6:60:63:e5:36:55:4e:00:75:b5:21:2a:79:c6:
         f8:ff:cf:74:0e:d7:21:9f:4e:05:b8:1c:e8:2b:f0:d5:16:1a:
         9c:f5:e0:00:af:8b:fe:8c:9f:17:a4:ff:57:cc:da:2d:05:ea:
         9f:78:29:56:c2:c9:91:c8:9d:5d:a0:1d:8c:fc:cc:f2:c4:49:
         c9:0b:31:ce:4d:3e:3b:f0:49:88:bc:d5:85:d5:c4:e9:33:87:
         f4:f8:ed:35:a4:3d:39:9e:71:db:c8:6a:5b:cf:28:c0:40:8c:
         41:94:d9:2b:3d:13:c6:d2:cf:b6:9d:cb:d2:86:99:45:f4:46:
         17:e1:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:28:39 2025 by rpki-client