Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb0e70f2-3e89-3a18-92ca-5e06c6e0b192.roa
File:                     bb0e70f2-3e89-3a18-92ca-5e06c6e0b192.roa (raw, json)
Hash identifier:          S7BnTbu35Q5/hthqNt/i2CaQgXWuWVehDettfvU/Gy4=
Subject key identifier:   22:D4:3A:82:5F:F3:25:47:13:99:2F:4B:08:37:E0:62:E9:64:AE:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B2066E163FFB8A3E1A352E980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb0e70f2-3e89-3a18-92ca-5e06c6e0b192.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     62844
IP address blocks:        2001:470:476::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e1:63:ff:b8:a3:e1:a3:52:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=415929bc-2fc4-4c74-849f-8fd44d23ca4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:69:08:6b:41:7a:d3:c2:6c:5e:9f:9a:00:
                    d8:8e:63:b1:c4:71:09:14:6f:e1:d4:c0:3e:45:9f:
                    c3:53:81:a3:0f:9b:b4:3f:e6:da:df:b7:80:85:25:
                    61:ae:9d:b7:84:3f:d2:49:0f:b0:41:c2:7a:ab:e0:
                    59:b9:67:f3:d2:a8:79:14:23:2d:c7:9f:2e:b4:08:
                    1d:89:20:4f:d5:90:ae:2a:4b:d7:22:02:47:4c:93:
                    61:c8:1e:5e:3c:f4:7f:3f:cb:03:5d:ec:85:9e:d7:
                    eb:ca:d3:28:1e:44:73:cd:ae:79:bc:b3:2b:bd:2a:
                    4d:cc:ac:c2:1d:6e:04:bd:1e:89:88:fc:e6:2e:03:
                    b4:55:fe:a3:43:cc:4e:15:e6:93:07:7d:d8:ab:5c:
                    24:68:0b:0e:c4:94:52:92:b5:10:82:69:fa:38:a7:
                    dc:ce:ae:9c:36:f2:cd:e7:04:c6:2f:e1:e6:f4:8d:
                    d3:67:4f:fe:09:87:86:65:86:fa:2e:c0:c5:27:47:
                    6e:76:ea:3e:82:cf:d1:d5:7f:9f:e1:8b:41:ff:7e:
                    90:dd:16:b3:fc:bd:37:b7:9b:5c:00:f9:fd:d7:ed:
                    cb:ee:4c:3f:44:8c:ed:fb:b0:75:9b:e9:07:82:de:
                    e9:57:bc:1d:e8:96:02:2a:d8:af:c8:9f:a5:e6:f3:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:3A:82:5F:F3:25:47:13:99:2F:4B:08:37:E0:62:E9:64:AE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb0e70f2-3e89-3a18-92ca-5e06c6e0b192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:476::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:3a:6f:a4:03:d8:59:0c:0e:ae:fa:ce:dd:46:9a:26:76:
         77:36:70:82:1c:10:d3:95:34:6e:b6:0f:c1:c7:62:67:94:56:
         4b:72:f8:d3:7c:df:fa:a4:be:cc:16:61:04:e3:10:8b:8f:db:
         12:a6:70:1d:49:81:07:14:95:dd:64:51:23:d3:01:72:3f:05:
         db:f0:1e:7b:05:d7:cc:85:f4:85:dc:bd:58:e4:f6:8d:eb:bb:
         38:fc:5f:74:44:3a:ff:a7:38:17:3f:da:85:04:ae:86:cf:02:
         6f:63:e2:6c:fa:8c:98:5c:3c:09:07:7e:c1:0a:e8:17:05:cc:
         b3:4d:25:94:7b:f6:71:49:e3:45:58:8a:d4:20:7e:21:6e:84:
         5b:93:db:08:cd:9a:97:98:9e:d2:93:ce:8a:4a:d0:67:e0:81:
         9d:b8:b8:cc:1f:5a:7d:ac:42:78:ab:fb:d8:35:fd:d4:8c:ba:
         e4:c8:20:cd:f1:08:ae:bf:7c:49:e3:64:14:89:99:79:7f:91:
         7d:c5:82:b6:9b:66:44:0a:83:85:1b:ac:a4:8d:f5:1b:5a:05:
         25:83:fe:50:c2:c2:05:e0:32:26:a8:48:d3:1f:db:ab:4a:ef:
         60:d5:ba:6c:72:bc:18:7f:11:4e:ec:67:2c:ab:4f:e5:d4:e7:
         1d:f8:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:52:21 2025 by rpki-client