Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07303a59-85bf-3088-a98d-f7b0b64122ef.roa
File:                     07303a59-85bf-3088-a98d-f7b0b64122ef.roa (raw, json)
Hash identifier:          xQMXWV7TNfUtpdMzXvpg3WlHdNiHIVmyYy5NrEP1uEg=
Subject key identifier:   BF:D1:B3:59:09:17:80:11:75:4C:93:F7:79:E0:93:A4:E1:E2:69:9D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F574127AD43CC8D4F028
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07303a59-85bf-3088-a98d-f7b0b64122ef.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     210119
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f5:74:12:7a:d4:3c:c8:d4:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=dff0719f-baf4-4b0c-9d6d-e48b44db9ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:24:04:09:1c:71:e9:75:2a:82:21:34:8d:
                    87:37:39:c8:db:f0:05:48:11:9b:99:71:c8:dd:3e:
                    95:65:ea:dd:f0:91:3e:0d:15:4b:5a:cd:4e:49:0a:
                    ce:ab:6d:df:45:d0:fd:71:7b:0a:aa:9e:e9:96:94:
                    0a:d8:7f:ad:61:f7:01:b8:c3:72:bd:ae:92:63:1b:
                    e9:02:c3:34:f2:e8:4c:18:65:cc:25:cb:cf:9e:7c:
                    32:fc:25:ac:ee:1f:3f:7e:77:85:63:7f:fa:e2:a1:
                    71:94:4c:c7:dc:40:06:3b:5e:e3:cf:a5:a0:e8:ca:
                    87:8e:90:37:59:ef:a3:fd:27:40:e9:d2:f0:54:2d:
                    b7:50:b6:8d:eb:61:d6:a9:ac:99:a5:25:1c:92:14:
                    d5:d1:ab:27:de:52:b7:83:95:f5:f9:88:0d:cc:ef:
                    e4:d4:a8:ac:e3:82:3f:80:97:29:f1:8c:4f:dd:d8:
                    b4:7e:75:4a:51:89:8d:e0:46:6d:28:c1:73:b5:8f:
                    e9:a9:33:15:6c:62:8f:7b:ec:8d:a0:a9:1d:fe:13:
                    37:54:4c:b5:d7:5d:48:d7:7e:b6:65:8b:fa:59:7b:
                    06:40:c2:44:a8:06:93:18:55:ce:f6:2b:52:0c:47:
                    a3:5f:69:30:b9:9a:24:c1:77:97:04:8a:95:b9:0e:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D1:B3:59:09:17:80:11:75:4C:93:F7:79:E0:93:A4:E1:E2:69:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/07303a59-85bf-3088-a98d-f7b0b64122ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:78:26:c5:06:93:79:b4:b2:3d:db:6e:71:92:8a:89:61:
         2e:5b:15:fd:63:4b:ee:41:34:8b:fc:2c:07:9a:6d:e2:36:a5:
         6f:99:6a:80:2c:5c:cf:ff:6d:3f:72:09:7f:73:b6:0f:ac:42:
         d3:97:5c:d7:a3:5e:6d:09:26:2c:be:84:d9:15:c2:4e:66:c6:
         85:b5:82:0b:98:e2:3a:82:7d:62:9f:ce:70:a7:0d:51:67:c7:
         e7:a5:5e:17:f3:6f:7d:69:ce:c4:c0:19:9f:a0:c1:7d:fb:90:
         11:46:45:6f:25:7e:33:0d:e8:80:7a:f0:ee:a9:de:bb:e1:c4:
         d2:a4:c4:39:cb:f7:51:76:08:89:0b:02:0b:be:0e:ca:07:30:
         61:f8:14:8d:91:5a:c3:03:60:55:ed:82:c4:ed:0b:b6:18:51:
         e3:c1:2c:bd:bf:73:fc:6c:04:1a:ce:f4:99:56:8e:de:0f:72:
         2b:08:b4:c1:1b:ea:f2:75:7c:92:bd:18:61:2c:40:96:60:e7:
         30:f7:28:5a:43:ce:a8:5d:25:9b:0f:26:7a:79:ca:f0:d3:92:
         cb:c3:15:2e:60:4a:8a:7a:dd:95:08:c5:f3:c6:4b:80:33:6a:
         ef:5d:61:88:8e:50:69:e3:f8:ba:b0:4a:ee:db:94:bd:5c:59:
         39:20:c8:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1/V0EnrUPMjU8CgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZGZmMDcxOWYtYmFmNC00YjBjLTlkNmQtZTQ4YjQ0ZGI5ZWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUkBAkccel1KoIhNI2HNznI2/AFSBGbmXHI
3T6VZerd8JE+DRVLWs1OSQrOq23fRdD9cXsKqp7plpQK2H+tYfcBuMNyva6SYxvp
AsM08uhMGGXMJcvPnnwy/CWs7h8/fneFY3/64qFxlEzH3EAGO17jz6Wg6MqHjpA3
We+j/SdA6dLwVC23ULaN62HWqayZpSUckhTV0asn3lK3g5X1+YgNzO/k1Kis44I/
gJcp8YxP3di0fnVKUYmN4EZtKMFztY/pqTMVbGKPe+yNoKkd/hM3VEy1111I1362
ZYv6WXsGQMJEqAaTGFXO9itSDEejX2kwuZokwXeXBIqVuQ6CAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL/Rs1kJF4ARdUyT93ngk6Th4mmdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDczMDNhNTktODViZi0z
MDg4LWE5OGQtZjdiMGI2NDEyMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHT5eCbFBpN5tLI9225xkoqJYS5bFf1jS+5BNIv8LAeabeI2pW+Z
aoAsXM//bT9yCX9ztg+sQtOXXNejXm0JJiy+hNkVwk5mxoW1gguY4jqCfWKfznCn
DVFnx+elXhfzb31pzsTAGZ+gwX37kBFGRW8lfjMN6IB68O6p3rvhxNKkxDnL91F2
CIkLAgu+DsoHMGH4FI2RWsMDYFXtgsTtC7YYUePBLL2/c/xsBBrO9JlWjt4PcisI
tMEb6vJ1fJK9GGEsQJZg5zD3KFpDzqhdJZsPJnp5yvDTksvDFS5gSop63ZUIxfPG
S4Azau9dYYiOUGnj+LqwSu7blL1cWTkgyCM=
-----END CERTIFICATE-----
Generated at Sat Oct 25 17:36:24 2025 by rpki-client