Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
File:                     5eb17499-54d1-3ab3-b109-f2c4846c9490.roa (raw, json)
Hash identifier:          9ACvB6WF/IoCUrMdih75/oNtpueYcpAYynBODY4Mmro=
Subject key identifier:   1F:04:7D:CC:6B:10:54:F7:E8:BC:9B:81:10:03:A7:7C:67:6F:9D:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7D21B5CF2F6EA49121280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     18526
IP address blocks:        2001:470:2b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:d2:1b:5c:f2:f6:ea:49:12:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=cf025c97-4349-4aef-aa0d-0512d16f25e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:2b:94:da:5f:bb:98:60:74:a5:b3:ed:a1:
                    96:40:cc:b3:09:ef:58:e7:49:dc:fe:0f:26:5b:04:
                    01:ee:26:ee:7b:95:77:94:63:1c:a1:57:5b:5a:5f:
                    f0:f6:84:8a:11:71:a6:98:e7:41:42:18:82:7b:d7:
                    45:5f:79:e3:81:76:87:65:7f:97:9a:fb:69:f4:47:
                    58:98:29:37:53:6c:75:0e:4d:19:76:2d:ce:77:33:
                    88:b3:86:93:89:71:c9:de:e6:f2:4f:95:1b:e6:9b:
                    e2:35:23:f5:f9:61:45:a9:c4:23:02:f5:5e:c7:f8:
                    7f:65:2e:96:51:fa:b0:6c:ab:73:b7:2f:f5:96:d5:
                    15:23:99:93:a9:0e:3c:79:ef:9d:a1:e3:ea:e8:ca:
                    cc:f9:37:f0:38:1e:d7:13:c3:ca:a8:69:54:fe:d5:
                    ae:f5:b7:c2:81:b0:7f:79:92:66:cc:e4:f3:92:ec:
                    69:ff:2e:65:ee:60:8b:78:64:f9:3f:ce:0a:64:fa:
                    bd:94:71:a9:85:3f:b1:64:4e:be:a6:21:32:fb:5b:
                    5e:86:de:ba:18:c4:68:21:4d:18:ba:8c:0f:a3:5d:
                    27:37:ca:f4:40:a1:3f:9f:bb:c0:ea:39:9c:b8:2c:
                    92:18:53:68:b1:a5:8f:ad:94:4f:f3:b6:5a:33:ec:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:7D:CC:6B:10:54:F7:E8:BC:9B:81:10:03:A7:7C:67:6F:9D:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:40:f7:a6:76:60:3c:7a:d4:cd:dc:81:a8:24:67:cb:a8:
         60:85:c9:e0:99:04:38:b7:f6:0e:0c:41:ba:3d:65:24:1d:c0:
         67:4b:39:94:ad:e5:94:03:cb:55:c7:01:08:9a:c7:59:8c:32:
         a0:8c:7e:88:46:0e:af:8f:d3:d6:54:ba:5c:79:c9:1c:0b:24:
         f2:9a:42:81:dc:57:81:01:0f:0c:05:f5:90:b8:e7:0a:e5:5a:
         2f:9a:c9:c4:f9:90:dc:78:a1:5d:e6:1d:48:49:9b:1b:51:31:
         d8:3d:5c:30:64:83:6e:25:d7:bb:7b:64:17:af:54:76:4c:d5:
         40:9c:67:6c:c8:b8:b6:82:de:de:25:6a:1b:ff:2a:c2:b7:5c:
         7a:72:02:fa:02:b0:09:53:3a:66:91:ec:f9:5c:c2:85:9f:a1:
         e3:7e:a2:d4:d4:33:68:25:28:df:2c:ff:1e:eb:cd:d9:93:89:
         ac:b8:98:89:0f:b8:b9:1f:ef:e8:12:9e:36:a5:4a:fa:04:ff:
         71:01:06:7b:b8:ef:35:6e:fd:cb:b0:a8:cd:e8:ae:68:c8:79:
         34:6d:5b:d8:16:1b:8a:61:9d:bb:91:4e:18:4c:64:9e:61:cd:
         de:a3:c7:58:b3:f5:a3:84:79:94:f5:15:62:3b:22:9a:3b:3c:
         de:6d:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:39:27 2025 by rpki-client