Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e23d0a6-f8ba-35af-b2f4-662a1176808b.roa
File:                     7e23d0a6-f8ba-35af-b2f4-662a1176808b.roa (raw, json)
Hash identifier:          9cHthKTxQTv13e3ZmPmNh4GXrH3NBr5dw5BZs9fGQgU=
Subject key identifier:   D2:49:62:0F:BE:E5:8F:1F:50:22:52:C9:17:7F:6E:24:69:32:5B:E3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F34A0B884CF8070F8F50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e23d0a6-f8ba-35af-b2f4-662a1176808b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     61986
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f3:4a:0b:88:4c:f8:07:0f:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=9b5a6b26-3e6b-4e47-977b-bba64cec0797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:00:21:73:c3:82:f2:85:20:09:39:54:dc:
                    44:46:28:63:e6:ce:e1:f0:c4:4f:13:ca:1d:f2:b9:
                    26:9b:1a:3b:e0:4e:64:4a:2d:2d:ff:4c:41:06:b7:
                    7e:59:cb:99:f7:f4:59:0e:53:d0:ac:77:56:61:d1:
                    a3:4b:cc:3d:45:c3:d9:49:56:e0:d9:ff:72:03:f8:
                    37:aa:95:7f:78:17:21:3c:08:f5:f4:37:e4:d5:9f:
                    86:41:91:c3:d4:fb:c1:78:e4:e0:6d:8f:2b:bc:82:
                    34:b7:cc:be:c5:2f:c6:89:4d:43:2a:db:de:eb:38:
                    87:2a:4c:66:2d:ad:fb:bd:e7:75:cd:16:61:35:fe:
                    87:65:5f:ed:c8:7b:c9:6b:0d:c4:60:2e:60:21:45:
                    c2:3d:af:fb:7e:4a:c5:88:ab:e3:96:ac:a4:05:9d:
                    d9:72:4d:15:43:1b:62:46:b7:a6:3b:eb:38:e0:ea:
                    14:4f:14:ef:50:d1:dc:f1:8a:36:f4:56:48:2c:fb:
                    d9:87:4f:e3:9f:44:be:b4:99:b6:04:8a:96:fe:db:
                    86:27:5b:e5:82:7d:da:36:71:5c:1d:59:f6:63:9f:
                    fd:24:bd:10:1b:37:2c:ae:8b:79:d3:62:a6:7b:c4:
                    97:88:98:86:e7:99:1e:7b:1c:f8:51:0c:15:15:e3:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:49:62:0F:BE:E5:8F:1F:50:22:52:C9:17:7F:6E:24:69:32:5B:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e23d0a6-f8ba-35af-b2f4-662a1176808b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:3e:30:df:91:c3:b9:1c:f1:e6:5c:39:73:d0:b2:35:8b:b3:
         77:d0:4a:b5:71:19:80:69:2f:71:2a:57:d4:fc:8a:d1:ea:f9:
         70:8e:ed:fb:81:99:fa:47:32:a6:12:f3:5a:ee:ba:fa:37:ec:
         1a:e8:6e:ca:68:c2:c5:8a:f0:63:42:64:54:2d:45:f7:21:76:
         43:61:14:12:09:79:7a:b8:a3:14:61:df:95:6e:ac:a6:55:3e:
         37:dd:80:a3:16:92:7a:ce:7b:ca:b2:0f:74:d0:4d:da:02:16:
         e5:a0:66:66:7b:dc:ad:9c:46:b2:4c:57:e4:44:f4:60:49:97:
         ff:75:e6:7a:e1:54:6e:91:85:10:98:33:58:8d:04:6e:8b:bf:
         6c:cc:b8:7d:d8:1c:36:04:9d:e6:40:cb:e6:af:9a:6c:18:47:
         d2:38:02:0e:3e:2a:5d:ed:94:05:ba:9c:29:9e:9b:30:d5:b2:
         cc:7a:7e:6f:7e:42:73:37:6b:bb:03:ad:f3:10:71:57:29:69:
         f2:c2:53:07:fb:b4:81:d8:8b:53:c8:46:a8:b2:40:a6:a1:51:
         cc:3f:21:dd:3a:ee:cd:8d:21:46:6b:a4:8e:06:60:5e:c7:d5:
         5b:e7:1d:5f:56:fe:7d:fe:25:8f:dd:e1:9f:b0:c0:57:b1:2a:
         93:44:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:56:24 2025 by rpki-client