Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa
File:                     81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa (raw, json)
Hash identifier:          aEenARKy6njpFHvMOzI8CqbQcbgu8Uufb1PonkTcYJA=
Subject key identifier:   FB:59:60:B4:5B:FE:AD:45:5C:6F:F7:D9:2E:A1:3F:E7:27:B1:5B:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7F7D33E02DD0599F99E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     2901
IP address blocks:        2001:470:298::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:f7:d3:3e:02:dd:05:99:f9:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=001c4d44-a94f-4ab7-8752-6e8bd7ab9541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:52:33:c3:d8:c8:60:6e:54:df:02:62:f6:
                    8e:ad:4a:ef:75:d2:2e:84:cc:bb:08:81:43:bd:fe:
                    13:47:10:2e:8f:5f:e0:0d:d4:97:66:59:9b:89:c8:
                    91:a1:38:4f:93:90:1e:ba:18:be:aa:19:c1:25:72:
                    8b:86:7e:02:c2:fb:26:b3:29:32:af:9a:dd:da:69:
                    ec:81:0a:51:2a:2c:da:2d:68:b8:1b:ce:3f:a4:b7:
                    ce:a4:1b:8a:1b:d8:f1:ba:68:f7:60:7f:c2:75:7f:
                    ac:c6:3a:a1:19:09:63:83:ed:7e:62:ae:25:37:82:
                    a2:6e:e3:c1:6f:3c:54:b3:c3:40:9f:46:87:96:b1:
                    aa:89:b2:cc:37:6d:f4:82:84:a3:25:92:a3:8e:d6:
                    8a:f5:05:da:9f:23:66:3e:14:de:ab:9a:7f:4d:4a:
                    f6:4f:fc:92:69:47:ff:9b:5c:15:35:93:61:3a:9e:
                    5f:b4:ed:2a:c2:8d:a3:72:a9:ef:ab:85:7c:01:e0:
                    f7:ff:f4:6c:83:73:77:7e:d2:14:c8:19:39:b0:28:
                    e1:f3:98:99:f2:13:45:db:e1:a8:f0:41:50:21:74:
                    65:d4:d6:c4:cb:41:fe:34:5c:2b:ec:78:ba:1b:d8:
                    a4:d2:81:0a:4c:92:eb:2f:dc:68:40:47:e5:53:03:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:60:B4:5B:FE:AD:45:5C:6F:F7:D9:2E:A1:3F:E7:27:B1:5B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81b9c4a4-ce74-3a72-8629-d2aa603b432f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:298::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:92:a6:ee:51:9c:0c:8e:3e:ab:17:c9:76:ad:cb:b6:4c:bc:
         ee:d9:e6:a4:0c:2b:e2:a8:82:19:ce:d0:ae:cf:4d:48:f3:e2:
         3e:b8:04:4c:11:35:ff:b4:1d:84:e9:a1:38:d9:a0:01:72:85:
         87:ee:7a:03:fa:10:6b:77:78:82:e6:17:99:63:5f:83:c3:9e:
         65:92:a2:17:9c:96:5e:7d:ab:f3:9d:66:8f:07:61:9d:68:d6:
         df:c1:76:49:c4:12:ba:d2:14:64:84:4e:e3:00:9a:e3:84:d2:
         95:74:48:9c:5a:b9:9a:a2:3f:ae:06:4d:f5:d5:2d:d0:4f:60:
         4a:73:79:40:d5:bc:3e:32:42:6e:1e:4d:55:7f:8f:58:c5:87:
         ae:5e:b7:4e:2e:ab:61:6a:1c:82:86:d6:2e:ce:3e:94:41:61:
         db:68:b7:02:5e:85:a3:6c:2f:c6:8c:e6:d1:59:f0:fb:de:5e:
         85:3c:eb:15:43:3f:e7:e9:86:8a:4d:bd:e3:8f:57:34:30:37:
         61:39:7c:00:87:b8:04:53:a9:a2:c8:df:56:64:54:70:f0:16:
         84:d7:3c:82:32:87:5e:db:a0:fb:50:a4:32:af:c1:7a:c1:77:
         5a:df:e8:be:db:14:ea:57:61:60:d6:ce:ab:3d:24:0f:d7:83:
         1b:99:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:04:49 2025 by rpki-client