Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beedfa2-5ba9-39e1-b96f-27b172b04ccd.roa
File:                     8beedfa2-5ba9-39e1-b96f-27b172b04ccd.roa (raw, json)
Hash identifier:          0qaWcT12QOSNWQwIe7MoYliwPobYxJlXK37V3LTAx3Y=
Subject key identifier:   1E:AD:4D:2A:16:D3:0A:77:FD:1E:67:6A:CA:5D:6C:46:06:0C:3D:82
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7ECAC8A18A47FD4FF3FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beedfa2-5ba9-39e1-b96f-27b172b04ccd.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54746
IP address blocks:        2001:470:195::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ec:ac:8a:18:a4:7f:d4:ff:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f2678b3e-5449-4303-bdf7-19bea683a39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:0a:25:cb:2d:f6:8c:78:41:03:c8:f6:93:
                    66:10:0a:1b:91:a3:71:0a:0b:a5:52:10:57:50:ee:
                    60:38:c2:97:0b:31:a7:a5:27:e7:c8:bc:a7:d6:c8:
                    cb:c0:95:af:94:b4:36:65:0d:46:3d:24:8c:53:ad:
                    5f:67:fd:03:f4:13:bf:fc:44:8f:6d:69:ed:9f:17:
                    21:2f:2e:9b:e5:ba:04:8b:75:38:75:bd:c8:e4:8d:
                    61:41:53:05:8e:63:6d:2a:96:88:66:8f:43:80:da:
                    6f:84:ab:e5:b7:86:76:ad:8a:da:41:3b:77:fe:0e:
                    2b:de:c8:21:fe:a0:da:14:2b:b7:75:15:d6:1d:74:
                    2e:41:e3:b7:66:d5:1a:e9:f1:cf:a7:fe:a4:42:9c:
                    9e:43:36:11:62:24:f0:2d:29:99:20:b2:8e:eb:e5:
                    f9:96:77:73:b3:a0:bf:56:cb:f3:e5:9a:a2:48:26:
                    15:84:96:0c:ea:f2:33:20:6f:ee:58:4f:93:f9:23:
                    25:92:d0:af:e2:23:80:8c:f7:b7:fd:0b:30:0d:a1:
                    92:8b:04:f1:55:e7:ed:9e:15:9e:73:94:04:ab:28:
                    9e:be:9a:63:f2:b9:2e:41:04:46:94:da:3d:a2:cf:
                    0d:e5:bf:de:24:f7:a4:0e:db:f9:a2:28:97:51:33:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AD:4D:2A:16:D3:0A:77:FD:1E:67:6A:CA:5D:6C:46:06:0C:3D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beedfa2-5ba9-39e1-b96f-27b172b04ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:195::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ac:ba:b1:91:98:38:6c:72:9a:fe:2c:12:2f:72:b5:8c:a9:
         77:1c:f3:74:3f:c3:27:7b:b1:b3:2e:57:87:bf:85:34:41:a4:
         80:a3:da:66:95:09:d7:7a:d0:9f:d0:ac:63:d6:f2:ef:65:b8:
         d1:35:60:f0:72:39:e6:15:d7:ff:bd:8b:fb:ec:0d:e2:6a:06:
         b8:43:38:38:81:ce:12:18:30:a7:76:83:46:b7:e3:79:87:d2:
         1f:43:ea:e4:d2:5e:2d:38:87:3a:40:21:c4:a0:63:bf:41:73:
         6f:8a:30:ed:12:02:9f:e6:20:46:14:b0:d7:a7:59:88:19:1a:
         c7:d5:59:37:68:3d:c6:a1:47:f0:93:15:b1:77:2d:69:ea:94:
         5c:ab:5d:93:3e:0f:ec:53:e1:bf:96:e6:4a:3d:cf:88:2b:1f:
         5f:90:13:9e:5f:06:4f:c6:e8:10:8b:75:bc:9b:18:a4:56:b2:
         15:f6:21:da:57:8b:ad:9c:1d:8f:c5:35:ab:3d:87:00:63:0d:
         d8:4a:bb:1a:11:7a:57:60:7d:1c:3a:7e:e9:d6:2a:1a:b3:a8:
         1a:8a:65:f6:db:e4:76:b2:fc:b5:3f:5f:01:38:cf:8a:97:b3:
         6c:9e:c4:c6:7f:17:64:09:1c:d4:1f:26:7a:ac:30:cc:e0:57:
         02:8b:5b:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ1+ysihikf9T/P8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
ZjI2NzhiM2UtNTQ0OS00MzAzLWJkZjctMTliZWE2ODNhMzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo0KJcst9ox4QQPI9pNmEAobkaNxCgulUhBX
UO5gOMKXCzGnpSfnyLyn1sjLwJWvlLQ2ZQ1GPSSMU61fZ/0D9BO//ESPbWntnxch
Ly6b5boEi3U4db3I5I1hQVMFjmNtKpaIZo9DgNpvhKvlt4Z2rYraQTt3/g4r3sgh
/qDaFCu3dRXWHXQuQeO3ZtUa6fHPp/6kQpyeQzYRYiTwLSmZILKO6+X5lndzs6C/
Vsvz5ZqiSCYVhJYM6vIzIG/uWE+T+SMlktCv4iOAjPe3/QswDaGSiwTxVeftnhWe
c5QEqyievppj8rkuQQRGlNo9os8N5b/eJPekDtv5oiiXUTN/iwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB6tTSoW0wp3/R5naspdbEYGDD2CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGJlZWRmYTItNWJhOS0z
OWUxLWI5NmYtMjdiMTcyYjA0Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALWsurGRmDhscpr+LBIvcrWMqXcc83Q/wyd7sbMuV4e/hTRBpICj
2maVCdd60J/QrGPW8u9luNE1YPByOeYV1/+9i/vsDeJqBrhDODiBzhIYMKd2g0a3
43mH0h9D6uTSXi04hzpAIcSgY79Bc2+KMO0SAp/mIEYUsNenWYgZGsfVWTdoPcah
R/CTFbF3LWnqlFyrXZM+D+xT4b+W5ko9z4grH1+QE55fBk/G6BCLdbybGKRWshX2
IdpXi62cHY/FNas9hwBjDdhKuxoReldgfRw6funWKhqzqBqKZfbb5Hay/LU/XwE4
z4qXs2yexMZ/F2QJHNQfJnqsMMzgVwKLW1E=
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:09:31 2025 by rpki-client