Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac96905d-44bc-346e-b719-d36dd8be21f8.roa
File:                     ac96905d-44bc-346e-b719-d36dd8be21f8.roa (raw, json)
Hash identifier:          X4R1F6EYVqVHxdQ4TvVBJ28T2eK+GEMzSjf1UUN2WGc=
Subject key identifier:   02:1B:DD:5E:93:38:85:CB:D6:5F:33:AA:6E:73:CF:4C:8E:BA:05:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AF95152A0ED398FC334C06100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac96905d-44bc-346e-b719-d36dd8be21f8.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     210805
IP address blocks:        2001:470:2f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:52:a0:ed:39:8f:c3:34:c0:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=19c8edcb-9995-4ec6-b8de-4e22a104ca0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:b5:ec:78:d4:86:0c:22:b4:d5:87:67:46:
                    56:7e:5f:0e:2e:b1:2e:57:c2:2d:e8:5e:57:ff:22:
                    7d:dd:3b:87:69:2d:02:b2:cd:2c:3f:d2:32:e9:36:
                    74:9e:2f:52:59:6d:08:27:f2:79:75:67:d2:3e:72:
                    35:42:9a:a4:f8:c9:7a:ab:d0:05:6f:62:b6:e5:ae:
                    79:9f:fd:f7:c4:ee:bb:a0:3d:7c:5a:59:6b:9d:ee:
                    5c:ae:30:a2:56:ca:90:a4:ed:d6:df:88:1f:20:67:
                    a8:a9:43:e9:c5:5e:2c:9b:cb:ef:76:03:57:bf:8f:
                    19:d3:b8:60:5c:74:34:3b:6c:b8:35:38:70:a4:2a:
                    7e:37:38:1d:55:ac:16:29:d3:1d:bd:33:1f:1f:e3:
                    2e:10:be:ea:5e:e0:0a:f6:2b:7c:03:af:d3:6e:08:
                    62:f1:38:6a:1e:bb:67:a4:c5:84:bf:29:63:ac:b2:
                    a6:a9:83:97:bc:22:d3:c3:9f:99:2f:ad:94:bb:7f:
                    89:6d:41:5d:11:ec:9f:6a:fc:6f:a5:86:3a:7f:f1:
                    e5:e7:44:2c:1a:71:2f:0b:c2:ed:be:ec:a3:ef:3c:
                    ca:49:51:4e:28:2b:aa:1e:0e:c0:0a:22:f0:f1:11:
                    c1:77:6d:c2:b4:77:80:57:59:3c:52:8b:78:b8:c9:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1B:DD:5E:93:38:85:CB:D6:5F:33:AA:6E:73:CF:4C:8E:BA:05:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac96905d-44bc-346e-b719-d36dd8be21f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fe:6b:9a:35:9a:7e:2c:8d:e3:5f:25:b4:6f:af:b7:09:1c:
         5e:9b:4f:e6:c4:03:b7:28:61:61:a4:3e:d1:7a:d8:bd:86:cc:
         fb:c8:3c:d8:b1:5f:f4:6b:24:48:af:d9:50:05:22:c2:7b:ac:
         19:87:f6:d0:b6:d8:b6:8e:42:1d:34:f3:3f:46:a7:7e:e2:43:
         d2:da:f8:c7:c4:e8:1f:dc:93:94:34:9c:4d:a7:eb:ee:94:70:
         38:43:19:4c:c1:7d:73:57:44:a5:80:65:b9:c8:2d:08:de:ec:
         63:eb:d9:47:15:aa:53:5e:ff:f3:90:cd:c2:9c:42:0d:77:24:
         7d:a9:01:5a:e6:25:1c:cb:d2:42:8d:91:92:a6:88:fb:dd:93:
         1d:bf:d0:94:60:be:c1:61:31:63:e1:96:b1:4d:8f:ad:e3:31:
         a7:25:06:72:59:0c:d9:80:d3:5b:f8:bc:82:ef:77:d3:39:86:
         ab:64:c1:58:a6:8a:e8:49:c5:1d:de:ac:fe:5a:25:40:93:d6:
         89:4b:5b:22:5f:39:99:d5:a6:e6:95:26:69:2b:5f:6c:34:30:
         ad:86:c7:29:3b:49:ff:3e:58:68:57:2b:5f:c2:e9:54:3a:81:
         3b:c4:d4:7a:a7:2c:73:d3:68:97:e0:85:c9:b7:f1:bc:69:1b:
         c8:4b:0a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:31:35 2025 by rpki-client