Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb5b7956-0206-30ba-9614-caa670f6548c.roa
File:                     bb5b7956-0206-30ba-9614-caa670f6548c.roa (raw, json)
Hash identifier:          grA65noGlbXXgsB6ylZJ6PWetNumPLM0oY3A0DrlL40=
Subject key identifier:   54:9B:0F:25:84:D0:66:EA:64:64:7A:AA:D6:53:96:F9:3C:EB:4F:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A9379E106FCD34A3B85857160
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb5b7956-0206-30ba-9614-caa670f6548c.roa
Signing time:             Sun 20 Jul 2025 01:30:10 +0000
ROA not before:           Sun 20 Jul 2025 01:30:10 +0000
ROA not after:            Sat 18 Oct 2025 01:30:10 +0000
asID:                     150178
IP address blocks:        2001:470:493::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:79:e1:06:fc:d3:4a:3b:85:85:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 20 01:30:10 2025 GMT
            Not After : Oct 18 01:30:10 2025 GMT
        Subject: CN=6607bddc-313d-4286-bf68-49e965d72dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:dc:8b:da:e1:89:3f:6f:c7:47:0f:31:8c:
                    3d:0a:9b:24:6b:b7:a8:60:dc:de:d8:ef:7a:6c:e0:
                    35:e3:46:7b:22:41:6b:53:75:d2:ea:bf:44:87:96:
                    2e:b9:f8:4b:b9:69:e3:52:10:31:e2:e4:9a:89:a5:
                    f9:a1:09:8d:26:dc:01:55:9e:99:3b:a2:2f:a3:14:
                    08:1a:64:91:f3:8a:94:08:ac:42:fb:db:e4:65:6c:
                    19:d5:37:bd:e4:d7:5e:fb:16:4a:fe:38:d9:e5:86:
                    45:77:f8:64:c7:15:af:c8:bf:0d:27:93:42:a6:73:
                    9b:f1:9f:4a:9d:22:ad:8a:ae:61:4a:9b:cc:df:0e:
                    d8:18:f5:8c:cc:e1:09:72:9c:ba:80:20:65:fe:ac:
                    da:46:58:a9:a6:54:3b:18:37:fd:9d:0a:df:88:e5:
                    1f:fa:42:95:3c:a4:d6:5e:a1:b0:71:a0:57:17:5b:
                    89:cd:54:e5:18:5d:fa:5a:d8:01:b5:64:47:82:d9:
                    66:e0:c3:85:3c:c9:bb:8c:0a:cd:1e:b2:0e:d1:c8:
                    9f:2d:be:02:16:ff:c3:a4:66:20:cd:a8:78:77:35:
                    91:75:e9:c4:fc:6f:e9:24:fa:97:ab:51:37:7f:f6:
                    51:42:e9:bd:b3:bd:6c:bb:1f:a6:59:9c:6e:4f:ab:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:0F:25:84:D0:66:EA:64:64:7A:AA:D6:53:96:F9:3C:EB:4F:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb5b7956-0206-30ba-9614-caa670f6548c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:493::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a2:8b:ee:ef:92:b0:eb:8c:fb:49:cb:65:0d:89:28:66:80:
         24:26:60:7e:73:63:e5:20:9f:38:29:6c:32:46:a2:aa:b9:df:
         8c:03:dd:1a:40:1d:bb:7e:21:a3:81:44:1b:f2:88:27:12:20:
         56:f1:77:b6:8d:72:8b:86:af:9c:25:b1:01:f9:55:12:38:88:
         4d:03:34:2f:42:3a:e3:8f:73:f8:45:df:40:0b:cf:23:ed:00:
         21:58:0d:86:ea:1c:18:a4:21:fa:50:31:f3:66:10:26:0e:4b:
         9d:c0:ee:ac:9d:29:8f:f4:8e:3f:02:e8:03:13:57:5b:67:4b:
         ee:69:51:88:d9:1b:72:b2:d4:5d:74:ed:e9:34:14:21:fe:d4:
         d5:c2:f9:c1:44:14:55:dd:09:c6:a7:09:7e:e4:c1:0f:f8:9d:
         0e:f2:20:c0:97:0e:5c:d8:40:8e:dc:0a:6a:8c:fc:d8:92:e3:
         04:39:05:b5:30:f7:da:07:b3:ab:db:46:be:0a:1f:73:15:ee:
         26:3f:0b:d7:88:b7:ed:2d:53:fc:d2:2f:22:a5:ff:bc:5f:a0:
         d2:4b:9c:d0:59:2a:16:74:fe:44:65:0a:fc:7a:14:e1:32:c6:
         9b:05:74:b4:60:da:78:1a:3c:15:36:29:cc:3d:4f:a6:30:82:
         4d:9b:93:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:12:06 2025 by rpki-client