Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
File:                     bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa (raw, json)
Hash identifier:          BKZ1Xou0bCZyQVSom5Wxvam29GeuWkwIqLo1n07hL9s=
Subject key identifier:   25:3B:3A:53:61:69:BC:4E:56:84:9E:28:8A:0F:8C:09:C5:AA:4A:57
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F43285849E4EFB04E797AEB06F7D8E100
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     398849
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:b0:4e:79:7a:eb:06:f7:d8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=ab2beb62-d1df-4765-bbeb-a55959c4e622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:15:c0:74:0d:e0:44:ee:57:be:e4:64:08:
                    f0:af:5d:5b:f5:69:6e:be:44:21:0c:5c:fa:59:a9:
                    74:de:3d:00:9f:58:5b:2f:7f:83:3e:1d:32:c0:45:
                    36:86:d1:f4:79:ea:f5:b3:de:e0:b3:e3:f8:d5:a9:
                    6b:09:ad:e5:49:85:a8:05:cb:c6:02:b5:3e:2c:05:
                    c2:7a:4d:ce:37:d0:82:d7:cf:0b:63:25:77:6c:d4:
                    61:7f:a0:63:9b:0e:75:be:3b:7e:35:88:01:5b:24:
                    ca:82:88:33:d6:88:f1:de:5c:21:b4:eb:1a:ff:98:
                    ba:7a:68:1e:91:58:49:07:5f:28:49:18:25:09:d6:
                    21:26:d3:59:e8:f5:17:fc:48:fc:b9:c1:ad:65:cb:
                    60:28:b5:4d:9b:93:6a:b7:26:b5:56:8d:66:e3:25:
                    5c:aa:af:9e:82:76:0a:48:d4:c7:14:40:a7:51:cd:
                    be:8d:b1:84:c3:ee:85:6e:18:b9:28:59:61:a3:08:
                    9f:80:7a:85:c1:c8:6d:50:21:c8:a8:5f:56:56:f9:
                    b9:16:1d:76:ef:06:bb:40:70:af:43:52:c8:1e:7b:
                    fd:2d:35:25:91:5b:dd:d6:bb:fe:5a:12:0f:1b:88:
                    e5:e3:79:47:cb:93:f8:27:95:84:33:1c:2b:b2:79:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:3A:53:61:69:BC:4E:56:84:9E:28:8A:0F:8C:09:C5:AA:4A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:c8:08:94:de:a8:10:47:87:f0:23:72:4c:9b:77:e5:e5:
         12:28:46:14:14:3a:d5:5a:04:b5:41:15:d9:d8:c7:10:f9:a7:
         d7:10:8f:d4:ae:36:63:f6:ac:a9:c9:64:17:f3:ed:ca:26:15:
         61:64:6d:df:d5:4b:76:56:41:8f:22:51:ba:60:d6:c3:1a:9a:
         18:6a:06:e9:7f:aa:2b:3a:af:05:db:3e:fd:38:c6:44:b0:89:
         a8:a2:d6:eb:71:29:99:cd:3f:e5:0e:19:8c:9b:31:26:74:33:
         b4:ac:a1:71:0b:e9:89:58:b3:28:3b:dc:6e:fa:bc:49:6f:22:
         7a:37:1a:a1:3d:0a:78:9a:f2:21:9d:00:cb:2a:d8:68:46:e9:
         12:23:54:41:70:33:21:68:6d:45:14:45:0f:ad:cb:c6:12:f2:
         83:11:c7:b5:63:a9:8d:4f:73:16:0f:a1:ca:02:35:41:44:17:
         ec:30:00:74:05:a6:9c:08:6e:6e:a0:ee:e1:ef:87:66:e1:37:
         7b:f7:12:d2:65:86:13:7b:82:8f:6e:6b:ad:71:05:e3:b0:4e:
         3f:d9:1f:c4:15:c0:3f:70:1c:2c:d4:77:28:df:a0:53:51:7d:
         43:8c:17:b6:dc:cd:6e:5a:60:13:52:e0:2d:40:f6:13:cf:d8:
         fc:e4:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:23 2025 by rpki-client