Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
File:                     bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa (raw, json)
Hash identifier:          Tb7NqAMyeif03/tM+NySSCn/j4EwNq/Hsf8ZBlassq0=
Subject key identifier:   0F:F0:CC:5D:7A:92:52:58:BC:5E:E0:BE:A5:C3:42:29:DC:0A:5E:E1
Certificate issuer:       /CN=51ca7155-bca1-46e1-9945-f2519df32314
Certificate serial:       010D0C9F4328584AC5AB81D6571FEDCFCCD29140
Authority key identifier: F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     398849
IP address blocks:        2620:138:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:81:d6:57:1f:ed:cf:cc:d2:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ca7155-bca1-46e1-9945-f2519df32314
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=763a3c69-7be0-49a7-b5ec-4aaaac1c3226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:98:99:12:38:9c:4b:e7:b1:f1:78:3e:c3:
                    0a:dd:f9:74:40:c8:ac:9f:36:9a:27:cf:20:55:9e:
                    16:4b:26:74:95:e3:15:61:d6:53:12:52:63:e3:99:
                    43:08:95:b1:b2:78:bc:ce:ef:20:36:0f:6d:1a:49:
                    2c:70:6e:0e:a0:cd:83:56:c0:17:12:2a:e0:ba:13:
                    5b:a4:bf:76:e6:a2:90:05:72:7b:0d:27:24:a9:5c:
                    17:48:9d:d0:11:b5:01:0f:5d:3b:34:f0:3d:21:84:
                    50:19:45:6a:71:0c:5b:b5:08:5f:51:af:8b:0a:5a:
                    e6:16:0e:d9:c2:88:e7:80:88:62:ac:ac:b3:eb:c1:
                    71:61:f2:35:ec:8b:6f:1b:c2:42:86:d6:75:16:99:
                    3f:27:4b:da:9a:ea:94:03:f7:1a:28:38:18:51:48:
                    8a:1c:3a:db:d8:b2:db:bc:4a:6f:23:7c:35:fa:30:
                    de:0f:6e:fb:55:a9:cd:6c:d9:b8:15:48:d6:80:09:
                    09:e9:77:1b:a3:e9:7f:45:bb:1c:6c:49:41:99:e7:
                    08:73:1d:9b:6f:97:ec:fd:dd:cc:fb:43:9c:dc:59:
                    17:f1:88:cd:80:d3:a0:84:6a:be:91:c7:f2:34:97:
                    0c:d3:8c:04:b2:97:1f:00:87:d2:00:d5:b7:a7:0c:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:CC:5D:7A:92:52:58:BC:5E:E0:BE:A5:C3:42:29:DC:0A:5E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/bbe3289d-8815-3fe6-bbf5-4fcce3f0559e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314/51ca7155-bca1-46e1-9945-f2519df32314.crl

            X509v3 Authority Key Identifier:
                keyid:F3:08:C6:8C:84:9C:D2:1D:4A:1D:D2:30:0A:69:9C:8D:8F:82:AB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51ca7155-bca1-46e1-9945-f2519df32314.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:138:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:35:d0:14:98:32:9e:20:ef:f3:80:7b:57:b0:f8:fb:07:b3:
         0e:33:9a:99:70:1a:a7:e2:58:fc:5e:b0:b7:27:63:4b:36:78:
         6b:43:6e:0d:1c:83:25:2f:e3:6f:dd:e8:00:12:5c:57:10:41:
         e6:a8:38:7c:22:34:9b:94:30:ee:8b:e0:a5:c2:cf:7e:f7:f1:
         fd:84:16:4b:3b:f9:e7:94:c3:d3:88:10:59:23:5e:dc:02:6c:
         c8:c2:70:69:8c:8c:bf:0b:60:7c:1a:4f:e5:21:51:97:48:2c:
         75:d9:b2:e9:97:15:86:c6:09:7e:07:44:9c:b3:1c:28:b7:fc:
         12:42:c8:6c:90:c0:76:b3:3e:0e:5a:17:3e:21:33:5c:c3:00:
         9b:97:96:12:8b:d4:5d:ff:5d:84:7b:38:85:4f:18:f3:18:11:
         30:d5:dd:c1:d0:af:cc:28:07:81:38:ac:99:83:cd:56:7a:a7:
         56:b9:66:79:3d:03:7d:d5:db:4a:75:a3:92:9a:fe:34:ee:9e:
         21:72:95:14:ba:7a:68:f9:76:f7:c0:c8:21:3f:77:fe:9d:26:
         b6:4b:77:a5:e8:c7:61:c4:ab:9f:36:9d:99:54:fc:5d:55:7f:
         55:23:75:da:15:6d:62:b6:31:35:46:f3:c6:db:61:85:ea:e2:
         26:09:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:48 2025 by rpki-client