Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa
File:                     bd0b562d-963b-3005-9a83-1a14e6529986.roa (raw, json)
Hash identifier:          wEk0fE1gjQ5/xJzaamLe5ZNa9UNNghIkfOEvPPGoe6Q=
Subject key identifier:   5E:09:71:79:21:6F:82:66:92:6F:32:77:7F:12:13:FF:82:B6:58:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584A46A5B2149D1859F375838BA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     54798
IP address blocks:        2001:470:3b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:b2:14:9d:18:59:f3:75:83:8b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=c9486454-af88-4b38-ba8a-b110f9424bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:a1:7a:db:aa:5b:ce:41:9f:1b:57:1c:ca:
                    e8:c9:c8:df:ad:bb:5f:1e:bd:41:15:98:0a:c4:18:
                    c6:51:9b:58:94:aa:c0:52:85:a2:39:87:1a:09:6a:
                    ad:9e:94:2a:16:e3:16:4b:72:f3:dd:53:28:b8:e3:
                    02:e3:11:18:b9:99:63:0b:cc:de:ac:16:3c:d3:63:
                    88:c0:3f:6f:52:e0:f1:73:a3:b9:ca:f9:64:86:37:
                    42:0f:92:03:0b:a9:89:49:53:b7:ad:94:7a:79:91:
                    25:a6:ab:94:0b:24:0b:83:79:3a:c1:ff:d0:32:78:
                    d2:fe:f7:f6:38:93:1f:6a:a4:b1:cd:12:72:ae:7a:
                    10:60:df:f9:f3:c6:b7:46:2d:fc:7a:b3:a0:10:2c:
                    d4:6e:d0:ca:4e:7f:50:3d:e9:c6:5f:cf:dd:88:11:
                    3b:a7:1a:d7:26:be:21:54:ca:93:82:2b:da:df:31:
                    f0:df:df:a4:43:0b:0c:b7:54:9a:5f:1a:76:88:f6:
                    8d:44:0c:2a:3b:1d:9a:8c:0c:cd:37:0f:8a:7c:e1:
                    b7:c5:ba:08:a5:d8:f4:56:e8:49:37:1f:18:95:ce:
                    da:f4:13:11:87:fb:49:02:f7:e7:53:fb:63:9b:5b:
                    05:ee:46:38:6e:f7:ab:eb:8d:0b:e5:cd:19:21:ea:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:09:71:79:21:6F:82:66:92:6F:32:77:7F:12:13:FF:82:B6:58:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bd0b562d-963b-3005-9a83-1a14e6529986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:76:fb:5b:50:b8:04:31:56:b5:48:c5:33:aa:01:19:c8:
         f4:c8:f1:22:62:2a:2e:eb:0b:d9:a1:8c:74:d9:30:88:6c:6b:
         f4:66:5d:ea:db:e3:8a:11:31:2a:5f:ea:4e:4f:d3:07:a1:86:
         ae:7e:f3:6b:e9:dc:64:79:e3:6e:ce:d1:7c:07:d4:07:58:3d:
         64:73:4d:7b:5b:e6:7a:09:40:36:4d:10:95:2a:03:61:da:f6:
         14:45:5c:a8:13:c8:41:b0:1e:a9:ce:9b:7f:f9:1c:10:ec:fb:
         5d:33:92:b5:f3:c8:7a:1b:82:d4:95:a8:90:4a:8d:e1:58:20:
         0a:66:5c:79:a6:1a:07:e8:07:0a:19:70:8c:09:3f:8d:6e:ab:
         34:e4:3c:f4:19:42:d8:c2:d6:92:2a:39:fc:ee:dd:42:10:48:
         cc:8f:b2:e8:f4:bf:1b:c0:a9:d8:fc:70:ba:9d:06:e6:84:39:
         fd:06:90:d3:3e:59:49:ba:42:8f:d1:69:ba:9f:1b:4e:7c:87:
         31:82:99:87:fe:a7:7d:b9:fb:ec:a8:d8:df:1e:d5:35:7c:fb:
         d6:2d:83:da:c7:e8:b0:ef:32:64:61:83:a1:25:6d:58:36:6f:
         25:01:38:c0:f7:06:41:cd:cf:1e:f9:76:dc:5f:80:c3:8d:82:
         9e:12:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:44:26 2025 by rpki-client