Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa
File:                     f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa (raw, json)
Hash identifier:          gSspn8zQxh3QjynA8O8NcckuMi8oYcDyo16ww50O7K0=
Subject key identifier:   0C:AF:4A:66:71:A0:7E:8A:9E:6C:EE:9F:BE:58:22:F4:F6:93:76:64
Certificate issuer:       /CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
Certificate serial:       010D0C9F43285849B57A124A7152DA4264B25CE0
Authority key identifier: C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     401167
IP address blocks:        2602:f8a1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:12:4a:71:52:da:42:64:b2:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908b5814-2031-4b54-b9e1-bc5eaacf8745
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=8e498fc1-e57a-49f8-9cc1-024877420fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:13:9a:c5:0f:e6:21:92:6c:83:ce:48:4c:
                    b0:37:6d:82:bf:64:66:2f:42:b7:a8:e9:cf:7e:79:
                    49:fb:fa:5d:08:de:ef:da:d9:63:60:b8:f1:bd:c5:
                    9a:0f:0b:5e:79:1b:8d:e7:04:d1:cc:5e:d5:bc:e4:
                    99:65:8d:a3:1e:82:65:17:e1:a8:3b:71:62:bf:2f:
                    75:72:8d:2a:10:ec:aa:69:f1:86:18:06:a9:fd:2a:
                    0b:13:be:bc:d1:53:d8:93:2a:3f:b2:c0:8c:8c:f0:
                    45:6b:40:48:b4:43:f7:3b:07:5d:05:53:36:33:bd:
                    3a:c6:72:53:b6:ab:8a:c0:01:62:0b:4b:d4:cd:52:
                    b8:bd:2c:0a:27:47:3a:77:fc:41:89:e3:0e:42:7c:
                    7c:42:fb:c0:4e:ec:73:c7:b4:12:d4:de:be:56:25:
                    57:10:8e:5c:6f:d5:ef:df:c0:a1:31:7d:1d:40:f2:
                    fd:9e:0d:7e:da:25:d2:a0:71:7e:5e:09:36:06:f3:
                    7b:79:f7:7d:74:95:c2:09:0e:08:7a:33:13:07:42:
                    37:3e:26:c0:a4:35:90:90:e9:2e:33:2c:aa:6e:42:
                    48:c5:5d:5f:47:64:92:9e:78:cf:60:2a:0b:70:37:
                    9b:fb:9a:94:3f:26:6d:7a:9d:47:c0:9f:f6:15:2d:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AF:4A:66:71:A0:7E:8A:9E:6C:EE:9F:BE:58:22:F4:F6:93:76:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/f137b2b7-e4a6-3cb1-b79b-c6cc3c7b4307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745/908b5814-2031-4b54-b9e1-bc5eaacf8745.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2D:23:07:FB:59:EE:C0:F9:36:6D:95:10:B0:DD:10:27:EB:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908b5814-2031-4b54-b9e1-bc5eaacf8745.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bd:0b:ff:74:c9:e9:ea:b7:c2:e6:11:e4:f2:b4:97:32:5a:
         a9:d1:90:e6:e6:fa:6a:a1:7e:67:60:df:d9:23:a5:2a:3e:ef:
         df:10:33:fb:b8:6a:74:71:54:45:55:82:94:1e:f7:6c:df:70:
         07:67:29:5b:3a:85:07:ae:a2:55:6b:3b:18:74:74:92:76:06:
         7d:05:92:14:9c:95:9c:ca:94:0a:1e:88:51:6b:db:08:c5:b5:
         e9:18:98:7d:78:16:06:60:2a:0d:4a:bf:5f:32:12:de:f8:e1:
         c1:49:96:7c:72:3c:fd:36:d1:c9:bf:8d:1e:a8:55:7e:f0:db:
         32:60:ee:43:e1:03:5e:52:73:0d:e5:cc:0e:17:fe:52:ee:6b:
         71:db:26:c5:81:e0:af:1f:aa:06:17:d3:b8:4a:91:ec:57:4a:
         e1:e5:42:4e:22:90:49:c0:fe:b1:e6:fc:dc:17:fa:c7:b1:47:
         67:aa:6d:47:81:03:45:27:09:c3:f9:47:57:fe:8d:80:61:6d:
         08:03:63:42:d9:47:6e:fc:a2:36:e1:84:77:db:87:0f:f9:48:
         8e:da:af:eb:ea:2b:c0:72:b8:2c:b4:0d:92:8d:b0:16:71:ee:
         0b:e3:b5:45:fd:e5:ec:6e:dd:05:56:92:61:cb:31:74:33:c2:
         0c:40:26:7f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEm1ehJKcVLaQmSyXOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4YjU4MTQtMjAzMS00YjU0LWI5ZTEtYmM1ZWFhY2Y4
NzQ1MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
OGU0OThmYzEtZTU3YS00OWY4LTljYzEtMDI0ODc3NDIwZmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2QTmsUP5iGSbIPOSEywN22Cv2RmL0K3qOnP
fnlJ+/pdCN7v2tljYLjxvcWaDwteeRuN5wTRzF7VvOSZZY2jHoJlF+GoO3Fivy91
co0qEOyqafGGGAap/SoLE7680VPYkyo/ssCMjPBFa0BItEP3OwddBVM2M706xnJT
tquKwAFiC0vUzVK4vSwKJ0c6d/xBieMOQnx8QvvATuxzx7QS1N6+ViVXEI5cb9Xv
38ChMX0dQPL9ng1+2iXSoHF+Xgk2BvN7efd9dJXCCQ4IejMTB0I3PibApDWQkOku
MyyqbkJIxV1fR2SSnnjPYCoLcDeb+5qUPyZtep1HwJ/2FS2W5QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAyvSmZxoH6Knmzun75YIvT2k3ZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDhi
NTgxNC0yMDMxLTRiNTQtYjllMS1iYzVlYWFjZjg3NDUvZjEzN2IyYjctZTRhNi0z
Y2IxLWI3OWItYzZjYzNjN2I0MzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4YjU4MTQtMjAzMS00YjU0LWI5
ZTEtYmM1ZWFhY2Y4NzQ1LzkwOGI1ODE0LTIwMzEtNGI1NC1iOWUxLWJjNWVhYWNm
ODc0NS5jcmwwHwYDVR0jBBgwFoAUxy0jB/tZ7sD5Nm2VELDdECfr/HwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDhiNTgxNC0yMDMxLTRiNTQtYjllMS1iYzVl
YWFjZjg3NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4oQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAWr0L/3TJ6eq3wuYR5PK0lzJaqdGQ5ub6aqF+Z2Df2SOlKj7v3xAz
+7hqdHFURVWClB73bN9wB2cpWzqFB66iVWs7GHR0knYGfQWSFJyVnMqUCh6IUWvb
CMW16RiYfXgWBmAqDUq/XzIS3vjhwUmWfHI8/TbRyb+NHqhVfvDbMmDuQ+EDXlJz
DeXMDhf+Uu5rcdsmxYHgrx+qBhfTuEqR7FdK4eVCTiKQScD+seb83Bf6x7FHZ6pt
R4EDRScJw/lHV/6NgGFtCANjQtlHbvyiNuGEd9uHD/lIjtqv6+orwHK4LLQNko2w
FnHuC+O1Rf3l7G7dBVaSYcsxdDPCDEAmfw==
-----END CERTIFICATE-----
Generated at Fri May 9 14:59:17 2025 by rpki-client