Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/15087f49-94d6-35c4-92cb-f16f73f684a1.roa
File:                     15087f49-94d6-35c4-92cb-f16f73f684a1.roa (raw, json)
Hash identifier:          dlFM2JaWS0NuSEETBLc4R9DiG8z5Crg5GxVRAI5GepY=
Subject key identifier:   7C:D5:02:17:C9:6B:19:D6:A9:C7:C6:9A:98:B4:D2:8C:4C:7B:B8:79
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F432858499DBF301C04F937CEEEC1FF80
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/15087f49-94d6-35c4-92cb-f16f73f684a1.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     397702
IP address blocks:        2607:46c0:380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:30:1c:04:f9:37:ce:ee:c1:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=8ee6243c-5a8a-4713-a45e-3456ff7b038e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:08:13:59:81:7c:6a:86:13:91:ec:e4:4c:
                    9c:b8:3d:4c:98:6d:77:e9:99:c1:03:c5:11:0f:c3:
                    21:65:11:17:25:a6:fe:1a:8d:50:fa:1c:67:83:bc:
                    34:62:aa:d6:60:e3:a3:bd:4a:f2:75:4b:88:e3:1c:
                    42:d7:d7:bf:ce:d1:e9:38:e3:a2:60:2c:c1:7c:b5:
                    95:74:e2:c5:be:f5:da:a7:38:c6:c9:c1:05:6e:61:
                    99:4b:36:cd:22:c5:48:e0:a2:e3:10:3b:e5:67:0c:
                    91:c0:6e:cc:29:cd:54:ea:dc:f1:ea:89:1f:be:de:
                    a3:95:e9:50:f0:3b:bc:de:de:4d:0f:c3:ad:11:94:
                    5b:57:25:c7:ac:82:67:75:e4:52:20:4b:a3:82:52:
                    ab:39:93:c2:20:84:97:2c:b2:d6:fc:e2:4d:cf:8d:
                    3f:0f:fd:15:0b:dc:69:68:d7:49:01:4c:e4:c0:6a:
                    95:f9:b2:9c:7f:3a:f0:78:69:6e:95:32:8e:18:cd:
                    c7:d6:ee:e3:f4:8f:cb:c3:51:e0:14:48:64:b5:83:
                    6f:ac:2b:75:11:66:9e:18:40:ee:8c:b9:12:b5:f4:
                    25:09:be:e9:ab:6c:aa:7d:ac:18:a5:8d:f4:ea:e7:
                    1f:66:ef:ae:40:79:10:40:b4:94:63:3d:53:0f:53:
                    a4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D5:02:17:C9:6B:19:D6:A9:C7:C6:9A:98:B4:D2:8C:4C:7B:B8:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/15087f49-94d6-35c4-92cb-f16f73f684a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:380::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:8b:db:c5:ef:24:ff:92:19:70:9d:45:2d:12:7a:e5:aa:
         99:c1:cd:72:46:bb:07:84:a2:2d:ef:73:c2:d0:c0:a6:cf:ff:
         73:19:18:ff:b1:95:1d:86:66:0b:84:e3:63:74:3f:21:fd:ea:
         97:61:38:78:b4:46:08:e8:b1:75:80:b2:5f:9f:ba:9a:39:2a:
         83:0d:b3:b1:28:aa:0c:b0:e5:1b:ab:76:cf:00:18:5f:f1:ec:
         97:b7:c4:79:64:1d:5a:24:b5:b7:b4:45:9f:98:77:06:4b:fd:
         09:55:3f:35:ee:e7:3b:35:6c:55:ce:e6:c9:3c:c4:6a:f3:01:
         2f:ff:04:ed:3b:82:0e:23:66:d6:cc:90:4e:1a:fa:6b:a5:18:
         43:53:6d:ac:71:3d:93:81:8d:7d:cd:4c:6b:7b:f1:76:a1:e4:
         a9:2f:19:ed:bb:6b:96:4a:e7:94:c0:9d:41:f6:4d:d7:89:0f:
         21:7d:02:70:8a:be:aa:fb:6d:0e:1e:0e:fe:ec:2e:fe:19:4c:
         61:0e:e7:6f:d1:12:2b:0f:f5:8c:26:f5:9f:62:07:f8:d8:f5:
         a0:39:74:cb:b6:7c:f8:99:b2:ac:6c:57:51:c6:ed:3a:57:47:
         c8:2a:dd:72:31:3e:b5:04:e7:28:19:d6:c0:e9:1d:35:ce:a4:
         38:1e:a4:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmdvzAcBPk3zu7B/4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM4YmViN2EtNmE5OS00N2FkLWE4ZTctNTBiYjRkMjRi
NjY3MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk
OGVlNjI0M2MtNWE4YS00NzEzLWE0NWUtMzQ1NmZmN2IwMzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU4IE1mBfGqGE5Hs5EycuD1MmG136ZnBA8UR
D8MhZREXJab+Go1Q+hxng7w0YqrWYOOjvUrydUuI4xxC19e/ztHpOOOiYCzBfLWV
dOLFvvXapzjGycEFbmGZSzbNIsVI4KLjEDvlZwyRwG7MKc1U6tzx6okfvt6jlelQ
8Du83t5ND8OtEZRbVyXHrIJndeRSIEujglKrOZPCIISXLLLW/OJNz40/D/0VC9xp
aNdJAUzkwGqV+bKcfzrweGlulTKOGM3H1u7j9I/Lw1HgFEhktYNvrCt1EWaeGEDu
jLkStfQlCb7pq2yqfawYpY306ucfZu+uQHkQQLSUYz1TD1OkSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHzVAhfJaxnWqcfGmpi00oxMe7h5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhi
ZWI3YS02YTk5LTQ3YWQtYThlNy01MGJiNGQyNGI2NjcvMTUwODdmNDktOTRkNi0z
NWM0LTkyY2ItZjE2ZjczZjY4NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4YmViN2EtNmE5OS00N2FkLWE4
ZTctNTBiYjRkMjRiNjY3LzEzOGJlYjdhLTZhOTktNDdhZC1hOGU3LTUwYmI0ZDI0
YjY2Ny5jcmwwHwYDVR0jBBgwFoAU/lnyjqs0eoqn1285r9OaMkb7l2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhiZWI3YS02YTk5LTQ3YWQtYThlNy01MGJi
NGQyNGI2NjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdGwAOA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIe7i9vF7yT/khlwnUUtEnrlqpnBzXJGuweEoi3vc8LQwKbP/3MZ
GP+xlR2GZguE42N0PyH96pdhOHi0RgjosXWAsl+fupo5KoMNs7Eoqgyw5Rurds8A
GF/x7Je3xHlkHVoktbe0RZ+YdwZL/QlVPzXu5zs1bFXO5sk8xGrzAS//BO07gg4j
ZtbMkE4a+mulGENTbaxxPZOBjX3NTGt78Xah5KkvGe27a5ZK55TAnUH2TdeJDyF9
AnCKvqr7bQ4eDv7sLv4ZTGEO52/REisP9Ywm9Z9iB/jY9aA5dMu2fPiZsqxsV1HG
7TpXR8gq3XIxPrUE5ygZ1sDpHTXOpDgepFg=
-----END CERTIFICATE-----
Generated at Mon May 5 11:17:12 2025 by rpki-client