Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
File:                     33610651-6c06-37c0-bea7-21abb1c6f7a7.roa (raw, json)
Hash identifier:          m8xAK2f2ACLc3y8HJRYZRVxcy9LORyeHr466m+vkBmA=
Subject key identifier:   73:1D:6D:B9:D5:93:FC:A4:28:89:EC:A4:AE:4D:10:97:5C:25:85:7F
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584A411058A5545220E0F34FEB40
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     397702
IP address blocks:        2607:46c0:816::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:58:a5:54:52:20:e0:f3:4f:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=02f3fde9-2e00-468f-9304-857881efb82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d4:32:3c:0a:4e:fe:63:d8:b2:2d:0c:09:67:
                    15:d1:ed:7b:2f:86:b2:bb:dc:6a:53:0a:e5:87:03:
                    da:7b:67:14:3b:1c:3f:3d:e2:58:5a:af:d6:a4:5a:
                    d0:db:9e:bb:5e:ed:95:5e:78:ae:c1:bd:86:09:52:
                    b0:e3:9e:bf:ab:2c:c9:84:16:30:0a:89:77:10:9a:
                    e6:89:fe:62:1c:ec:98:e5:68:49:d4:f8:4c:bd:02:
                    bf:5e:43:2b:ed:cd:22:1a:f3:08:37:a4:69:fa:9b:
                    10:26:fc:e7:66:f0:6a:eb:ae:8a:f3:91:6f:74:d8:
                    11:c5:e6:36:f1:9e:23:b7:e1:00:d5:93:7e:e9:a6:
                    0a:dd:a5:f8:ed:de:fc:8c:d3:45:a2:4c:85:6c:3e:
                    29:c7:fb:fe:4c:b1:ab:e3:03:46:fe:46:1c:a7:f0:
                    11:64:f4:93:ea:46:31:b4:c0:c5:63:5f:00:08:69:
                    8a:1c:e0:d5:a9:00:7c:e8:8d:83:c4:40:04:df:c6:
                    9b:9a:a9:9b:ef:67:25:10:3e:d5:a1:01:33:b7:8a:
                    1d:43:56:89:8c:62:62:a8:26:f1:eb:93:d1:1b:a4:
                    32:94:11:f7:98:39:9e:bd:04:ad:4f:6c:2a:b3:b8:
                    ca:12:62:52:f1:fc:54:a0:72:ab:07:88:dd:46:0b:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1D:6D:B9:D5:93:FC:A4:28:89:EC:A4:AE:4D:10:97:5C:25:85:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:816::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:7d:37:cf:a7:e8:91:3c:d7:a0:e1:51:4a:6b:b6:45:db:
         8c:29:fb:22:e3:e3:bb:2c:76:ba:b2:ed:d8:ef:3f:f1:1f:c7:
         bf:68:97:19:2e:67:24:60:6d:85:cb:0e:5a:33:31:06:c0:bc:
         c7:d7:73:4f:03:b0:c1:88:e3:f3:2a:c1:13:a0:3d:57:b0:c0:
         d3:b8:6e:4d:bc:91:db:1f:f4:c4:ad:a3:5a:79:5b:a0:7a:84:
         3f:e7:1e:92:66:2e:17:3d:9e:8a:83:a0:2c:54:3c:dc:5e:2e:
         96:ac:2d:e3:00:1a:7a:55:a2:a6:1f:cd:1c:14:da:95:b6:98:
         b1:2e:a8:88:c9:aa:40:aa:21:49:32:ff:01:23:ad:d1:3d:85:
         1b:f8:02:cb:9a:94:13:f9:51:1c:73:9e:94:53:98:01:cd:ef:
         f2:b2:63:f3:a6:99:e3:42:10:08:05:2f:12:c0:4e:c1:20:3a:
         1a:c0:72:9a:66:ea:4d:95:7e:8c:ba:b9:d4:e3:42:c9:37:da:
         4c:d1:b9:de:b6:59:b6:c9:83:31:77:5b:74:3b:91:c1:ae:70:
         19:fb:e6:f0:c4:34:b5:f0:dd:db:86:cd:49:a7:e5:8e:2b:fe:
         c3:db:f0:67:70:77:63:41:ce:b6:9e:3b:22:0a:cd:b9:43:59:
         02:f1:a0:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpBEFilVFIg4PNP60AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM4YmViN2EtNmE5OS00N2FkLWE4ZTctNTBiYjRkMjRi
NjY3MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
MDJmM2ZkZTktMmUwMC00NjhmLTkzMDQtODU3ODgxZWZiODJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9QyPApO/mPYsi0MCWcV0e17L4ayu9xqUwrl
hwPae2cUOxw/PeJYWq/WpFrQ2567Xu2VXniuwb2GCVKw456/qyzJhBYwCol3EJrm
if5iHOyY5WhJ1PhMvQK/XkMr7c0iGvMIN6Rp+psQJvznZvBq666K85FvdNgRxeY2
8Z4jt+EA1ZN+6aYK3aX47d78jNNFokyFbD4px/v+TLGr4wNG/kYcp/ARZPST6kYx
tMDFY18ACGmKHODVqQB86I2DxEAE38abmqmb72clED7VoQEzt4odQ1aJjGJiqCbx
65PRG6QylBH3mDmevQStT2wqs7jKEmJS8fxUoHKrB4jdRgtT6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHMdbbnVk/ykKInspK5NEJdcJYV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhi
ZWI3YS02YTk5LTQ3YWQtYThlNy01MGJiNGQyNGI2NjcvMzM2MTA2NTEtNmMwNi0z
N2MwLWJlYTctMjFhYmIxYzZmN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM4YmViN2EtNmE5OS00N2FkLWE4
ZTctNTBiYjRkMjRiNjY3LzEzOGJlYjdhLTZhOTktNDdhZC1hOGU3LTUwYmI0ZDI0
YjY2Ny5jcmwwHwYDVR0jBBgwFoAU/lnyjqs0eoqn1285r9OaMkb7l2EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzhiZWI3YS02YTk5LTQ3YWQtYThlNy01MGJi
NGQyNGI2NjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdGwAgW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA9SfTfPp+iRPNeg4VFKa7ZF24wp+yLj47ssdrqy7djvP/Efx79o
lxkuZyRgbYXLDlozMQbAvMfXc08DsMGI4/MqwROgPVewwNO4bk28kdsf9MSto1p5
W6B6hD/nHpJmLhc9noqDoCxUPNxeLpasLeMAGnpVoqYfzRwU2pW2mLEuqIjJqkCq
IUky/wEjrdE9hRv4AsualBP5URxznpRTmAHN7/KyY/OmmeNCEAgFLxLATsEgOhrA
cppm6k2Vfoy6udTjQsk32kzRud62WbbJgzF3W3Q7kcGucBn75vDENLXw3duGzUmn
5Y4r/sPb8Gdwd2NBzraeOyIKzblDWQLxoFw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 02:12:12 2025 by rpki-client