Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
File:                     33610651-6c06-37c0-bea7-21abb1c6f7a7.roa (raw, json)
Hash identifier:          n12BeIcB+EpGl7QxFktBZggSSlbVPKbjPSHkPc6lZpc=
Subject key identifier:   BA:06:31:F3:97:E5:01:3E:B6:D8:AC:19:05:1C:63:AF:16:A7:9D:E5
Certificate issuer:       /CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
Certificate serial:       010D0C9F4328584961B998C7BD911E5C06028C40
Authority key identifier: FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     397702
IP address blocks:        2607:46c0:816::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:98:c7:bd:91:1e:5c:06:02:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=b995e876-38f6-4f74-97be-80204894ac0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:7e:c3:7d:0d:ee:d5:03:a2:1e:81:31:23:
                    5e:26:bc:4d:84:47:78:95:d3:cc:56:7a:1b:ef:75:
                    a3:68:4e:05:44:c9:29:40:15:bb:82:ec:bc:f2:80:
                    91:96:ba:41:34:65:06:9a:77:ec:54:2b:15:ea:ba:
                    01:77:62:8c:f3:0c:70:3a:c3:d4:3c:3e:17:1f:fc:
                    94:dc:bd:ba:27:63:54:22:d1:55:94:ae:91:dd:57:
                    03:9f:04:53:1b:37:f7:9e:3b:45:51:22:d8:48:7b:
                    b6:e5:08:f2:5e:fc:0e:1c:cc:b7:e4:f4:f1:52:7b:
                    ae:cc:e7:f6:42:13:f3:34:51:52:91:79:c6:15:4f:
                    6c:e0:70:7e:01:d1:71:4b:f4:1b:c5:1d:05:0e:3e:
                    6d:c5:26:45:bf:15:2e:5d:a3:ad:aa:4f:69:6c:f3:
                    92:4d:2e:08:a1:39:b1:01:23:f7:3e:30:01:44:8a:
                    57:ea:bc:4f:ed:9d:2d:b4:3f:b3:ae:b4:7a:5a:a0:
                    fe:33:a7:6f:f9:30:ec:62:ac:03:fe:bf:97:c9:78:
                    a3:ec:e3:d6:bb:4a:aa:21:e3:e7:69:e4:d7:f1:62:
                    1a:87:e3:39:73:11:fd:7a:22:20:23:77:63:ad:ef:
                    1f:2c:15:43:8e:b6:19:fc:1e:1e:d6:f7:ce:76:1f:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:31:F3:97:E5:01:3E:B6:D8:AC:19:05:1C:63:AF:16:A7:9D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/33610651-6c06-37c0-bea7-21abb1c6f7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.crl

            X509v3 Authority Key Identifier:
                keyid:FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:46c0:816::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:56:a5:2d:d4:f1:67:94:5f:28:83:52:57:88:2d:bc:a3:56:
         4f:b8:1e:f2:9d:7c:de:7c:01:89:22:91:41:a2:78:37:b6:bb:
         61:69:cd:20:d7:f9:00:c2:45:30:d9:3f:1d:e9:5a:48:8b:88:
         c3:1d:97:89:a5:5e:76:5c:75:9f:68:8e:57:5b:c0:08:ff:06:
         69:d9:02:bc:b2:c2:4c:db:61:4b:a8:b6:2f:6b:b5:60:70:82:
         4b:ec:3c:13:96:a6:fa:c8:2d:04:7a:dc:aa:9f:e6:60:a0:bb:
         bd:59:df:aa:c9:31:29:85:b4:af:53:97:d6:c8:4e:65:1f:dc:
         15:79:26:ba:3d:a2:37:2d:bc:9e:8d:6d:64:a2:c5:d3:42:8f:
         7b:d2:02:d8:cd:87:da:ae:a0:77:34:81:29:3d:5b:10:ea:f7:
         81:e3:c5:b6:6c:7b:ba:53:c9:c1:f6:2b:4d:a4:89:28:cc:9d:
         5c:9b:04:89:f2:84:79:45:5f:cf:3c:9b:3e:65:7c:6f:f5:f7:
         21:b0:11:93:89:7e:d0:3e:8e:e5:26:e5:02:8c:09:9b:d1:65:
         ac:12:68:3f:5d:44:fe:49:74:44:cd:4a:81:eb:88:75:09:2b:
         f3:8b:4d:30:87:91:b4:67:23:cf:49:9f:2b:ea:25:e0:79:11:
         17:7f:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:48:24 2025 by rpki-client