Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa
File:                     46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa (raw, json)
Hash identifier:          /Y6aOs8voTP1eQFeOFontTaRfQzm54A29EMf5vdrG6A=
Subject key identifier:   9B:D6:9F:EB:B0:AC:50:CA:55:ED:9B:4D:96:2F:F7:99:6A:29:48:FA
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584A382419397D01104E7E650D60
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa
Signing time:             Tue 17 Jun 2025 08:18:46 +0000
ROA not before:           Tue 17 Jun 2025 08:18:46 +0000
ROA not after:            Mon 15 Sep 2025 08:18:46 +0000
asID:                     26658
IP address blocks:        104.243.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:24:19:39:7d:01:10:4e:7e:65:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Jun 17 08:18:46 2025 GMT
            Not After : Sep 15 08:18:46 2025 GMT
        Subject: CN=768ce8e6-67ee-4810-a019-466fdbe07512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:e2:f0:00:9f:95:d8:57:fe:1c:7c:9e:d2:
                    60:39:5b:ac:9f:b6:16:32:aa:b9:ff:9c:73:2f:2a:
                    3e:8a:1b:2a:c1:18:77:89:5f:61:46:69:01:4d:be:
                    d0:c0:7d:02:27:4b:63:ae:da:e2:9a:bc:52:78:89:
                    d3:d6:d9:d7:8f:41:66:04:f6:a3:3a:8e:0e:ed:e5:
                    c8:e3:0a:ae:66:a6:0a:b7:45:0d:06:87:54:f4:be:
                    90:70:f8:8e:35:1f:da:5c:b8:bf:fb:13:6c:ff:0d:
                    b7:db:82:be:5f:92:21:4c:12:6a:fd:d9:d8:ed:66:
                    ed:9a:6c:aa:58:69:da:ca:c2:fe:2c:12:ea:c8:4d:
                    bb:c5:2c:f3:e3:dc:6b:c9:b7:fa:52:26:65:68:b7:
                    8e:61:f8:71:e0:73:c2:59:93:65:41:64:95:06:ab:
                    5b:a4:df:65:99:68:1c:50:cf:f8:27:e4:65:ed:e5:
                    27:36:d4:38:58:97:e6:73:eb:b2:c9:a5:53:f9:2b:
                    43:cd:5b:21:23:8d:98:80:aa:01:28:a8:1c:8a:c2:
                    2b:dd:ae:29:14:8e:c6:59:db:af:a6:63:cb:90:98:
                    87:fd:d1:74:34:25:8e:c7:dc:97:af:dc:80:a6:7c:
                    76:29:e9:a7:6a:a5:25:13:ec:40:da:1f:7d:6a:c4:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D6:9F:EB:B0:AC:50:CA:55:ED:9B:4D:96:2F:F7:99:6A:29:48:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/46cff164-e5e3-3ec5-83d0-2751e8d546f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:32:dd:52:8c:c8:f4:59:36:21:76:c6:db:a1:46:c6:54:64:
         72:66:2f:9b:76:5d:6f:dd:ba:57:ff:58:87:80:cb:af:f7:b2:
         71:42:00:13:f2:a6:e0:04:b3:21:fa:22:fe:32:d6:a7:4b:0a:
         eb:59:d6:b2:4e:06:7a:ce:27:d7:41:df:48:ad:f4:d6:78:8f:
         c4:24:98:63:e0:c3:2a:04:50:ae:bd:32:5b:8f:b6:17:ff:8e:
         49:c4:91:49:05:86:a9:f0:b4:aa:a6:2b:03:8a:1a:f0:c7:5c:
         ff:3e:31:71:29:5b:dc:ce:45:78:b3:b1:7d:8b:e0:dc:17:a7:
         f7:39:0d:b3:ce:80:ff:65:ed:3f:63:c1:88:17:11:aa:04:94:
         cf:1e:27:2b:2a:c7:c7:c3:c1:bb:a2:95:b1:b6:cd:61:db:61:
         99:2f:10:e3:3d:b4:b8:2d:db:fe:49:0b:57:06:5c:e8:78:91:
         70:ab:14:c7:dc:05:51:0b:49:d9:6c:ec:d6:af:27:6c:ba:8a:
         5c:35:16:0d:a1:df:21:4a:a5:aa:fc:19:b1:da:c6:5b:a7:de:
         1f:d9:9a:9c:5e:1d:28:37:59:b2:e6:de:2c:d3:51:27:41:0e:
         ba:33:0b:dd:df:c5:30:14:ab:17:40:71:a7:d4:4b:8f:9e:41:
         7a:cd:f5:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4JBk5fQEQTn5lDWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ2YTA5NmQtMTM0YS00YzUyLTkyNDMtZGEzOTgxODEw
MTA3MB4XDTI1MDYxNzA4MTg0NloXDTI1MDkxNTA4MTg0NlowLzEtMCsGA1UEAxMk
NzY4Y2U4ZTYtNjdlZS00ODEwLWEwMTktNDY2ZmRiZTA3NTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRji8ACfldhX/hx8ntJgOVusn7YWMqq5/5xz
Lyo+ihsqwRh3iV9hRmkBTb7QwH0CJ0tjrtrimrxSeInT1tnXj0FmBPajOo4O7eXI
4wquZqYKt0UNBodU9L6QcPiONR/aXLi/+xNs/w2324K+X5IhTBJq/dnY7Wbtmmyq
WGnaysL+LBLqyE27xSzz49xrybf6UiZlaLeOYfhx4HPCWZNlQWSVBqtbpN9lmWgc
UM/4J+Rl7eUnNtQ4WJfmc+uyyaVT+StDzVshI42YgKoBKKgcisIr3a4pFI7GWduv
pmPLkJiH/dF0NCWOx9yXr9yApnx2KemnaqUlE+xA2h99asT9GwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvWn+uwrFDKVe2bTZYv95lqKUj6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZh
MDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5ODE4MTAxMDcvNDZjZmYxNjQtZTVlMy0z
ZWM1LTgzZDAtMjc1MWU4ZDU0NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTQ2YTA5NmQtMTM0YS00YzUyLTky
NDMtZGEzOTgxODEwMTA3LzE0NmEwOTZkLTEzNGEtNGM1Mi05MjQzLWRhMzk4MTgx
MDEwNy5jcmwwHwYDVR0jBBgwFoAUjxFRuzwlQGrHT+tlydg8NNKjo5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNDZhMDk2ZC0xMzRhLTRjNTItOTI0My1kYTM5
ODE4MTAxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPOKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUy3VKMyPRZNiF2xtuhRsZUZHJmL5t2XW/dulf/WIeAy6/3snFCABPy
puAEsyH6Iv4y1qdLCutZ1rJOBnrOJ9dB30it9NZ4j8QkmGPgwyoEUK69MluPthf/
jknEkUkFhqnwtKqmKwOKGvDHXP8+MXEpW9zORXizsX2L4NwXp/c5DbPOgP9l7T9j
wYgXEaoElM8eJysqx8fDwbuilbG2zWHbYZkvEOM9tLgt2/5JC1cGXOh4kXCrFMfc
BVELSdls7NavJ2y6ilw1Fg2h3yFKpar8GbHaxlun3h/ZmpxeHSg3WbLm3izTUSdB
DrozC93fxTAUqxdAcafUS4+eQXrN9ak=
-----END CERTIFICATE-----
Generated at Thu Jun 19 22:53:34 2025 by rpki-client