Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
File:                     5856eae9-9332-3fd4-b7c9-f243db302cc8.roa (raw, json)
Hash identifier:          rT+m+WfevMWuiGdHj8REmc+8hHihj20+ADIoLgYLK2s=
Subject key identifier:   DE:0D:FF:54:B0:BA:2F:12:A1:D3:8B:C3:88:D9:DA:89:57:03:88:B4
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A8B0B63C2663AA23F307B1CC0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     7764
IP address blocks:        148.129.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:63:c2:66:3a:a2:3f:30:7b:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=9e1c2525-9e2b-48e6-afe5-505bc179c6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:23:a0:1c:50:c0:6e:c7:67:c7:01:a2:ea:
                    dc:7a:58:21:97:48:72:65:cd:19:ed:25:7d:ad:38:
                    44:07:d2:89:f2:4b:b1:a2:48:cf:9f:0a:65:e4:73:
                    56:91:5b:8e:5c:58:f6:cd:e2:6e:35:e2:97:cc:92:
                    11:d7:ef:d4:1a:23:f7:ec:a1:69:44:b9:51:8d:6c:
                    89:d2:45:ee:e1:ec:2c:e8:e7:48:49:3f:82:5b:64:
                    ed:1e:09:f8:3f:1a:b3:0c:f7:b2:8f:46:35:8a:0e:
                    cb:05:59:02:cb:c2:30:1d:c8:4e:fe:20:cf:fe:e9:
                    37:ab:19:2e:76:fe:31:af:f1:9f:ed:d0:db:6c:3e:
                    e5:1b:51:c7:d5:78:a0:98:3b:dc:54:b1:9d:4b:d2:
                    6c:37:f7:a0:b8:84:1f:78:e3:a0:6d:93:a8:1d:92:
                    0d:f2:f0:f5:9e:af:99:5f:c7:8a:f0:03:a4:12:11:
                    3a:fe:e4:15:82:63:50:df:87:d0:44:96:44:c4:9e:
                    76:33:45:d6:92:c6:a2:f8:0b:9f:75:82:96:fe:5c:
                    9a:0d:b0:f2:7a:52:b5:1b:34:ca:90:e6:9a:f1:20:
                    db:3d:cf:15:13:5f:19:2c:5a:b3:47:dc:da:d2:01:
                    58:ef:d5:e7:c2:77:1e:f6:4f:66:a2:2c:5d:79:52:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0D:FF:54:B0:BA:2F:12:A1:D3:8B:C3:88:D9:DA:89:57:03:88:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/5856eae9-9332-3fd4-b7c9-f243db302cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:fe:4b:33:10:ad:f1:ae:c2:24:24:7c:1f:f7:73:09:4f:
         09:44:57:5d:a4:b6:32:e8:1d:70:78:ef:e9:0f:5b:05:05:0f:
         28:0a:ab:e9:de:d2:4f:5b:9a:a0:69:07:55:b4:1f:6e:f0:f7:
         e4:54:79:c1:ac:1a:2b:79:64:ef:15:a4:ea:19:15:ca:bf:80:
         b2:5c:b9:ac:c8:3c:67:aa:30:d7:01:4a:b0:56:be:f2:17:16:
         7d:fa:32:e7:6b:ed:75:23:68:9b:19:55:3f:99:dc:55:e6:ff:
         56:3b:3b:1c:45:79:11:f9:39:f2:6c:09:e4:b6:55:75:a0:93:
         de:19:f0:ef:83:fe:08:4d:c9:eb:73:c2:59:79:74:5c:f7:bc:
         61:92:0b:4f:b4:2b:cf:13:6b:b0:0b:46:44:1d:24:a7:dc:b3:
         71:38:0d:e3:9d:14:67:58:38:d0:14:81:1c:fd:4a:fa:c6:d2:
         62:6f:c5:26:3c:65:a0:39:64:df:c5:0d:d5:b3:61:28:69:a9:
         06:3e:7b:5b:a3:e8:fc:a8:75:6b:63:67:69:3d:8b:ae:ae:9c:
         8e:07:08:c7:39:fe:d3:26:6f:5b:d8:1d:bb:c7:a3:3d:f7:51:
         e2:a9:5e:3b:3f:92:a5:7d:3e:69:2b:e6:2f:07:bb:01:03:7f:
         06:4f:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:16:48 2025 by rpki-client