Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
File:                     da715157-9227-3031-a55c-e864ec645b9b.roa (raw, json)
Hash identifier:          j/uc4BUaVg7Cbx+RyrEkuodZkQTT6iEI0CZWOGwzMtw=
Subject key identifier:   B4:C6:9A:A1:D0:8D:4B:77:68:B1:2D:20:94:F5:8C:13:32:15:6E:C4
Certificate issuer:       /CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Certificate serial:       010D0C9F4328584A7A4B44A2526B173981FCBD00
Authority key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     611
IP address blocks:        138.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:44:a2:52:6b:17:39:81:fc:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=05c04df4-f66a-4391-a161-11c03f6f1fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:12:34:88:4e:36:5f:33:8c:be:e5:a3:a9:c6:
                    c9:9e:f3:01:03:b2:93:26:3e:d6:38:58:98:d5:7a:
                    6e:5a:f5:49:51:c9:7a:e4:68:9a:71:a0:25:7c:a3:
                    6f:0d:1a:51:ed:c8:46:6d:61:65:9e:43:1f:9d:d2:
                    a5:98:1e:6f:fe:1a:12:13:ab:b2:03:05:83:27:ff:
                    e0:a5:02:f0:6e:f5:25:42:5a:28:c3:3c:55:75:a4:
                    bc:cf:fd:dc:7c:ed:74:0d:36:65:26:2d:b8:a3:3c:
                    49:92:68:d0:92:3b:56:b7:0a:d7:7e:75:3c:69:07:
                    76:43:ea:96:29:0c:47:fb:08:e6:29:f9:0e:6d:86:
                    b0:0f:a9:82:be:fc:e3:fd:b3:a5:cf:12:0a:33:b2:
                    23:44:ac:93:d9:63:00:9c:ed:51:fb:9b:e8:7f:ed:
                    42:b1:48:85:ba:f2:d0:9c:a0:d0:fb:6d:f3:db:85:
                    0a:b3:92:a1:53:c0:ce:c7:92:29:ef:dc:0a:4f:af:
                    51:be:2c:b6:b6:1f:9f:3d:ed:ad:93:be:06:ca:6a:
                    f5:74:a1:88:db:ce:ae:1e:e6:23:44:19:ea:05:0e:
                    30:dd:29:da:d9:c4:c7:c6:ee:13:a7:cb:14:4d:f9:
                    59:32:93:ef:2e:40:4a:c3:9d:c5:b6:f7:8e:75:cf:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C6:9A:A1:D0:8D:4B:77:68:B1:2D:20:94:F5:8C:13:32:15:6E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl

            X509v3 Authority Key Identifier:
                keyid:4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:58:99:2e:d7:e6:08:d3:99:2a:77:5b:3e:ed:f8:2c:40:
         09:5d:e5:a7:ea:93:43:46:87:f9:57:94:bf:bc:99:57:6d:9a:
         20:ec:ba:b3:cb:b2:61:b9:40:b8:ad:7d:80:ec:6a:6e:53:e2:
         a1:be:17:fd:ec:b8:4c:38:56:aa:75:05:b5:74:28:85:50:01:
         cf:90:a3:40:38:74:08:d7:44:f9:84:f8:4b:79:d2:05:11:b3:
         54:f4:13:0b:a9:c0:3f:e7:75:76:f0:63:ee:e8:80:b3:c1:06:
         cb:c2:b2:a6:3e:b6:f9:38:ce:86:61:7e:31:a5:93:7f:ca:cd:
         57:69:77:60:73:c2:d4:80:b6:87:63:f2:d9:36:db:96:ec:e9:
         fa:c3:01:1c:85:a1:03:eb:ad:80:d1:45:ca:50:21:19:53:fa:
         37:86:40:35:5c:63:d0:e6:c4:c3:1a:d3:1b:a9:a7:78:ea:4e:
         04:a7:72:bd:d2:86:1e:0b:29:1f:c1:5f:f5:11:8f:52:9c:3f:
         ff:92:cf:cc:8f:a9:dd:30:27:8b:8f:fe:df:f3:aa:45:0b:fc:
         4a:d2:dd:43:41:c9:a4:44:3c:b1:c3:97:cd:17:f1:99:8a:1d:
         33:f6:ce:ad:26:c8:e6:cd:e7:de:e0:f9:6d:28:d3:74:03:b3:
         88:81:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:21 2025 by rpki-client