Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa
File:                     6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa (raw, json)
Hash identifier:          VAIxLGADByLr5rkFhMK5gfoc9RwyBJSdHvOAT5DcInw=
Subject key identifier:   38:BE:07:94:2E:A6:F7:5D:B9:55:B3:AC:E2:FF:B2:FA:8F:DC:19:7B
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584A884098F97B863A32D63CB880
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     683
IP address blocks:        140.221.0.0/18 maxlen: 18
                          140.221.68.0/24 maxlen: 24
                          140.221.69.0/24 maxlen: 24
                          140.221.70.0/23 maxlen: 23
                          140.221.72.0/21 maxlen: 21
                          140.221.80.0/20 maxlen: 20
                          140.221.96.0/23 maxlen: 23
                          140.221.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:98:f9:7b:86:3a:32:d6:3c:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=da5bb5b5-c2b0-4ebf-ad8d-8ac05a4eba16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:37:d7:50:58:5d:27:e4:68:16:60:8b:8d:
                    fc:76:20:d3:b0:4b:cf:72:89:5c:39:6c:01:75:a5:
                    81:90:1b:d2:64:aa:79:08:c4:da:ba:b2:71:09:2b:
                    03:07:38:e4:b3:07:5b:fc:32:f1:fa:ed:dc:8a:64:
                    a7:9a:2c:8c:81:66:ac:42:8c:89:18:28:95:d0:6d:
                    84:d2:4e:32:64:25:cf:c8:0c:22:83:2a:0a:69:7d:
                    a4:c1:c5:c3:5e:73:4a:8c:88:a1:66:58:e1:ee:20:
                    8b:1b:1a:50:04:80:c0:ab:9b:ad:17:cf:19:21:a7:
                    ce:e7:b8:75:17:94:57:1e:cf:da:37:a7:16:10:84:
                    f5:d6:4a:94:a0:4b:e1:d8:fb:ec:c7:f3:e3:78:01:
                    f3:d3:36:01:6e:c8:dd:5e:e1:1f:e6:e4:9a:64:a2:
                    4b:39:4b:b5:00:d0:47:f7:d6:a1:bc:4f:80:80:66:
                    4a:af:95:97:e2:9d:ad:c9:6a:d9:b7:4d:51:44:06:
                    a4:a1:a8:76:5b:13:a6:7e:bc:87:8f:c3:73:b7:bb:
                    0e:c7:97:95:95:37:d1:e1:33:81:d4:d4:5e:d5:ac:
                    84:dd:f7:72:ae:0d:16:f7:1f:a1:92:fd:5a:9b:64:
                    d5:2b:da:f1:3c:1a:34:f0:94:09:47:fe:d1:91:a4:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BE:07:94:2E:A6:F7:5D:B9:55:B3:AC:E2:FF:B2:FA:8F:DC:19:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/6f2f2860-e4bf-3c61-88e1-421aad6bb4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.221.0.0/18
                  140.221.68.0-140.221.97.255
                  140.221.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:6c:17:fc:e6:40:d3:28:2d:21:cc:18:cf:ce:05:52:51:
         a2:7f:72:62:58:ba:c3:12:b7:05:17:c1:d1:01:ee:42:d0:02:
         a2:a8:00:85:d1:35:a7:ef:60:b3:98:69:99:bd:b5:29:14:21:
         e8:62:cc:ee:08:b6:ff:21:f8:1d:10:1b:65:4c:d7:e5:99:04:
         7b:ec:61:5d:8f:38:bb:fe:51:e9:9a:ab:8d:4a:fc:c9:4e:b7:
         85:71:b3:8e:b2:ee:5f:ec:86:f5:66:e0:39:24:10:e1:dd:2b:
         9e:ec:aa:a4:40:56:63:ba:63:2e:9a:3a:18:36:65:80:82:70:
         a5:f5:fd:b2:8e:92:65:a3:03:c6:51:62:21:d0:78:96:8a:96:
         14:21:3c:70:2d:82:7a:f2:dc:ff:7d:54:a0:4f:a2:5b:c3:8c:
         21:3a:21:ba:db:14:d6:5c:59:58:2c:f5:d1:0f:d4:21:ea:84:
         bc:de:89:1a:9f:ec:d9:3d:8c:92:cd:29:af:24:9a:13:3c:c7:
         26:a4:fd:e0:22:69:36:82:d8:cf:b3:a0:53:6f:36:e5:5e:95:
         d4:e5:58:8f:5a:2b:51:b2:4f:ee:cf:1c:a3:4f:25:e3:1b:80:
         e9:3b:08:77:51:43:ef:95:05:ea:80:63:e4:68:cf:30:82:48:
         89:4a:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:21 2025 by rpki-client