Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa
File:                     78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa (raw, json)
Hash identifier:          URMjcmqOmi20SRUjJd+v4FcwE4d8M1CsuJoUV5U57Es=
Subject key identifier:   65:05:46:BF:B5:E3:7C:03:07:BA:4F:3D:E9:77:08:C4:AB:5F:EF:59
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F43285849DC8FC87FC889D430A5ED9100
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     395347
IP address blocks:        138.43.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c8:7f:c8:89:d4:30:a5:ed:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=39b43e4c-c434-4898-8268-56124f51cefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:25:1d:21:df:63:74:41:ed:dd:41:bd:6d:
                    0a:53:2a:47:c9:36:68:3f:6c:56:72:4c:d1:70:91:
                    41:44:3a:5e:47:92:5f:1b:15:c5:9a:4e:e4:fe:13:
                    72:64:f7:1c:3b:d3:c2:cc:40:c2:09:63:d6:45:64:
                    58:b1:36:31:95:db:f3:12:30:c6:a3:54:7f:46:e3:
                    f6:ac:74:29:46:d3:e7:bf:12:8b:14:53:55:69:bc:
                    9e:4d:0d:af:b4:45:4a:b4:6c:0e:61:ef:7a:55:dc:
                    a7:2a:ed:cc:6e:7d:d3:9c:4d:73:ee:36:53:af:b8:
                    c5:c3:18:d5:0a:10:88:51:6a:4f:79:82:e0:06:1c:
                    c6:d4:bd:73:58:f0:c3:7e:c3:f3:07:1c:d2:20:a8:
                    62:7e:fe:9a:98:31:d4:be:7e:04:a1:c0:93:bb:11:
                    3a:1b:89:e0:4c:2e:7e:6f:83:ee:94:20:5b:b2:10:
                    97:87:16:a7:50:25:19:11:48:b3:0e:29:d4:dd:aa:
                    e0:2a:be:fe:da:4f:f5:c5:07:0c:73:14:fd:2e:e1:
                    5d:78:af:7a:c1:ab:fa:d7:a3:57:31:9b:45:d9:36:
                    bc:90:12:75:08:20:f3:b6:54:86:4f:a0:e2:8d:8a:
                    a8:38:ae:8c:db:58:67:67:61:2b:a4:42:f6:9d:f6:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:05:46:BF:B5:E3:7C:03:07:BA:4F:3D:E9:77:08:C4:AB:5F:EF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/78d64f9d-a439-3c6f-b61a-0b52a08b3eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5d:94:f3:94:a9:b4:9f:f8:49:92:d0:59:8c:7a:5f:18:10:
         50:75:b0:f9:48:f4:30:81:a2:40:82:54:7f:0d:86:a1:7e:22:
         88:91:4b:0e:05:44:02:dd:62:93:af:d4:21:e8:36:cd:20:27:
         a1:74:9b:f4:6f:c3:5c:39:c2:ed:9c:6c:31:68:ce:91:a3:a4:
         bb:da:6a:6e:77:6c:19:94:ef:07:05:a9:5f:17:e9:e8:58:d7:
         fb:0f:d1:73:41:20:ad:ff:1c:61:3a:a5:5d:1c:fe:83:90:d6:
         f3:0b:20:35:bc:c9:50:9a:19:be:88:e8:77:18:0c:d2:a0:86:
         b1:1b:7a:1f:4f:d7:6c:b0:0b:d3:ff:ee:ec:c2:53:59:5a:44:
         ae:29:be:12:1e:d9:94:52:01:d5:4a:02:be:62:56:9d:18:ed:
         5c:a4:bb:7e:3a:6e:db:fa:9f:30:bf:8f:a9:4e:b0:e2:0f:dc:
         87:28:1c:02:d5:79:41:f9:ea:66:9b:50:6d:46:b6:44:d6:d2:
         ab:67:47:95:5b:7d:3c:a8:f6:92:ac:33:fa:50:b3:8f:bd:73:
         c7:92:79:56:f3:7c:15:52:15:50:a2:e5:ab:46:a6:47:cc:45:
         dc:6e:36:ee:07:00:df:4e:c6:b1:d4:24:a0:bc:ad:14:28:42:
         ee:04:af:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:01:17 2025 by rpki-client