Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
File:                     e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa (raw, json)
Hash identifier:          uPfXRBcdMG/MClAIyYV3gSPfAecjgNm5OjyX4dXgYPA=
Subject key identifier:   20:CA:A9:16:E1:45:97:EF:6A:43:B8:4F:DC:A2:51:42:14:2D:D6:BB
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584A07D535AC276043B2D7759CC0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     54994
IP address blocks:        138.113.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:35:ac:27:60:43:b2:d7:75:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=cd2175d7-a737-4bc5-b53b-c31510569adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:9f:bc:db:90:3c:04:f4:fc:c3:39:71:9a:
                    a3:53:08:c3:a8:d6:70:ea:57:e5:66:f3:75:3a:76:
                    35:c4:ab:da:72:c1:c4:75:85:c4:29:5c:92:3c:94:
                    4c:f4:1b:5e:35:83:6d:9a:fa:7f:3a:6a:d5:2f:5d:
                    7b:03:f9:47:0c:f1:05:5f:2b:43:8b:59:a4:5d:11:
                    0f:64:f4:08:cb:c8:e5:fb:bc:21:ac:d3:e1:24:1e:
                    d4:6b:58:7c:3a:0d:96:3f:ea:21:96:77:87:3d:78:
                    69:88:8c:12:e5:a4:9f:c4:07:c8:c7:1b:de:a2:18:
                    3a:d5:83:e7:ad:47:6c:30:a3:05:1c:2e:55:a8:85:
                    16:e0:f0:ec:0c:3a:b9:b0:57:4f:0e:4d:26:8c:c9:
                    ed:7e:c9:ba:1a:b1:25:a8:52:e3:43:7a:05:bc:e8:
                    0d:6c:7e:c3:fe:b3:12:9d:19:c3:06:01:f3:8b:12:
                    78:c2:18:b1:99:2a:98:6d:f8:21:3f:56:00:49:2b:
                    0c:7a:5b:de:bb:e4:b6:d5:76:71:d9:b3:40:89:ac:
                    ff:7d:ca:17:58:42:91:30:44:9a:ed:80:a2:28:4c:
                    5f:14:a5:2e:e6:c6:04:ac:97:14:df:2d:95:03:f2:
                    59:96:5b:e4:61:04:c6:f2:b6:cc:06:d7:e9:0a:10:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CA:A9:16:E1:45:97:EF:6A:43:B8:4F:DC:A2:51:42:14:2D:D6:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e85fa22c-b7d6-3fa7-9929-d1c2421629dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:92:bd:c8:08:b2:2e:f2:fd:a7:76:f3:56:9d:63:79:6c:c4:
         7a:25:ba:cb:75:f8:93:9b:ef:c7:cf:93:c3:5f:3b:ca:bd:4a:
         21:d0:07:f5:37:78:f0:b0:41:b7:d0:5d:15:c4:e8:be:9c:49:
         b1:4f:7f:1e:c0:bd:a4:2d:c5:1e:0c:8a:8c:48:ed:a4:ee:f2:
         c7:2c:94:7b:b4:77:cb:aa:7c:ee:7d:70:ad:a3:ac:78:3f:3b:
         8c:eb:aa:44:c7:a2:f8:e9:44:7e:28:e5:ab:e9:86:90:e6:9e:
         14:14:2b:55:19:3f:0c:86:7b:5c:4e:a3:7d:a2:34:38:31:27:
         37:6e:1a:81:3a:5f:89:e5:29:79:b0:ea:7d:1a:5a:cf:d6:13:
         00:0a:2d:6a:fc:cb:38:34:d6:1d:1a:ce:bd:5c:30:57:07:51:
         03:7d:35:d3:02:3e:c7:42:57:0f:5e:36:e8:72:5d:3b:4b:e5:
         16:d7:e4:96:ba:3a:2a:6d:8c:b6:94:f4:7c:3d:8f:7b:cd:87:
         39:c6:8b:65:97:71:43:d5:bd:c3:d7:8d:76:11:2e:68:8d:85:
         49:78:73:af:2f:ef:1b:92:ab:f3:3c:61:49:0b:ee:27:74:61:
         48:b9:4a:b4:76:5a:fa:a6:3e:68:52:ae:a0:a9:20:7e:86:c4:
         37:70:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:33 2025 by rpki-client