Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa
File:                     ace46686-2760-3bbc-8069-6ec4c46c5107.roa (raw, json)
Hash identifier:          o3Rg8ucJ59Wh1nDduQ9E2t6jVJDRImNHOezQUYdAGf8=
Subject key identifier:   0E:47:05:19:BE:BF:32:08:45:DE:FE:91:7A:2A:48:5F:C9:C3:72:56
Certificate issuer:       /CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21
Certificate serial:       010D0C9F43285849ED657718BE72E85AAAFA7220
Authority key identifier: 3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa
Signing time:             Wed 21 May 2025 13:44:51 +0000
ROA not before:           Wed 21 May 2025 13:44:51 +0000
ROA not after:            Tue 19 Aug 2025 13:44:51 +0000
asID:                     3128
IP address blocks:        137.81.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:65:77:18:be:72:e8:5a:aa:fa:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c0f0d2-36a3-4e64-b974-bfb8301baf21
        Validity
            Not Before: May 21 13:44:51 2025 GMT
            Not After : Aug 19 13:44:51 2025 GMT
        Subject: CN=7250f097-d11b-41c0-805f-98f1cebe4f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:80:ed:59:44:9d:b0:60:79:c5:34:a5:39:
                    49:35:7e:ff:9c:d2:0f:ed:49:f3:23:3f:a1:05:12:
                    40:6c:00:4c:e4:e7:38:0f:fd:0b:54:ce:3c:0f:17:
                    0c:06:f7:25:0a:36:83:6f:c5:9c:6d:d1:13:3d:a2:
                    6e:44:8c:77:97:3d:14:19:8b:9b:b4:95:27:6d:5b:
                    7a:f1:61:33:cc:ba:e9:cd:de:03:98:f9:3c:a0:6d:
                    22:cc:b7:82:23:56:05:0f:46:96:6f:69:4c:92:d7:
                    1e:48:c1:78:ad:21:bf:f6:0d:a8:b4:62:71:19:90:
                    14:60:ad:25:87:fb:ef:b6:bd:97:ff:be:e7:54:04:
                    89:b3:27:14:02:27:ec:f3:b4:cb:dd:0a:8e:16:4f:
                    e3:2d:09:eb:70:db:62:c7:4d:2c:f5:f9:9c:72:e1:
                    7a:38:d0:99:63:7b:61:76:73:da:e7:05:b4:70:06:
                    b3:0b:ee:13:b0:3a:1f:aa:23:5c:d2:42:57:b5:a1:
                    ac:1c:74:17:62:1b:60:d9:0d:cd:ff:74:0e:6f:fd:
                    97:fc:7c:e8:75:db:b5:21:77:7c:b9:d1:50:c4:87:
                    e8:90:98:a4:e1:85:f1:f9:55:83:41:0c:dd:62:81:
                    12:d5:cb:b0:bc:de:9b:7e:20:b2:fb:fe:2d:57:94:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:47:05:19:BE:BF:32:08:45:DE:FE:91:7A:2A:48:5F:C9:C3:72:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/ace46686-2760-3bbc-8069-6ec4c46c5107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21/64c0f0d2-36a3-4e64-b974-bfb8301baf21.crl

            X509v3 Authority Key Identifier:
                keyid:3E:10:7C:C1:CD:33:68:A8:64:7C:72:E2:5D:1D:8E:41:17:D8:89:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/64c0f0d2-36a3-4e64-b974-bfb8301baf21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a6:75:02:40:09:b4:22:c6:6c:44:b5:d0:61:e3:30:eb:b6:
         5a:cf:66:6f:31:82:1c:df:17:28:24:e7:0b:4a:46:3d:9d:54:
         5f:24:97:52:91:bd:a7:29:f8:bf:c8:8b:0e:72:c1:94:2b:9d:
         45:dc:fe:0f:ec:85:bb:0c:15:13:1a:a7:37:75:39:0e:78:b0:
         b2:3d:0e:bd:78:3b:56:f4:cf:bd:3a:c8:5f:2a:16:86:15:18:
         99:b8:87:3f:44:fc:ef:ae:f4:d7:11:c0:26:b3:b3:ce:8a:fb:
         17:b1:b6:f6:31:f6:fc:6c:2f:1f:1f:1d:65:06:1f:ce:7a:f2:
         21:db:88:82:d5:5e:b7:17:a2:be:92:6f:07:a7:5c:1c:c5:34:
         bd:71:88:f3:53:3d:15:3e:07:f6:18:95:06:42:7f:c5:4d:3c:
         65:3b:44:a1:cc:53:6f:02:7b:31:bd:00:23:5d:1f:ef:7c:3d:
         3a:9a:8c:e7:c6:26:ed:21:7f:96:52:f1:98:7f:11:c5:2b:77:
         90:9a:3e:d7:66:a4:b2:fe:d6:d4:a0:49:10:19:2c:e4:e3:59:
         c3:b7:e0:aa:b6:9b:1a:02:86:86:53:71:0d:9c:e3:ec:81:15:
         d3:10:20:d4:ca:40:69:32:e6:4e:c3:b7:8a:43:4a:7d:4a:f1:
         ab:4a:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:26:10 2025 by rpki-client