Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa
File:                     d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa (raw, json)
Hash identifier:          ajwzkQju5DeoXLs3Ras0X8IOTGvZsH8TSHZlQdjxjx8=
Subject key identifier:   7F:68:6E:31:2F:34:5A:3F:9F:A0:A3:AB:19:21:35:9C:2C:95:90:14
Certificate issuer:       /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
Certificate serial:       010D0C9F4328584AAB264FC56C9BBF5B7C23F8C0
Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        136.228.0.0/19 maxlen: 32
                          139.60.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:c5:6c:9b:bf:5b:7c:23:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=b59d0dfe-1d98-4024-a443-b40202fcd5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:e6:95:1c:3c:60:30:3f:06:02:e4:e9:33:
                    a6:55:f2:8c:46:e2:fc:be:30:44:a3:51:ce:1b:ef:
                    13:a0:87:2f:92:aa:00:7a:38:52:71:bb:27:0b:da:
                    23:5c:d2:3f:e0:c1:51:2d:4a:41:83:89:ce:06:a8:
                    4a:ca:b2:af:3e:29:b1:12:06:74:1f:c6:2e:29:b5:
                    8a:52:79:cd:8a:2d:e5:1c:15:29:86:52:98:49:65:
                    3c:af:88:ed:29:db:55:c7:7d:94:16:d4:71:1f:00:
                    f2:2a:98:06:c2:f2:6e:00:f5:20:0e:43:a5:81:9a:
                    00:ef:f1:4b:c3:e1:c8:d4:7b:c6:eb:bd:7a:a8:ca:
                    c3:94:9c:f0:86:35:ab:b2:fe:e9:8a:d8:fc:ff:9e:
                    b8:d3:da:1a:07:2b:a7:69:cc:c0:d1:95:af:af:84:
                    c5:d8:11:47:d8:d8:7a:42:21:02:e0:9d:56:0a:41:
                    f9:78:e2:f0:85:be:69:a7:49:1c:54:c1:22:7b:de:
                    7b:3f:8c:9b:85:fd:56:92:85:23:95:1f:1c:26:f2:
                    ad:d9:e8:d2:ef:b2:0b:a1:46:13:e0:db:e8:a0:ab:
                    a6:d5:39:66:f9:d0:dc:c9:de:13:22:91:d8:fb:86:
                    51:c0:7a:bf:ae:24:02:40:65:35:a0:b1:93:64:11:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:6E:31:2F:34:5A:3F:9F:A0:A3:AB:19:21:35:9C:2C:95:90:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.0.0/19
                  139.60.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:72:4d:9f:06:cd:e9:e1:84:4b:7b:4d:37:71:92:fc:76:c5:
         c7:64:5b:47:55:93:3c:fe:d3:ff:18:60:51:db:77:3d:06:27:
         0d:4f:c7:36:e3:93:bd:22:b1:14:e4:86:7d:2c:49:8b:03:5d:
         b1:ea:d1:e9:f8:e0:61:2d:38:6f:76:0f:a3:0f:05:49:ea:82:
         df:0f:40:bb:17:f5:9a:8a:89:62:ae:9e:70:2e:8b:10:1a:8c:
         7c:98:1b:3e:18:3c:70:e8:10:69:7f:78:e5:14:09:22:74:87:
         49:07:cf:b3:be:9d:90:e8:92:3a:57:d1:c8:1a:ae:a1:16:41:
         77:97:d3:1e:c2:9f:f8:b1:b6:df:dc:7a:02:2a:c6:95:7a:7b:
         3e:df:8d:a1:55:98:bc:bc:79:e3:86:ef:b6:16:dd:ca:4b:eb:
         67:b5:35:e0:49:44:0d:db:7e:04:4a:63:35:6a:3b:0d:c8:e0:
         b8:2d:41:1f:34:4c:6c:0f:05:93:61:78:57:0c:c1:bb:fb:a1:
         b0:31:58:a8:f7:c8:0c:49:57:19:94:2a:83:fe:be:95:6b:57:
         3b:d6:b0:18:2b:04:b8:36:13:ed:00:7d:7c:ed:d3:aa:8d:a7:
         07:50:13:6c:84:1c:d5:c8:d5:d8:51:de:ec:c0:01:73:12:c8:
         f6:5e:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:46:03 2025 by rpki-client