Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
File:                     be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa (raw, json)
Hash identifier:          OUTwHHrsslZNzZzVrrgSCOdEKNk8qUt+8mauprV7ixg=
Subject key identifier:   6B:50:8E:14:A0:E6:F0:6C:37:A2:93:F8:4A:78:68:3E:10:20:4A:8E
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285849DB2A2910E26C2397FC69E580
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:29:10:e2:6c:23:97:fc:69:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=369ff3dd-f456-48b6-9ce7-937277eacace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:1b:20:3a:2d:a4:3b:f1:9d:17:e1:8b:fc:
                    33:2a:b3:89:0e:6c:cf:f4:1a:44:f5:d8:d1:a5:6b:
                    6b:a1:42:4a:62:8a:05:3b:04:a3:fc:41:ea:da:2c:
                    2d:5d:21:d6:c3:1d:fb:30:81:ae:6e:93:b1:2e:2f:
                    96:1d:48:fe:86:32:92:84:01:f0:1d:3e:2b:5b:a9:
                    e4:b3:e4:40:d6:f1:1c:b0:ab:30:30:3c:e1:1f:ca:
                    38:91:ef:94:e6:ae:6e:8c:25:1f:2c:52:66:75:44:
                    e1:42:cb:fd:78:19:7f:28:7f:9c:4c:6e:43:b0:c2:
                    db:bc:da:8e:75:90:5c:ea:a8:83:e3:fb:8e:37:d1:
                    8a:3b:6a:ec:43:a1:56:79:36:32:c4:49:7e:9b:02:
                    59:fa:fe:25:3b:a8:8f:5f:04:1b:e2:a0:32:3e:d9:
                    dd:7c:be:3e:c4:3d:e2:f3:47:ee:49:f9:07:1e:9c:
                    f7:3b:c2:60:f9:c2:be:8b:13:c2:f5:62:22:10:25:
                    7c:97:13:92:29:b6:f9:75:71:31:29:1a:c3:a3:1a:
                    1f:98:48:f0:b4:57:a4:35:24:26:97:09:33:c8:ee:
                    48:38:8e:3d:b8:9a:1e:d3:6a:b8:25:e2:5d:ee:c0:
                    fc:ba:6b:d0:41:8f:4a:be:48:a9:6d:79:b5:7e:c1:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:8E:14:A0:E6:F0:6C:37:A2:93:F8:4A:78:68:3E:10:20:4A:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:3e:3a:84:5c:be:62:c5:a2:9a:5e:fc:dd:88:c7:db:8b:a5:
         0e:23:b6:40:de:72:1b:25:91:35:4b:2a:9d:de:11:a3:57:71:
         10:34:87:dc:5e:ad:70:c7:f5:93:56:73:2f:8a:41:23:f5:a1:
         92:3c:6a:b5:56:1d:79:95:78:ea:e3:32:f4:48:a3:05:89:c7:
         7d:00:fd:de:6b:60:c7:66:be:5b:a0:7e:a0:9c:ef:5a:5e:81:
         ba:a4:b6:d8:93:c7:99:54:07:25:c1:14:90:05:a3:01:82:6b:
         62:e7:de:e4:27:fe:08:d3:cb:c5:fc:c6:8d:e6:a6:97:b3:b4:
         59:fa:70:15:ea:f5:e0:d0:36:59:82:02:cf:57:c5:1f:ed:bc:
         5e:5f:ce:0e:54:1d:ef:a2:c7:a1:19:13:db:7d:0c:2b:64:66:
         3c:cf:d7:c6:85:be:19:27:0c:2b:82:8c:f4:19:cc:af:6b:33:
         fb:31:b5:f6:17:c3:c6:bf:39:e0:31:d1:e4:6f:06:a2:7d:84:
         eb:50:78:9d:a5:6a:af:dc:c2:82:05:e8:e8:9d:a9:83:03:7a:
         0c:b9:5a:12:7d:7c:34:f3:02:9b:88:90:9d:5f:dc:f7:66:98:
         80:57:ac:c6:c2:0b:8f:03:63:8b:e3:3a:09:75:24:9e:d7:17:
         cb:ef:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 03:13:39 2025 by rpki-client