Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
File:                     da715157-9227-3031-a55c-e864ec645b9b.roa (raw, json)
Hash identifier:          javgu69O4ussR8Stl8pEE5Pbq5+ypfa789FVFcMJ2HM=
Subject key identifier:   82:2C:9B:F3:2E:3C:CB:FC:C8:D3:4D:4E:CD:BF:99:76:8C:E2:18:93
Certificate issuer:       /CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Certificate serial:       010D0C9F4328584DFBD5E7181DC9E534217025FF
Authority key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     611
IP address blocks:        138.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e7:18:1d:c9:e5:34:21:70:25:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=24c9ab8b-0402-4039-9274-1c24e0494ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:24:07:bf:75:c6:23:36:b9:bd:1e:17:97:
                    36:f3:34:26:26:d3:33:fd:85:94:b5:b5:f2:81:06:
                    e3:7e:e1:a7:86:ed:7c:88:76:3b:de:62:5e:e9:e9:
                    db:50:e0:5f:00:21:19:25:3d:8e:47:aa:0c:ce:4d:
                    e9:87:df:70:37:62:ba:9f:b3:ca:ab:15:dc:45:93:
                    f3:a1:e6:ea:09:fb:19:55:f3:b6:96:21:54:27:cf:
                    6f:43:5b:7e:d8:34:48:64:2e:6f:22:1b:be:69:8d:
                    f6:30:38:b2:e4:ee:6d:5a:f1:af:31:b6:04:54:01:
                    f9:b8:59:7e:e4:ff:a9:15:66:46:03:4b:7a:47:70:
                    68:62:de:cc:4b:17:fd:1a:c7:43:30:71:4c:02:a1:
                    de:2e:94:86:4e:6c:c3:77:56:3b:2e:30:b9:38:09:
                    5f:1c:22:52:f3:54:de:55:b3:d1:ad:b4:35:a7:2a:
                    27:59:8b:a5:e2:f5:57:2e:94:52:1a:a5:b2:e9:8a:
                    7c:b8:14:87:0f:72:96:75:a3:ff:b9:11:ad:20:15:
                    82:80:16:b4:ce:dd:9f:34:df:f6:6a:a9:d2:78:bf:
                    48:8c:7d:92:df:79:4b:34:50:8c:6c:7b:4a:31:5e:
                    83:51:c1:71:b8:3f:ea:0f:99:a0:1e:cf:eb:ac:b1:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2C:9B:F3:2E:3C:CB:FC:C8:D3:4D:4E:CD:BF:99:76:8C:E2:18:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl

            X509v3 Authority Key Identifier:
                keyid:4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:31:35:ac:a5:10:b5:6f:c5:12:08:f9:46:c0:29:31:a1:bc:
         6e:41:a6:0a:4c:2c:2a:f4:12:33:25:f5:cd:46:0d:66:34:8d:
         38:7b:61:17:79:1a:f2:04:69:07:09:8f:cb:c4:c0:99:90:fa:
         57:d6:c2:b3:df:1b:3e:3d:37:cf:2d:3b:c8:ad:82:d2:e3:83:
         8c:de:1a:98:aa:35:91:f9:fb:86:73:c9:82:8b:e8:48:11:cb:
         fc:ec:89:ee:95:36:d0:2b:6d:f6:58:ed:de:a4:ab:22:c4:06:
         b1:08:6c:9c:3c:33:22:65:e0:02:ec:6c:36:81:4a:33:e0:c4:
         10:81:f7:e2:fd:f6:5a:08:d5:58:54:4b:eb:31:56:c1:13:78:
         99:82:75:2b:d3:b0:02:e9:fb:93:fd:ec:96:5c:f2:5c:d6:4f:
         0b:00:09:5d:63:2b:0f:0b:10:24:19:87:89:5e:8b:76:d6:fc:
         d5:43:ae:72:d1:64:5d:4f:92:86:d1:10:2e:10:b2:a7:21:d5:
         77:98:fa:79:55:4d:2f:aa:ae:47:16:1f:95:86:84:26:cb:9f:
         6d:10:c4:5c:df:fb:7c:c0:ef:7b:2d:a5:fe:72:d2:d6:0e:d6:
         14:e6:73:60:79:75:26:78:60:2a:09:54:81:41:7f:da:cd:8c:
         29:4a:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:41:23 2026 by rpki-client