Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
File:                     7d81dc4e-84a4-31f6-a430-145409787d4c.roa (raw, json)
Hash identifier:          Jr68i57uwYz4c2h5EgN767hPbc58h1rhPrF14MzgRUc=
Subject key identifier:   01:A1:8B:38:15:DB:9E:A3:8A:32:60:7E:C9:32:47:69:1E:1C:B9:FC
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584E4559DC2A9CC8949E543850C0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     14297
IP address blocks:        138.229.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:dc:2a:9c:c8:94:9e:54:38:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=7ffadcaa-b3f6-442a-bf75-5e5adcd90e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:36:a2:61:88:5d:18:fe:67:39:15:31:52:
                    3b:cf:01:ab:e7:15:21:c5:67:77:79:20:14:f5:4d:
                    2a:ca:08:4d:2e:5c:a9:bd:7f:60:32:fb:aa:32:c1:
                    e0:99:d0:48:ed:a9:78:83:89:21:fb:36:ed:e4:fc:
                    6a:9e:5d:b3:14:07:30:fb:37:23:d1:d1:7d:21:bc:
                    99:f7:35:7f:dc:07:1d:37:db:66:be:bf:f0:80:a2:
                    c7:27:c9:65:db:7c:c8:fd:34:9d:22:e0:6d:a5:2f:
                    e5:87:66:90:50:64:75:62:2a:71:97:d1:b6:30:35:
                    a9:cb:24:80:25:8d:84:bb:1a:41:e9:63:fa:65:5c:
                    6a:33:d8:45:8a:52:4a:a0:d1:99:7b:d3:5e:7f:f0:
                    6e:51:94:3b:65:3a:20:c8:e2:e6:03:df:14:c3:32:
                    e4:eb:3a:29:b9:35:ea:86:30:ce:c3:bb:17:8f:3c:
                    75:aa:ba:9a:5d:1d:c7:8a:d0:db:c9:a2:0e:0c:a9:
                    e5:60:69:d4:81:25:6e:69:68:4f:5c:5a:b8:1e:6a:
                    09:f4:f6:80:30:fb:71:68:98:6e:8c:50:7b:e0:78:
                    0d:03:0a:a3:9f:9c:a5:3f:fa:99:34:0b:42:9e:47:
                    69:3d:d6:63:ef:39:c8:8b:b8:d6:d7:28:4c:df:8e:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A1:8B:38:15:DB:9E:A3:8A:32:60:7E:C9:32:47:69:1E:1C:B9:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7d81dc4e-84a4-31f6-a430-145409787d4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.229.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:2c:c3:dd:68:bd:dc:8d:f1:ef:e0:bb:a3:f9:a0:29:a0:
         34:0b:f8:a4:5f:e7:a1:de:21:a4:0f:99:99:0e:5f:43:25:63:
         fe:e8:09:a9:1a:f5:c2:17:96:89:0f:b1:43:b3:8e:8f:70:a9:
         7b:6b:73:3b:47:60:87:64:0f:2b:9d:52:55:79:06:a5:3c:6f:
         d1:4d:dd:f2:a6:e4:19:52:1d:00:db:96:77:e6:ed:73:49:da:
         78:27:90:40:c9:97:14:3e:3f:24:63:34:ff:85:51:59:8d:d1:
         59:f0:46:91:4c:b7:58:56:30:30:6d:66:5e:75:db:03:47:7e:
         6a:77:a2:b3:fb:3f:79:97:bb:69:c2:9a:fd:18:2f:0f:0f:80:
         07:6e:d4:bc:0f:ad:81:9f:20:a5:1e:3e:1a:bd:00:9b:ce:8e:
         68:ad:95:d3:94:f3:2e:36:95:e4:1f:85:e7:3e:33:91:a0:aa:
         e1:5d:8d:83:ac:6b:43:99:66:17:e7:b4:5d:7e:b1:7a:45:d4:
         9f:dc:54:2b:83:9c:75:13:d2:b7:28:08:36:b1:06:54:9f:82:
         02:49:ba:dd:d4:35:a5:ff:8b:39:63:a8:e5:30:61:70:17:03:
         87:e2:bc:b8:45:22:dc:9a:81:6e:e2:01:46:7e:5f:1d:17:ac:
         e1:25:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:59:29 2026 by rpki-client