Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6370811-82fa-3495-b2e8-cbb3ebc37255.roa
File:                     a6370811-82fa-3495-b2e8-cbb3ebc37255.roa (raw, json)
Hash identifier:          K7G9/JyLkW35sjMZqCyRMSO+SVDz6N0bpUARAYxnsjo=
Subject key identifier:   40:BB:A1:FB:C5:D6:95:05:56:60:81:5D:1D:15:DC:9C:B9:55:21:EB
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B3556F17321CD071F1F1827C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6370811-82fa-3495-b2e8-cbb3ebc37255.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     16417
IP address blocks:        139.138.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:f1:73:21:cd:07:1f:1f:18:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=9ab35288-19f0-4284-8907-891166e39064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:50:2d:e5:b3:f8:54:6b:ba:12:5b:44:2a:
                    83:da:81:d9:a8:6d:2b:4c:88:7a:3d:f9:7f:4c:12:
                    19:ac:36:c2:2d:90:a2:e7:04:54:0e:6b:40:b4:27:
                    bb:57:13:34:60:c4:3b:d8:15:76:2b:91:f4:fe:dc:
                    c3:92:88:c4:f1:0d:90:19:76:cd:95:0a:2c:d6:78:
                    83:a0:2a:da:fe:99:90:f1:75:a9:b6:d7:9b:3f:ff:
                    c9:18:df:0e:f2:16:0e:66:05:67:04:69:90:9d:ee:
                    7a:f3:0e:a8:d0:20:46:21:6d:a5:78:f8:f0:a9:8f:
                    12:ba:59:51:97:15:53:72:ee:3d:0f:ed:7c:8e:1b:
                    d8:26:69:57:95:c8:2f:d0:01:0f:9f:09:0e:5b:f4:
                    42:41:b0:ee:46:f6:3a:bf:55:e4:74:2b:38:b3:84:
                    a4:6f:cb:e8:86:05:90:59:68:32:f6:67:b9:64:d2:
                    09:51:e4:7a:1e:9f:b3:77:45:20:c2:a8:6f:5a:65:
                    8d:ee:a1:0d:34:8b:e2:a5:ab:63:ed:df:f5:c7:fc:
                    b1:55:c3:d1:cc:68:b9:e1:98:4a:f0:74:a1:41:89:
                    56:bb:d8:b5:93:81:d2:c0:0e:98:8e:4e:62:c8:ab:
                    5a:37:78:b0:57:a6:0a:1d:f7:4d:0d:4b:f8:0c:a0:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:A1:FB:C5:D6:95:05:56:60:81:5D:1D:15:DC:9C:B9:55:21:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a6370811-82fa-3495-b2e8-cbb3ebc37255.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:02:16:33:83:2e:a6:d1:ff:b1:0d:58:86:cb:9c:73:63:80:
         78:f3:31:4a:09:55:7c:39:71:8d:c1:0a:ef:69:c8:1f:62:0f:
         78:5d:7d:67:ac:b9:0e:c7:9c:23:0c:35:30:39:32:79:73:d1:
         54:11:b3:df:dc:c0:4d:53:7b:a0:33:79:40:9b:b4:4d:4f:7f:
         85:c5:d2:d6:22:30:e6:33:cc:ab:4a:39:0c:80:a6:f7:53:1c:
         47:c6:bc:22:2d:4f:93:83:53:7b:a5:75:0a:e7:9f:14:a8:09:
         63:ce:b6:9f:0b:18:d8:a9:c5:d8:5c:cd:2b:1e:63:4d:76:ef:
         3c:b2:17:fa:07:14:46:e7:3b:ca:d8:c2:ff:55:72:b9:28:91:
         2a:e4:e9:97:ed:0c:f2:4b:96:4e:e5:07:7a:0b:1f:6d:5e:94:
         5d:92:1e:54:b1:0e:65:d4:30:7b:b5:22:68:ac:97:e8:e9:8f:
         48:72:d9:f2:8d:d0:1c:e5:02:68:35:1e:7a:0e:a4:54:08:fd:
         8b:e2:8b:e8:b0:4b:31:27:5d:bf:c4:9b:9a:b9:0c:90:69:ff:
         7f:c7:e9:f6:f4:ad:07:6d:f7:99:7d:56:63:79:1b:43:6d:66:
         69:50:e2:44:d0:ae:32:56:3b:65:f2:7c:2f:dc:77:55:e9:46:
         b2:bc:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:35:48 2025 by rpki-client