Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          fzExZQnB1AqRb0G7zbin2MsSfEgoIujmJNcneYqyOJs=
Subject key identifier:   49:6E:66:DA:6E:69:0C:B7:5E:C4:5A:E9:5D:DB:8D:F9:11:ED:30:AD
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       01E75FAEAB59117C306AFF1647BFDD894B90D8AE
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
Signing time:             Sat 18 Oct 2025 06:30:39 +0000
ROA not before:           Sat 18 Oct 2025 06:25:39 +0000
ROA not after:            Sat 17 Oct 2026 06:30:39 +0000
asID:                     61138
IP address blocks:        216.246.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e7:5f:ae:ab:59:11:7c:30:6a:ff:16:47:bf:dd:89:4b:90:d8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 18 06:25:39 2025 GMT
            Not After : Oct 17 06:30:39 2026 GMT
        Subject: CN=496E66DA6E690CB75EC45AE95DDB8DF911ED30AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:64:74:72:6a:ce:89:80:0a:83:d0:1b:d3:
                    65:33:62:57:44:6e:f1:51:34:4b:dc:c9:7a:d7:44:
                    6f:bc:b9:a7:e2:d6:06:8e:1d:f2:05:98:2d:f4:66:
                    12:8b:05:6e:cc:27:b2:f7:57:64:23:76:64:26:b5:
                    52:8b:bc:74:65:5d:f1:7c:86:88:69:78:02:ad:44:
                    0c:c8:99:7f:f7:5c:8d:4d:07:2e:a2:1f:85:49:7e:
                    48:67:fb:d5:9a:86:41:7b:aa:de:48:c5:7e:86:86:
                    f7:50:1d:18:e6:f5:f9:8c:ac:8a:ff:10:c2:4d:0d:
                    f2:84:ed:ad:0b:21:7c:e9:b8:9f:62:49:2d:c4:c4:
                    a5:1c:86:94:93:e5:33:88:36:52:7b:9c:a3:9a:7f:
                    31:33:a5:dc:02:1f:87:17:c6:df:29:ff:e4:26:49:
                    a0:b0:d1:75:a6:3f:b2:87:2c:ce:56:f8:e0:13:fa:
                    0a:7f:d4:31:8f:c4:29:66:db:96:c1:fb:e4:0c:e2:
                    c0:06:15:0a:46:1e:52:fd:ad:34:17:ea:9c:d5:19:
                    b1:46:35:47:28:ee:09:05:2f:07:dc:2e:32:b3:34:
                    e9:bd:e2:87:f0:ba:f6:f4:38:42:4c:93:2e:50:3c:
                    ff:7f:ff:38:ae:60:04:8a:64:27:ce:93:22:e2:07:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:66:DA:6E:69:0C:B7:5E:C4:5A:E9:5D:DB:8D:F9:11:ED:30:AD
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:be:4e:fb:d5:6d:8c:6e:bc:01:d3:73:fa:0c:f8:43:ae:
         d8:52:80:89:39:fb:f9:8a:5e:5b:b8:d7:90:a3:f8:36:2f:27:
         05:4a:34:07:af:b4:84:fc:21:8c:ef:40:e8:72:ec:b5:4f:79:
         e9:21:95:1c:a1:14:19:d5:80:1f:24:30:43:00:de:3f:71:58:
         a2:1e:30:0b:73:0c:cf:a2:9e:4a:1c:d2:06:c1:57:18:ab:04:
         98:a1:df:dc:aa:73:71:c3:01:05:63:5e:b4:93:3f:e4:e7:2e:
         f3:68:46:b3:08:67:31:23:da:0c:f0:70:7f:01:68:37:7c:23:
         32:61:f6:8a:cf:68:1a:40:a1:00:ee:0d:21:aa:63:89:13:2a:
         74:5b:9e:07:aa:ef:69:fe:fb:43:0b:f0:ae:bd:4e:48:1b:5e:
         20:97:51:04:6e:ac:06:9c:68:0d:3f:f9:78:b6:c9:25:b6:44:
         bb:6e:e8:3f:f3:a8:f4:35:c9:9c:7c:c5:27:52:ef:3d:32:51:
         99:78:8e:4a:7e:ae:b4:81:0f:dd:8d:a2:7d:0b:7b:6f:41:f8:
         2c:23:37:b9:68:b6:fe:04:45:9e:31:92:4a:0b:de:c6:a4:f1:
         81:04:e4:78:81:88:7e:00:bb:c5:73:01:b9:19:db:a5:e6:4a:
         d3:d2:7d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:18 2025 by rpki-client