Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
File:                     da715157-9227-3031-a55c-e864ec645b9b.roa (raw, json)
Hash identifier:          jaMrHWgw4vNd/LcxDVJGKcV4JlWRwOb6QlyPZF5C6pk=
Subject key identifier:   0E:65:31:FD:B6:ED:9E:C9:AE:AF:17:5D:3F:C6:F3:DF:0C:0A:F9:3B
Certificate issuer:       /CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
Certificate serial:       010D0C9F4328584F497617C4C9B748BE8FB00E00
Authority key identifier: 4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     611
IP address blocks:        138.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:17:c4:c9:b7:48:be:8f:b0:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b4abb1-58ea-4d3f-9703-22438ac9f545
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ff9fcb1e-457c-423d-a6b3-a6c359c93cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:28:08:a9:ed:3e:a4:70:81:7f:0b:82:6d:
                    d9:a9:23:e3:e5:ed:f0:5d:05:e3:93:c5:69:6b:1d:
                    20:bf:de:51:eb:4b:84:79:5b:6b:9f:52:46:88:2d:
                    2e:61:61:55:e9:d0:6d:9f:b7:d2:9c:a5:f0:ba:1f:
                    67:38:cf:ec:52:cf:85:f3:f0:b4:95:24:84:5f:2b:
                    31:8f:35:2e:6a:b6:4d:96:b4:e0:68:c2:35:5a:f6:
                    ed:9c:3d:05:c5:05:55:8a:88:fb:7a:69:ce:f6:3f:
                    41:9b:ef:ca:2b:1c:2f:48:8f:64:db:9d:20:26:02:
                    59:bc:84:20:e2:bc:ec:4c:2a:02:5b:fc:3c:23:56:
                    57:5d:05:84:18:f1:3b:f3:e4:9f:ec:ce:ce:2c:61:
                    e0:e6:6d:b4:f3:95:53:88:d0:23:5b:43:11:9b:cd:
                    c5:ce:38:26:bd:0d:3d:dc:bc:e8:90:7f:d3:36:23:
                    44:2c:0f:5f:6e:bc:34:b8:a5:e6:af:2d:95:1b:19:
                    0b:4c:ce:b8:7c:27:59:6d:68:e7:8f:92:e7:b1:b3:
                    69:3d:8b:d8:1b:56:12:bb:c7:a8:57:14:db:c6:24:
                    b9:c7:bd:62:bb:25:a4:6b:20:29:02:96:bc:52:cf:
                    c8:a8:20:d9:ea:18:e7:48:86:2b:be:78:19:71:f1:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:31:FD:B6:ED:9E:C9:AE:AF:17:5D:3F:C6:F3:DF:0C:0A:F9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/da715157-9227-3031-a55c-e864ec645b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545/65b4abb1-58ea-4d3f-9703-22438ac9f545.crl

            X509v3 Authority Key Identifier:
                keyid:4C:B1:9D:56:90:A5:12:83:ED:D3:0D:47:A7:93:1A:18:39:44:CC:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65b4abb1-58ea-4d3f-9703-22438ac9f545.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.73.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:55:b2:4c:4a:a4:27:a3:19:d9:5d:72:55:da:88:39:6d:5b:
         aa:7f:56:84:0a:a6:3a:3d:fa:16:23:0b:bc:9a:29:2d:be:37:
         fe:60:dd:a9:40:c6:cd:10:4f:0e:50:90:60:9e:3f:18:f7:14:
         53:3a:f5:30:09:74:aa:12:88:89:d4:5b:81:57:3c:c2:82:c4:
         d0:15:59:c2:4c:e8:01:6b:65:cf:b6:29:53:28:6e:34:86:39:
         69:1a:70:fc:5f:ed:0c:97:89:74:ac:16:df:64:1f:f6:f9:16:
         8f:cd:27:26:3e:3c:90:8e:78:63:ec:a7:69:de:ce:e5:21:88:
         f9:f2:3b:0c:2e:7e:6f:cc:05:25:83:80:b9:a7:65:33:5b:6b:
         ff:85:f3:48:e9:5e:de:c4:37:98:6c:c8:cc:45:e6:57:99:46:
         fc:dd:5b:9c:03:95:89:0d:a7:d1:b4:49:f3:c4:5d:e1:06:e3:
         31:6a:d5:22:1d:78:d2:ff:d7:97:b5:e5:c6:aa:d4:3a:5c:a4:
         10:71:cb:ba:20:3b:43:ab:ff:8c:20:f5:a7:10:04:f6:42:fb:
         31:aa:92:8f:02:a2:a2:30:77:04:ab:6c:26:f7:18:4b:e0:2f:
         85:df:04:a7:41:03:de:ba:2a:44:03:57:b3:66:c0:e0:34:1e:
         62:ed:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:50:21 2026 by rpki-client