Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b639050-b542-3c77-85cc-8961aafcd805.roa
File:                     6b639050-b542-3c77-85cc-8961aafcd805.roa (raw, json)
Hash identifier:          /mtxH0Zm60O924QTYuM2cDKUioPqaq7brtfb7vwmfdE=
Subject key identifier:   D0:6D:13:41:A7:C0:8D:7F:B2:62:F6:8A:7B:B8:D3:1A:26:44:6B:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A5A3070CE123EACF4438DEA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b639050-b542-3c77-85cc-8961aafcd805.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     63949
IP address blocks:        139.144.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:70:ce:12:3e:ac:f4:43:8d:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=bec1cf87-514a-47cf-b48a-a9eb0bd4e12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:30:a1:51:d7:3c:f8:ba:ff:05:97:90:74:
                    bb:e7:ec:85:60:03:1f:01:c7:04:47:7d:b8:b0:a3:
                    ab:4e:4b:44:84:9c:b7:17:95:15:a8:7e:20:f2:6b:
                    66:bc:bf:c7:e2:43:bb:b8:1f:ad:bc:6d:6b:4e:5e:
                    35:3c:45:bf:5a:a9:ad:06:7f:f4:96:35:bf:fe:e5:
                    9f:46:c0:95:98:78:47:28:16:92:ac:d0:03:24:24:
                    90:a9:1a:7c:16:97:30:eb:c3:9c:87:26:f6:15:e9:
                    f8:0c:34:c3:20:6e:bf:03:e0:3b:38:67:9c:5a:07:
                    2f:4c:b9:1f:7f:ec:b6:8e:43:e2:be:57:44:bf:42:
                    34:67:0a:c0:21:f5:ad:24:64:df:55:a0:44:c8:66:
                    3c:80:35:85:fd:94:3f:2a:c2:5f:ba:80:a9:12:03:
                    1b:81:cf:b2:f7:b4:92:49:03:37:51:ca:be:0c:d2:
                    ab:85:08:63:db:72:49:b0:1c:ef:71:d7:66:cd:5c:
                    74:ec:5a:b8:80:b1:53:df:cf:bc:83:78:92:43:fd:
                    63:9e:b0:19:29:2f:fd:9b:30:2f:df:6a:bd:29:2e:
                    29:6c:36:1f:0f:27:46:a6:20:fd:ce:2c:fb:d8:0e:
                    b9:1e:f9:2e:fc:62:08:2b:f3:23:f5:05:3a:a8:44:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:13:41:A7:C0:8D:7F:B2:62:F6:8A:7B:B8:D3:1A:26:44:6B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6b639050-b542-3c77-85cc-8961aafcd805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.144.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:3e:23:f4:8e:62:f6:ff:1c:d0:cf:18:1b:04:78:77:8c:
         2c:45:d5:ca:b8:d7:4f:68:89:4f:88:4d:c9:6b:76:0b:2a:b7:
         48:f1:55:96:cb:70:53:8e:ec:fb:9a:cd:1e:39:27:57:a0:10:
         cc:a6:e0:40:b9:da:ff:ce:bb:50:3d:ca:76:31:79:a7:8b:8e:
         93:5e:f8:c1:61:1b:05:c1:7b:a1:85:4e:48:e5:1e:cf:48:1e:
         bf:a0:f0:bb:39:42:c9:b0:18:76:f2:92:30:89:e7:be:76:43:
         51:8e:d0:32:36:04:40:75:ed:58:f6:56:bb:ee:25:da:be:13:
         2d:4c:17:de:8d:46:67:4d:27:78:65:03:4a:aa:41:b9:35:53:
         8b:45:25:e0:4b:3b:80:24:21:70:42:3a:33:12:a0:51:55:ce:
         43:f7:4a:eb:75:45:29:6d:e9:db:43:c0:4e:d4:0d:d0:32:c5:
         03:83:ee:f0:6b:ce:bf:83:d6:0c:c4:6b:0e:f6:f0:50:16:3e:
         d2:03:d2:7d:3d:e5:0b:24:53:04:51:e2:34:10:b8:79:35:3d:
         8e:92:5c:5a:67:22:5b:37:78:6f:b7:31:db:01:6d:59:15:7f:
         3b:14:0e:6e:32:ee:e0:d1:72:d9:76:54:c3:64:c2:02:25:94:
         a3:6e:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 12:46:28 2025 by rpki-client