Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa
File:                     7405a99a-393f-3196-80ba-b4ad1406ad44.roa (raw, json)
Hash identifier:          RyHDcKrGBJweOLNWbrUuyCkVLgZ49oj3Z5ZUNyzf/TA=
Subject key identifier:   00:7B:5D:0F:0B:35:EF:45:45:04:32:20:D1:3C:9C:77:26:0F:91:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B1C3710DE5D07C195D374C5D8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     701
IP address blocks:        138.89.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:10:de:5d:07:c1:95:d3:74:c5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=e8ac22f6-b974-45d2-b383-46c9f5fb878f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:96:7f:b0:c4:9b:40:e0:22:8b:28:ba:6d:
                    db:9a:02:1b:bf:b7:fb:2b:7f:53:b5:b7:7d:93:50:
                    cb:89:7a:fe:d9:94:53:cf:5e:d8:eb:01:de:51:68:
                    53:4d:b3:3f:af:2d:06:08:40:fb:0b:d7:df:58:76:
                    58:5c:86:73:f0:8d:fe:c2:21:cb:18:0b:26:79:1e:
                    f3:bb:52:2d:b1:30:47:9d:99:fe:92:7b:b8:62:9a:
                    a9:c7:96:74:b5:77:cc:1e:71:db:aa:7d:7b:ba:88:
                    ff:54:fd:78:5d:58:41:05:e0:e3:34:72:74:83:54:
                    60:42:c9:06:1e:47:63:54:61:47:e8:fc:fe:03:b7:
                    c6:3e:83:b5:f8:ec:7a:14:c1:bd:fe:e7:25:c8:3e:
                    11:8e:ee:66:40:d4:99:03:cd:30:98:57:c5:a9:6f:
                    93:dc:6f:dc:b5:db:93:35:22:86:5e:0d:4d:95:ec:
                    c4:16:9a:80:c5:97:7b:67:f6:2d:4f:47:1c:b6:2a:
                    d9:eb:ef:88:58:00:91:d5:5d:c0:f9:0c:f4:db:e6:
                    2e:f8:af:a6:ac:59:7d:c8:ee:88:02:80:81:88:99:
                    95:9d:cb:65:22:ed:36:0b:b1:e2:a8:8f:de:67:87:
                    2c:23:2d:eb:8f:73:1c:10:8c:0a:8c:cc:14:f7:db:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7B:5D:0F:0B:35:EF:45:45:04:32:20:D1:3C:9C:77:26:0F:91:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7405a99a-393f-3196-80ba-b4ad1406ad44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.89.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2d:96:07:1e:63:c7:6d:b9:de:c4:8a:cf:07:e4:78:1a:ef:
         37:33:19:d2:c8:ed:78:89:1d:fd:67:0d:72:8f:13:42:9b:ac:
         aa:f2:4d:96:d1:9b:c5:a9:e5:ab:89:d0:4a:62:0b:4d:2a:63:
         db:28:9e:c0:67:78:bc:d1:75:5c:59:55:8c:41:6c:0f:36:c7:
         7f:91:cb:e7:a2:81:ab:5a:45:65:c3:3b:bc:13:32:cf:89:d0:
         b5:2f:2f:a0:87:e0:8c:37:99:94:c4:c2:21:7c:9c:b3:aa:16:
         49:bd:25:af:33:c1:a8:50:e5:6f:a4:ca:96:39:91:17:c4:20:
         02:05:f4:10:fe:e4:86:7c:a8:ee:0e:16:75:44:fb:d4:01:d9:
         47:d0:90:39:2b:d9:2c:dc:95:75:bc:61:d8:db:94:f8:60:00:
         c1:05:01:35:04:72:74:b2:10:45:03:c9:22:b5:54:a2:50:6f:
         1b:cc:3a:21:78:ba:81:35:ee:b4:5a:fc:9a:8c:13:57:3b:5c:
         c4:5c:d1:70:f6:3b:6d:ac:47:ba:f0:5a:5d:24:83:24:5a:c7:
         5f:84:2a:bf:1c:2f:15:61:5c:97:1b:77:ea:47:18:d9:7d:50:
         88:1d:af:c6:9f:4d:88:80:36:55:e6:1d:9f:33:69:ce:1f:93:
         5e:f6:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:29 2025 by rpki-client