Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa
File:                     da6ce676-be40-3db9-aa5a-1d4b82892db2.roa (raw, json)
Hash identifier:          GSAbVhetLaJw3bewUE2Jm6ns2K6wAIQqV5A1V1+OirQ=
Subject key identifier:   80:B2:F8:51:48:7C:27:43:19:5F:CB:DE:1A:05:10:B0:ED:B5:61:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AE196BC15C7B5D40724BEB880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     22394
IP address blocks:        141.207.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:bc:15:c7:b5:d4:07:24:be:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=608f856c-ce07-410d-8b9d-1a43e565583c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:5f:eb:99:a7:11:d3:c9:7e:fa:71:f5:d0:7f:
                    f7:e3:cf:68:62:97:0e:0a:b7:2c:11:1e:b6:9b:80:
                    75:a5:3f:c9:59:86:28:12:28:1a:72:48:2f:5b:a3:
                    68:16:1a:cf:01:07:99:96:34:73:54:89:9b:be:82:
                    cc:1b:08:cc:5a:f7:55:d7:3a:3e:39:ca:47:58:f3:
                    0b:ba:12:6e:c0:d3:60:ae:ce:b0:be:83:f2:a2:da:
                    72:cb:79:1c:a2:06:aa:8d:6a:f1:d9:94:5e:24:d4:
                    19:36:62:6d:d4:21:1e:e5:51:bf:29:6b:2f:7d:52:
                    e3:33:9b:fa:65:73:55:7e:13:15:8a:04:de:63:29:
                    9b:25:09:da:ae:f3:ab:25:4b:c8:c3:c5:ab:06:2f:
                    f8:28:d5:28:6b:0d:4e:2d:66:5c:f5:94:ed:07:fc:
                    c1:da:79:b9:06:f5:0d:aa:28:c8:8d:8c:3f:4b:ba:
                    a3:d3:2a:f6:c4:da:e5:0a:33:f3:63:7a:39:04:50:
                    64:0f:49:ce:dc:7e:f5:7a:25:47:86:40:6e:cd:0d:
                    63:b7:ce:e8:34:f5:88:cb:48:b5:5a:ae:17:15:e5:
                    f4:b7:fc:3e:cc:cb:1f:85:76:96:4a:3f:76:c7:0d:
                    3f:08:f7:f7:3c:4a:6a:e7:48:0b:e3:12:12:9b:02:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B2:F8:51:48:7C:27:43:19:5F:CB:DE:1A:05:10:B0:ED:B5:61:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da6ce676-be40-3db9-aa5a-1d4b82892db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:3b:53:62:02:42:e2:91:21:4a:aa:59:0b:82:33:95:1b:
         3e:39:1b:ad:1f:56:af:ed:01:ce:de:e2:7b:7a:af:1f:77:9f:
         b7:0c:46:ee:85:aa:97:25:5a:eb:b6:97:08:30:c1:0d:92:86:
         95:a2:30:1b:c5:4f:94:59:67:89:b8:75:5b:a0:60:ae:33:c7:
         1b:64:bd:97:6c:bc:e1:75:f8:c2:87:6d:72:53:e8:fc:64:4f:
         22:50:1d:0d:67:1f:bc:20:28:fc:70:68:52:ce:37:51:10:3d:
         f9:06:c5:68:fa:ce:60:39:b6:65:e4:73:e7:57:5f:48:e7:20:
         5c:41:37:d5:d2:40:6b:9d:70:07:c7:88:5d:37:14:6b:c8:88:
         ce:fe:15:8a:2b:df:66:50:04:88:d0:48:f7:90:e9:a0:20:32:
         12:86:3f:53:74:1d:d3:41:5e:95:3c:79:20:33:06:68:fb:19:
         29:17:90:25:cd:44:6d:08:21:cc:37:e2:1e:05:ad:fe:fb:07:
         fb:e7:4e:f2:e2:dc:76:5f:d1:8a:8b:ad:14:5a:5b:54:45:d3:
         0c:64:12:b4:3e:f5:08:9b:c8:13:00:32:92:cd:44:97:03:11:
         9d:b0:f6:c5:34:42:51:53:23:d0:12:f6:48:25:14:3b:66:98:
         24:60:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:48 2025 by rpki-client