Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa
File:                     690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa (raw, json)
Hash identifier:          kaRoHlhhUaXafm4Q6oz+KIB99AluEFx+KZalTzfBZfU=
Subject key identifier:   A3:C8:98:41:4A:F1:41:5A:F6:E4:D9:84:EF:70:B3:F0:58:18:C2:32
Certificate issuer:       /CN=7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15
Certificate serial:       010D0C9F4328584AE61B3F5443995A02219FCDC0
Authority key identifier: 10:74:DD:6E:EF:AC:12:B2:27:DE:B6:E7:12:73:19:6F:27:14:AA:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa
Signing time:             Mon 18 Aug 2025 15:51:35 +0000
ROA not before:           Mon 18 Aug 2025 15:51:35 +0000
ROA not after:            Sun 16 Nov 2025 16:51:35 +0000
asID:                     16623
IP address blocks:        139.48.0.0/16 maxlen: 16
                          142.199.0.0/16 maxlen: 16
                          198.161.2.0/24 maxlen: 24
                          198.161.3.0/24 maxlen: 24
                          198.161.4.0/24 maxlen: 24
                          198.161.12.0/24 maxlen: 24
                          198.161.13.0/24 maxlen: 24
                          198.161.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:1b:3f:54:43:99:5a:02:21:9f:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15
        Validity
            Not Before: Aug 18 15:51:35 2025 GMT
            Not After : Nov 16 16:51:35 2025 GMT
        Subject: CN=7bdbdd79-6480-4c9e-8f63-f6ad899dbb4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:62:3d:d5:92:cf:24:f9:3d:99:ae:64:0b:
                    3a:7b:c2:51:0e:71:16:94:56:ce:8e:f4:6b:44:e8:
                    65:61:8b:6e:ba:7d:38:10:3c:b3:ec:56:cb:52:cb:
                    47:ee:65:5a:74:94:2c:f8:33:23:27:45:d1:97:9a:
                    b0:09:48:4e:3e:28:75:48:86:59:43:17:18:4f:f1:
                    c8:67:4a:f4:57:a1:28:fb:09:97:92:92:09:62:15:
                    02:a3:fe:e2:77:5f:32:ec:21:63:59:69:80:d5:68:
                    7d:49:1f:43:6d:fd:f7:b4:73:53:51:13:e6:21:6f:
                    94:69:64:05:71:8a:e4:bc:45:ea:6f:90:31:50:31:
                    7c:0b:1d:95:88:f5:49:d4:98:51:4c:4e:ee:17:e3:
                    6c:fb:9c:e8:40:c8:9f:d0:e6:93:97:04:1a:8f:40:
                    92:44:26:a3:69:60:7d:b0:56:9d:14:b2:b5:43:97:
                    dc:13:4c:b8:c9:86:24:95:91:52:6e:25:1d:83:52:
                    8c:16:7a:8d:cc:58:27:14:8d:40:cf:88:46:77:38:
                    38:93:31:5b:52:08:89:d4:34:88:53:4d:fc:b6:65:
                    d1:7b:6a:6c:4d:73:a9:54:f1:c3:6d:0a:ea:bd:d1:
                    30:75:a0:b3:f3:ad:ab:f9:2e:6c:81:42:3e:e8:26:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C8:98:41:4A:F1:41:5A:F6:E4:D9:84:EF:70:B3:F0:58:18:C2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/690d3bc7-56b3-3534-961c-23d1f2a2fce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.crl

            X509v3 Authority Key Identifier:
                keyid:10:74:DD:6E:EF:AC:12:B2:27:DE:B6:E7:12:73:19:6F:27:14:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7fbbaebb-b1ac-4ad6-ad81-c43e248d9c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.48.0.0/16
                  142.199.0.0/16
                  198.161.2.0-198.161.4.255
                  198.161.12.0/23
                  198.161.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:f3:a3:94:21:92:f7:1f:8f:e6:70:4e:16:b8:9d:11:18:
         96:cc:9f:0e:97:c9:aa:cf:fa:81:c4:61:a4:ea:06:63:59:5e:
         a1:11:30:93:b4:2d:01:bb:62:fb:47:88:dc:26:6b:f7:c0:b9:
         ee:e1:77:7c:0d:b3:78:75:01:17:06:d3:be:3c:be:cf:9a:6f:
         88:f2:e0:ef:a6:9f:2a:7d:cf:4a:13:06:47:63:2f:9d:a7:63:
         c9:7a:0c:3a:58:53:06:73:d9:5e:33:47:b6:03:19:10:20:b7:
         21:06:8c:e2:05:35:ad:d9:13:4c:b0:86:b4:2a:98:f8:42:b5:
         e5:0e:ba:fd:0e:d1:a5:99:d6:72:34:db:31:cb:b0:82:09:0f:
         95:ff:13:04:30:b6:0c:f6:e3:c5:5c:0d:c0:2c:8a:6f:3b:65:
         c4:36:60:36:af:5b:23:21:a6:26:64:1c:c7:27:94:69:7e:96:
         64:ac:8f:15:f3:05:0f:d6:94:95:16:3a:7c:78:e1:f5:79:ff:
         d6:bf:73:35:4e:ec:ec:f2:42:4d:04:b7:35:16:db:0a:ba:80:
         5e:84:32:1e:ac:52:70:dc:3a:28:7f:43:bb:28:b7:f6:c7:99:
         cf:3c:1d:79:aa:f1:ba:e5:76:d8:53:fc:27:40:1a:b1:76:a0:
         11:e9:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:25 2025 by rpki-client