Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa
File:                     a3718297-4e81-307d-a271-7b4c3b10ef31.roa (raw, json)
Hash identifier:          tzC0KKTaEKK+jsFcxvPJVP9JEGVmyRsGv0Ibrvnw1bw=
Subject key identifier:   3E:05:FF:19:A8:1F:27:15:B2:A5:41:7C:20:86:AC:EC:62:3E:21:EF
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584F497562B3E7123507D52E6C00
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        138.133.119.0/24 maxlen: 24
                          138.133.132.0/24 maxlen: 24
                          138.133.133.0/24 maxlen: 24
                          138.133.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:62:b3:e7:12:35:07:d5:2e:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d37c190d-9965-41dc-a85a-3c2964c6e2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:c7:a3:c8:aa:0d:d8:9a:f0:e1:93:06:a9:
                    fd:8f:dc:45:b4:52:54:3a:81:1b:d0:dc:4b:e6:d8:
                    1b:b9:84:1c:11:b7:0c:73:a6:63:3a:ea:12:56:10:
                    e9:db:9e:a6:f2:9d:a0:08:d4:cf:80:86:98:7e:6d:
                    88:f8:32:b7:44:32:d4:ad:25:6c:72:75:ee:fd:e8:
                    c6:cf:bd:df:26:2f:4d:9e:e9:60:d6:8e:91:28:63:
                    ea:a4:2f:5a:f3:ac:e1:fd:02:3b:30:65:0f:b1:07:
                    ab:d5:23:46:bf:aa:e7:7f:de:82:0e:7b:67:90:8d:
                    43:7a:8f:86:df:83:4c:d9:02:30:51:80:17:fc:62:
                    3d:8b:a2:e1:38:1c:ca:10:1f:50:ef:d6:44:68:95:
                    3c:45:e0:92:25:a6:29:5b:1b:1b:d0:f9:6a:7f:bf:
                    44:a1:4a:5d:54:61:74:2f:eb:75:8e:ee:a7:b3:f1:
                    b4:f4:92:54:9b:30:f3:b4:72:21:9d:3c:b0:2f:39:
                    5c:27:01:11:36:fd:5a:1b:0c:aa:eb:33:11:f1:78:
                    5a:8d:86:28:30:ca:e6:5a:ba:12:5e:48:bd:7b:cd:
                    b4:d0:fe:91:46:94:cb:29:5b:2d:ac:01:76:d1:2b:
                    95:4f:0f:66:93:8b:c6:85:77:bb:dc:6d:e1:a6:f0:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:FF:19:A8:1F:27:15:B2:A5:41:7C:20:86:AC:EC:62:3E:21:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/a3718297-4e81-307d-a271-7b4c3b10ef31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.119.0/24
                  138.133.132.0/23
                  138.133.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a1:03:22:27:9d:bd:12:f6:a1:67:6d:c4:f0:96:6e:4a:1f:
         dd:ac:93:b7:36:7a:20:8b:5d:8b:a3:a2:24:88:de:7d:4b:5a:
         95:4d:fa:a5:a1:c6:01:16:46:a7:f7:62:bf:72:f4:74:84:2a:
         be:e2:d1:97:ef:c3:75:10:4b:10:79:50:c1:8f:8a:4e:87:c4:
         d2:f6:6b:9f:29:16:c4:3e:b3:56:c6:29:20:79:2b:8b:cd:d3:
         63:11:ca:4e:c2:cb:5e:7f:27:5e:d6:fd:ca:f4:94:59:e2:bc:
         97:a5:d3:95:2e:73:f0:db:b7:a8:d7:24:6a:da:e8:6d:35:4b:
         8f:e3:03:0e:cd:e2:30:b5:1d:c5:a8:de:4e:e2:43:5d:19:fe:
         3e:4c:81:51:85:31:82:41:f3:86:31:f3:8e:2b:ca:97:3d:c8:
         6e:03:fa:d9:f9:ac:8a:dd:c0:b6:0c:d0:2f:0e:9f:90:1b:1b:
         6a:43:b5:57:74:1c:4f:a4:07:cb:63:2a:41:ed:de:df:3f:9c:
         c6:55:50:ba:15:2b:8f:3b:64:f8:20:d8:e3:ad:3d:b7:cb:7d:
         ac:f4:0d:85:65:92:1f:e4:f2:95:52:3c:cd:3b:3a:a3:d1:a5:
         13:6a:23:78:2e:91:17:48:45:c8:df:bd:87:5f:07:96:28:c2:
         76:4f:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:31:18 2026 by rpki-client