Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa
File:                     26b2f441-d85b-3302-8f7a-8191f788c65b.roa (raw, json)
Hash identifier:          hSAflYo6uA2QzBIf8mysMCE/ikKEpKIXOrbC2MkZwtg=
Subject key identifier:   24:8A:60:21:2A:31:6E:1F:12:02:07:5C:5A:D5:80:80:6D:01:7B:E8
Certificate issuer:       /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial:       010D0C9F4328584D91C01BCF2DA9F954A88EBF00
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     15267
IP address blocks:        138.129.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1b:cf:2d:a9:f9:54:a8:8e:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=6f7750a5-2d85-4cec-9c58-f94b0bc62622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:ae:45:8e:e0:ac:af:9e:6d:23:ff:6e:c2:
                    68:62:ab:ba:ac:c5:d9:ae:92:18:3d:34:9a:9e:9f:
                    15:49:71:ff:3b:cb:29:c7:50:6c:63:00:dc:35:5d:
                    b3:a6:28:e1:fc:48:34:41:2f:00:c7:57:9a:8f:9f:
                    5b:d7:58:39:eb:a9:54:02:0e:ba:fe:3a:50:7b:1e:
                    52:22:b1:88:34:fd:86:27:dc:8e:a4:56:3b:a4:b5:
                    a4:c8:e8:84:64:ac:18:56:05:f0:d3:2a:94:87:e9:
                    79:5d:32:90:33:f2:46:3d:43:2c:f7:5b:11:74:f0:
                    b4:9c:57:b0:42:e3:a7:f6:03:26:e6:96:2b:93:df:
                    c6:61:e2:a2:08:de:7e:f7:f5:85:72:44:e0:73:5e:
                    60:9d:6c:02:78:d5:7f:ba:37:c7:15:5e:68:71:f0:
                    fb:3b:0a:07:1d:23:78:d6:d7:19:77:26:9e:6a:55:
                    5d:a8:95:87:70:21:a8:95:bc:1c:3f:31:01:f0:c8:
                    b4:4c:ab:e8:d6:2d:e6:4c:77:8e:a1:3d:ff:c4:92:
                    f8:8c:c1:01:96:7a:ec:e7:5b:3a:d7:c2:ba:86:dc:
                    77:73:45:ae:ec:35:58:ca:3b:2f:ce:49:27:14:50:
                    85:ae:66:29:4a:21:2f:9b:4d:25:55:b9:f4:f3:ed:
                    40:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8A:60:21:2A:31:6E:1F:12:02:07:5C:5A:D5:80:80:6D:01:7B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/26b2f441-d85b-3302-8f7a-8191f788c65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl

            X509v3 Authority Key Identifier:
                keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.129.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:1c:ee:68:32:45:f6:bd:ff:7e:d9:f3:3e:c9:2a:90:1d:
         76:43:19:4d:32:d4:2b:81:69:98:43:fe:02:7b:a7:8d:08:c0:
         48:2b:8d:98:fd:30:bd:9a:03:91:8b:33:5f:97:38:97:af:03:
         a1:0a:dd:c0:13:81:3a:4d:ac:c7:46:0b:d8:37:f4:c3:d0:22:
         e1:df:f5:43:fa:e3:3c:af:2f:6f:2c:2a:8c:f5:10:93:93:b4:
         48:87:98:ec:ad:28:5b:69:eb:6b:55:b3:27:54:f3:ae:61:ee:
         7c:64:be:9f:17:84:bd:a8:38:2a:ba:cb:82:2d:f8:a4:e1:41:
         ff:30:50:5a:76:9d:5f:d1:14:44:2d:f3:0f:1f:a7:bf:06:f1:
         9f:1a:1f:c5:25:75:64:4c:2d:e3:fb:a8:73:c3:0e:7c:74:e6:
         fb:d7:09:97:2f:16:a7:17:05:0e:e5:40:ec:37:1a:44:c4:b8:
         cb:a1:b2:1a:c4:e1:34:b0:3f:42:a3:14:c3:38:35:02:f3:7f:
         53:67:d8:3d:5f:d2:63:57:ca:8b:40:3a:f8:0a:f1:af:61:66:
         d3:d0:96:46:2a:d4:bc:3b:36:11:1c:c0:6d:96:02:cf:38:31:
         1b:b9:d0:2a:da:0d:df:c4:6a:5e:f4:d4:3a:7e:27:2b:18:ee:
         08:b1:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:52 2026 by rpki-client