Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa
File:                     37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa (raw, json)
Hash identifier:          pBg22058KhxUq9JNMOASX0hZFKsRZEPPkGxL690VJN8=
Subject key identifier:   86:FB:0D:A3:A0:AB:9B:4F:C2:45:3E:57:6A:A7:4F:71:3D:DE:06:31
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584F2527A6D6657F3396F77E8B80
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     18701
IP address blocks:        138.32.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:a6:d6:65:7f:33:96:f7:7e:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=2b23e7b7-b1e4-4752-9947-31248bb14962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:2d:7b:43:11:ee:40:f9:7e:91:78:b0:70:
                    bd:db:7c:2f:bc:80:a9:20:e5:1f:04:f8:37:6e:67:
                    56:c8:af:a9:a2:54:73:74:fa:99:aa:33:72:88:c0:
                    32:a8:a8:7a:dc:cd:5f:e4:38:e6:d9:1b:52:78:b2:
                    11:62:1d:9c:91:52:91:83:d0:c2:0c:6d:8f:de:f0:
                    e3:fc:4a:a5:58:e2:fa:24:41:f2:24:d2:85:79:2b:
                    1d:b3:f4:4b:83:15:66:a1:fc:39:8e:2d:34:23:84:
                    c7:e4:d6:50:9d:b8:f2:83:c3:a4:e5:c1:4f:5c:31:
                    a3:93:6f:cd:e6:2f:0f:38:0a:18:de:59:45:0a:ad:
                    3d:1c:7e:97:6d:b5:d6:f3:ef:9a:d6:84:dd:c6:97:
                    dc:38:2e:80:7f:f3:a4:bf:46:5d:08:a1:02:f8:98:
                    a8:2e:e3:ee:b0:b2:53:e9:83:a0:94:e0:56:76:8e:
                    3c:b6:d6:f6:da:9f:0e:08:3f:77:f4:e3:a4:86:76:
                    4e:c5:47:78:b0:4c:d9:0b:0b:12:64:14:fa:70:7a:
                    b4:e2:d4:43:0b:b9:ec:3e:ae:eb:6e:71:c4:a9:0c:
                    67:30:ce:d5:89:66:a7:7c:a8:46:9d:7a:2c:87:27:
                    2a:a3:8c:c8:77:5d:e8:df:71:5c:f2:51:d9:b5:a9:
                    76:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FB:0D:A3:A0:AB:9B:4F:C2:45:3E:57:6A:A7:4F:71:3D:DE:06:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:e2:95:21:b1:6b:a7:bb:16:8c:c1:cc:6e:a4:35:a7:b0:c5:
         2d:54:71:8c:75:4d:81:6b:6a:be:c2:84:4d:c4:0a:52:70:9f:
         d8:11:d5:c0:2d:37:b1:56:7c:c3:91:74:e0:8b:18:aa:8e:43:
         c1:7f:c1:63:97:b4:ce:9a:15:46:27:91:fe:ed:38:62:b9:15:
         be:10:b4:d8:75:75:4b:ae:66:e5:e1:9e:ed:2f:88:5b:03:ac:
         80:e9:01:cf:a3:f6:43:8d:5e:38:c8:86:02:88:c9:de:8e:10:
         08:1c:25:f4:be:ec:d5:f8:52:07:35:40:18:f4:f4:21:57:e1:
         d6:e3:62:80:b0:be:ac:72:c5:34:ad:33:61:52:d3:fb:8f:ef:
         be:e6:9c:b6:d9:30:5d:d4:d8:d2:42:3a:ab:9b:b5:9c:87:b7:
         6f:9f:54:73:c3:da:d6:e1:48:0a:dc:37:9e:8b:24:dc:ec:59:
         c1:dc:d9:4b:70:fa:0e:20:b8:85:e4:e6:51:19:e4:aa:74:6e:
         06:ec:46:e2:74:59:d5:e2:3d:ca:ef:81:b3:b2:ac:37:d1:4b:
         3a:29:f2:25:30:37:39:25:f3:6d:1d:d7:1e:65:a9:de:c7:75:
         9f:ad:f8:65:7d:f0:1c:45:59:50:4c:02:59:b3:e1:28:bf:28:
         76:9e:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:56:44 2026 by rpki-client