Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa
File:                     54330fd4-6c17-3e7d-a020-c9952dd07be0.roa (raw, json)
Hash identifier:          RjsKOULZvN5HvEIscADSL8t2XWYkgBvYZrjp44BMh/c=
Subject key identifier:   A3:B7:6E:D9:EF:57:B5:38:8C:74:65:A6:12:3F:0C:F5:09:38:2D:72
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584F268CFDF5AEBB426055829700
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa
Signing time:             Sat 12 Sep 2026 13:00:13 +0000
ROA not before:           Sat 12 Sep 2026 13:00:13 +0000
ROA not after:            Fri 11 Dec 2026 14:00:13 +0000
asID:                     18701
IP address blocks:        138.32.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:26:8c:fd:f5:ae:bb:42:60:55:82:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Sep 12 13:00:13 2026 GMT
            Not After : Dec 11 14:00:13 2026 GMT
        Subject: CN=300c3252-5e74-461c-a613-75b7b30fc4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:d8:8d:7b:19:b3:1b:c8:0d:6b:fc:38:67:
                    47:b8:bb:f4:6f:b1:d8:e4:f2:d6:19:13:b4:82:16:
                    37:8e:26:5f:62:dd:9d:f7:ce:b7:20:3b:80:70:5d:
                    ea:5e:19:61:64:15:47:69:13:21:d6:11:ac:c6:01:
                    96:17:4f:de:7d:c0:97:2e:7d:92:66:9f:9b:30:0b:
                    66:ad:b8:3a:48:48:f4:92:c2:3c:d6:e8:3f:eb:41:
                    4c:ff:bf:20:e2:f6:79:f0:05:56:65:0b:cf:09:d7:
                    9b:e4:e2:ab:f0:b7:af:14:07:fd:61:32:3a:76:68:
                    3a:0e:10:c3:80:a2:96:b9:6a:8a:bd:9f:fe:fa:ee:
                    10:a2:3e:3e:14:43:ad:02:cf:eb:bf:bb:96:5c:1f:
                    d6:4a:65:2e:f4:67:65:3d:68:4b:63:1c:4b:7e:35:
                    24:fd:0c:08:7b:8f:84:28:a7:3f:80:af:e0:9f:8f:
                    43:a0:25:ea:7a:48:d4:8e:e6:e5:69:1d:89:80:dd:
                    00:6e:83:ce:c6:28:d3:96:9f:2e:7f:c3:3f:ef:18:
                    e4:74:a0:fb:26:09:6c:f9:98:b9:58:a6:e3:d4:5d:
                    39:8f:d1:cf:ea:1b:de:c3:31:14:7f:33:de:4e:0f:
                    b7:f4:00:fc:91:bb:81:03:5b:08:8c:ee:f5:1b:a4:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:6E:D9:EF:57:B5:38:8C:74:65:A6:12:3F:0C:F5:09:38:2D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:3a:3e:48:f6:8e:79:85:60:54:ac:cf:54:29:a4:25:38:
         d0:76:e5:1f:6e:24:02:48:7e:02:f4:37:c7:8a:7e:91:86:40:
         8f:37:7a:d0:38:33:3c:90:9c:3d:85:ae:57:a5:1d:8c:3d:f6:
         4e:6c:c9:7a:93:9e:a3:1c:6b:db:80:1e:48:e8:9e:1e:48:f4:
         82:a5:6c:ad:fb:ea:c3:bf:eb:80:ee:c7:f7:23:2b:22:36:f1:
         b6:09:25:b8:66:aa:95:fc:8a:8a:93:d1:6e:62:0a:e0:9a:01:
         7a:2c:02:fa:bc:31:e4:b7:27:72:17:13:36:64:de:6f:8a:c5:
         ed:a5:08:6a:71:6c:99:cb:83:2a:fe:b9:db:f6:2b:9b:e3:a0:
         bc:d3:e3:ec:4e:a2:64:59:ed:f0:2d:fc:8a:4a:5e:08:4e:9b:
         d5:da:a2:73:9b:f0:83:12:87:08:39:54:ce:e5:7f:22:24:2e:
         7d:67:c3:f5:98:ac:df:0f:aa:5d:91:3b:94:2b:bc:e0:39:c6:
         15:1c:bf:bc:e0:7e:a0:84:c0:7e:1f:6a:b0:53:20:eb:54:26:
         1a:42:61:81:1c:97:cc:20:b2:18:9e:3e:31:85:24:51:3e:ba:
         3e:34:60:65:26:44:23:21:42:cd:99:ba:aa:d4:ae:ca:8b:80:
         3f:07:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:38:23 2026 by rpki-client