Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa
File:                     61e58f86-7769-3387-930a-92d295890166.roa (raw, json)
Hash identifier:          /5vR8t/qykyKZq6gTrjnwMtOjtnLondNKssclbmMA2Q=
Subject key identifier:   C1:1C:A2:1D:40:78:0E:E1:59:F8:5C:98:25:25:14:DC:64:D3:D6:60
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584E842A3D3A646996C7EAE02D40
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     18701
IP address blocks:        138.32.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:3d:3a:64:69:96:c7:ea:e0:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=e76e8154-61a6-4bba-9d47-f9a7d76bc621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:e0:9c:62:de:71:fa:ee:06:19:44:1b:72:
                    c7:47:d5:42:23:09:89:8c:a7:66:14:dd:48:8f:74:
                    c1:ff:5d:94:2f:e4:11:ec:64:7a:91:4a:c1:d0:79:
                    f3:15:df:c9:c2:b5:39:48:33:c7:64:1b:a3:ee:50:
                    63:ea:c4:31:91:15:05:dc:60:d3:44:38:a3:5b:e3:
                    97:b6:17:a9:8c:f1:e0:9a:f7:3d:59:cb:bd:9c:30:
                    fe:2c:f8:51:c0:db:64:8c:1f:d6:5e:21:5e:a8:38:
                    b9:54:46:64:2b:c4:08:e4:bc:d2:6d:a3:bd:d4:18:
                    94:ed:f3:b9:80:76:f1:9c:ae:59:08:7a:d3:27:9f:
                    78:3a:b4:78:ed:4a:57:91:63:3d:a9:70:d2:01:c9:
                    c5:f9:74:b6:1b:4d:f4:ae:c7:79:cb:ec:df:6c:6c:
                    a9:d4:63:b0:52:52:88:58:43:7c:59:55:9a:a0:24:
                    3f:b5:8e:2e:6b:d8:a4:00:60:f1:d0:c5:05:7f:43:
                    8d:c0:72:1d:b8:a4:d3:5a:43:c3:75:d6:4f:80:e1:
                    c5:7c:f2:e7:86:9e:c4:78:50:cb:6c:ba:72:75:9a:
                    41:f6:23:f9:b6:a2:1d:50:47:63:25:99:bb:5b:f6:
                    68:43:05:23:34:38:69:1c:22:f2:89:09:f0:5a:f7:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:A2:1D:40:78:0E:E1:59:F8:5C:98:25:25:14:DC:64:D3:D6:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/61e58f86-7769-3387-930a-92d295890166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:ae:00:4f:ed:c7:46:dd:9b:5a:c3:ba:7e:cd:1d:7a:b2:c2:
         e5:fa:7e:cc:18:92:d0:58:10:63:88:a1:14:01:3a:5e:c1:dc:
         d8:5d:50:3d:18:49:d4:61:d0:a2:dc:8e:48:03:8f:5b:21:99:
         b4:8e:0e:4e:f7:a5:c7:44:aa:87:ec:fd:b2:50:b5:f9:e2:b6:
         b1:5c:44:08:c7:d9:88:8a:7e:08:9f:e2:f7:b8:57:96:71:c5:
         7a:02:84:38:97:de:34:ba:b7:b9:ad:15:66:fd:51:67:79:a9:
         d2:5b:58:e9:9f:f2:c2:2a:c1:2f:52:78:80:c5:de:74:32:e6:
         7f:25:f9:22:dc:da:b8:b5:d9:cc:36:24:e0:02:4e:b3:f3:d2:
         7f:bf:0c:e7:2f:43:95:fd:2b:f7:44:33:cc:fb:64:c9:d6:08:
         56:00:f3:82:31:ca:c3:3b:cf:f2:b2:24:f9:0d:97:01:97:66:
         a3:d4:6a:fc:1c:c7:2a:22:ab:93:f2:1a:85:8d:8e:1c:1c:90:
         e3:56:9d:8c:a2:68:40:31:85:3f:33:62:d0:b6:9c:11:24:c8:
         63:d8:74:bf:d1:7b:96:07:86:08:cf:59:55:8a:da:08:0b:52:
         22:94:04:f7:4a:03:0c:f3:4f:d2:be:f2:63:42:fd:9e:06:9d:
         3f:67:f1:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKj06ZGmWx+rgLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
ZTc2ZTgxNTQtNjFhNi00YmJhLTlkNDctZjlhN2Q3NmJjNjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7HgnGLecfruBhlEG3LHR9VCIwmJjKdmFN1I
j3TB/12UL+QR7GR6kUrB0HnzFd/JwrU5SDPHZBuj7lBj6sQxkRUF3GDTRDijW+OX
thepjPHgmvc9Wcu9nDD+LPhRwNtkjB/WXiFeqDi5VEZkK8QI5LzSbaO91BiU7fO5
gHbxnK5ZCHrTJ594OrR47UpXkWM9qXDSAcnF+XS2G030rsd5y+zfbGyp1GOwUlKI
WEN8WVWaoCQ/tY4ua9ikAGDx0MUFf0ONwHIduKTTWkPDddZPgOHFfPLnhp7EeFDL
bLpydZpB9iP5tqIdUEdjJZm7W/ZoQwUjNDhpHCLyiQnwWvcqZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEcoh1AeA7hWfhcmCUlFNxk09ZgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNjFlNThmODYtNzc2OS0z
Mzg3LTkzMGEtOTJkMjk1ODkwMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6uAE/tx0bdm1rDun7NHXqywuX6fswYktBYEGOIoRQBOl7B3NhdUD0Y
SdRh0KLcjkgDj1shmbSODk73pcdEqofs/bJQtfnitrFcRAjH2YiKfgif4ve4V5Zx
xXoChDiX3jS6t7mtFWb9UWd5qdJbWOmf8sIqwS9SeIDF3nQy5n8l+SLc2ri12cw2
JOACTrPz0n+/DOcvQ5X9K/dEM8z7ZMnWCFYA84IxysM7z/KyJPkNlwGXZqPUavwc
xyoiq5PyGoWNjhwckONWnYyiaEAxhT8zYtC2nBEkyGPYdL/Re5YHhgjPWVWK2ggL
UiKUBPdKAwzzT9K+8mNC/Z4GnT9n8U4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:48 2026 by rpki-client