Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa
File:                     762af5d8-04f6-3dec-a82b-5142c1164eb3.roa (raw, json)
Hash identifier:          fvPjr6IqNqqEk3wl49oZvDaiOZ+BBy54aixDpSd4A98=
Subject key identifier:   62:0E:17:3B:28:42:7F:E2:2D:C0:83:72:81:6D:CE:B7:F9:B0:94:27
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584F2527AD45504A2F1A6191AA00
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa
Signing time:             Sat 12 Sep 2026 01:00:12 +0000
ROA not before:           Sat 12 Sep 2026 01:00:12 +0000
ROA not after:            Fri 11 Dec 2026 02:00:12 +0000
asID:                     18701
IP address blocks:        138.32.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:25:27:ad:45:50:4a:2f:1a:61:91:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Sep 12 01:00:12 2026 GMT
            Not After : Dec 11 02:00:12 2026 GMT
        Subject: CN=6315baad-945c-489c-9898-e73d9775ce45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:7e:a5:47:89:24:7c:ca:1a:a9:92:de:d1:
                    ef:00:55:c6:43:28:9d:8e:1b:71:d0:ae:08:6c:0c:
                    d2:5e:61:90:fe:43:f1:9c:5b:8f:80:f5:94:84:ff:
                    5f:19:04:6a:b5:4e:7c:92:c5:26:01:ee:81:7c:74:
                    1a:44:bf:27:15:74:c8:18:e3:61:f0:f7:56:ff:8b:
                    5c:fc:f2:bf:5d:4d:1e:93:e7:f0:f6:dd:a1:12:88:
                    06:25:5d:1d:30:64:cd:7f:c2:e4:82:84:a1:a7:0c:
                    70:58:b7:fe:e6:e9:11:58:35:d0:22:4b:e5:1f:9c:
                    ed:71:51:24:2b:f2:76:8a:b4:31:fe:e5:25:e0:7a:
                    30:4a:cc:09:7f:ca:56:a7:32:b2:9a:18:fe:75:55:
                    15:d2:ed:35:c7:6f:3a:fd:88:e1:b2:2a:b4:df:79:
                    35:b9:fd:aa:4e:47:73:44:d5:45:88:a3:b1:13:32:
                    3c:94:51:41:a6:44:9c:17:0b:48:05:d9:d4:b5:92:
                    b1:0c:cf:fb:6c:4a:be:bd:c1:c5:eb:6f:29:a9:df:
                    be:00:3b:96:55:cc:2e:6b:69:c1:58:c5:3d:73:d8:
                    23:b5:2d:04:e7:28:9d:43:c1:19:05:92:89:d4:f4:
                    9c:e7:64:68:9f:48:fc:b1:17:c4:06:c0:2a:ae:e4:
                    e7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:17:3B:28:42:7F:E2:2D:C0:83:72:81:6D:CE:B7:F9:B0:94:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:51:d7:bf:25:0b:af:de:fe:ac:4e:c5:ac:68:a3:90:d1:
         c2:d0:6c:51:56:f2:d9:1b:ed:34:bd:7c:d0:7f:38:f3:21:84:
         fd:20:b8:0f:9d:02:c8:ff:52:31:e3:38:4d:82:fc:8c:8a:8a:
         6c:75:4e:06:f6:04:ff:8d:20:41:c6:e5:a1:a8:04:b6:a0:a3:
         37:d8:78:b5:8d:5a:d2:2f:99:00:36:9a:4f:24:cd:5d:3a:2e:
         67:89:29:6c:70:a5:95:59:12:e9:a0:03:78:02:80:4f:6e:69:
         6b:32:08:7b:af:f3:ae:eb:ca:26:dc:60:bc:01:0a:28:f5:24:
         01:0a:8f:db:9d:10:1d:b9:bc:87:49:68:24:af:0f:38:d9:9c:
         1a:2f:e7:fc:8b:59:54:6a:55:ff:6a:21:49:e6:f8:a3:e6:ac:
         d5:89:06:8e:1b:46:0e:a8:ac:56:ea:7c:94:9a:2d:95:b5:e8:
         ff:71:da:dd:ac:de:88:38:dc:c5:18:b3:a5:4a:9d:5c:76:b9:
         c3:9f:3d:2e:85:07:22:a5:13:bb:aa:ef:4f:a3:53:3c:7a:64:
         87:6a:94:7c:81:fe:6e:96:5c:65:f1:1e:dd:81:2b:05:ce:d4:
         4e:f3:87:3c:15:c2:67:21:55:b5:f0:95:1f:e5:17:2f:59:63:
         45:87:47:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ61FUEovGmGRqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk
NjMxNWJhYWQtOTQ1Yy00ODljLTk4OTgtZTczZDk3NzVjZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvN+pUeJJHzKGqmS3tHvAFXGQyidjhtx0K4I
bAzSXmGQ/kPxnFuPgPWUhP9fGQRqtU58ksUmAe6BfHQaRL8nFXTIGONh8PdW/4tc
/PK/XU0ek+fw9t2hEogGJV0dMGTNf8LkgoShpwxwWLf+5ukRWDXQIkvlH5ztcVEk
K/J2irQx/uUl4HowSswJf8pWpzKymhj+dVUV0u01x286/Yjhsiq033k1uf2qTkdz
RNVFiKOxEzI8lFFBpkScFwtIBdnUtZKxDM/7bEq+vcHF628pqd++ADuWVcwua2nB
WMU9c9gjtS0E5yidQ8EZBZKJ1PSc52Ron0j8sRfEBsAqruTnfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGIOFzsoQn/iLcCDcoFtzrf5sJQnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNzYyYWY1ZDgtMDRmNi0z
ZGVjLWE4MmItNTE0MmMxMTY0ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVfUde/JQuv3v6sTsWsaKOQ0cLQbFFW8tkb7TS9fNB/OPMhhP0guA+d
Asj/UjHjOE2C/IyKimx1Tgb2BP+NIEHG5aGoBLagozfYeLWNWtIvmQA2mk8kzV06
LmeJKWxwpZVZEumgA3gCgE9uaWsyCHuv867ryibcYLwBCij1JAEKj9udEB25vIdJ
aCSvDzjZnBov5/yLWVRqVf9qIUnm+KPmrNWJBo4bRg6orFbqfJSaLZW16P9x2t2s
3og43MUYs6VKnVx2ucOfPS6FByKlE7uq70+jUzx6ZIdqlHyB/m6WXGXxHt2BKwXO
1E7zhzwVwmchVbXwlR/lFy9ZY0WHR6I=
-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:49 2026 by rpki-client