Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa
File:                     762af5d8-04f6-3dec-a82b-5142c1164eb3.roa (raw, json)
Hash identifier:          vn6q7LRWNsg9FvTAs2O99A2+pD9AjoRHFSUVMnZV8E0=
Subject key identifier:   A7:BE:AF:EB:A3:E9:7B:CB:9B:25:F9:21:89:78:AC:67:A7:0E:7E:45
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584E82C4DF760EF65EF4006B9F00
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     18701
IP address blocks:        138.32.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:df:76:0e:f6:5e:f4:00:6b:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=49d4e7a9-198e-49bc-9f56-47ab54cc9a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:0e:b6:d9:98:89:a5:61:2b:7a:75:6a:cf:
                    9d:74:06:5f:70:9c:0e:f6:e8:e4:bc:c6:5b:92:40:
                    a7:dc:b4:62:31:93:41:75:ed:aa:68:a3:a9:73:f3:
                    2d:da:d2:1b:4d:13:29:7d:29:dc:1d:30:68:dc:89:
                    bd:21:6a:f6:c5:57:78:9b:78:03:55:c9:d6:86:82:
                    51:4c:ca:0c:b5:be:2c:f9:d7:76:4a:fb:8c:63:89:
                    19:d1:d0:43:a3:04:13:79:92:82:75:b3:64:2e:2d:
                    0a:e3:62:a5:aa:05:b1:7e:a5:33:63:e7:df:cd:43:
                    49:f9:57:f8:f4:57:f8:07:9e:3d:ed:3e:d0:cb:67:
                    85:c8:ea:c8:51:2b:75:53:8f:3e:cd:4e:75:05:71:
                    44:df:1c:cb:77:d3:52:99:1f:f0:c8:75:5e:4f:3d:
                    3c:04:c1:25:15:5d:c2:3f:fc:96:3e:b2:fd:26:30:
                    c0:6a:60:01:9d:82:e6:da:39:26:6c:e7:92:f4:c3:
                    03:29:5f:36:a4:97:03:44:17:01:02:48:4c:00:7a:
                    29:32:6b:11:23:3a:0b:e4:cf:dd:7a:07:fb:b4:ef:
                    76:3d:70:ee:87:93:87:6b:81:21:38:68:15:36:05:
                    9e:13:94:b2:04:0d:ea:4c:d4:70:a2:a9:a0:72:0a:
                    ca:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BE:AF:EB:A3:E9:7B:CB:9B:25:F9:21:89:78:AC:67:A7:0E:7E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/762af5d8-04f6-3dec-a82b-5142c1164eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b5:b1:20:d9:1e:30:c7:cf:22:93:c8:1e:5b:2d:7f:df:74:
         6f:77:e6:bf:b3:a5:43:a0:91:2d:00:5a:99:45:9f:a6:67:0f:
         72:73:a3:e5:1a:1a:77:6e:bd:74:a9:41:da:ee:d8:3e:8d:bf:
         ae:ee:18:7a:15:ec:e6:aa:23:11:a0:c7:49:91:b4:c0:2f:72:
         2a:03:68:5e:f6:4e:34:f2:e4:b9:46:2d:51:f2:12:3e:7c:db:
         cc:de:3f:c8:5f:a3:58:98:80:76:32:82:5c:ea:d6:82:2f:f7:
         c3:7d:51:bd:11:f0:f3:5d:15:87:79:f9:49:21:8f:b0:50:1f:
         fb:cc:55:13:64:f2:50:7c:55:a2:45:86:fd:ad:7d:bf:e2:52:
         4a:1d:d6:65:5e:c2:99:86:d2:ab:b3:8b:20:3f:1a:ac:74:3e:
         0b:9c:e9:e5:7c:d5:5f:b0:1f:b4:c1:78:45:fa:7d:ae:3e:95:
         7c:94:36:cc:63:79:b7:d7:07:09:3b:b7:e4:12:b5:ac:aa:85:
         6e:d8:c0:23:44:69:08:2a:42:1c:d7:3e:b0:8c:08:a6:83:e1:
         ae:f9:a7:c0:dc:38:af:2c:64:a4:35:31:6b:09:e2:22:b7:18:
         4a:e0:2b:22:46:db:77:9d:c2:af:f0:98:4f:b3:eb:b8:91:32:
         1f:37:45:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN92DvZe9ABrnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk
NDlkNGU3YTktMTk4ZS00OWJjLTlmNTYtNDdhYjU0Y2M5YTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh50OttmYiaVhK3p1as+ddAZfcJwO9ujkvMZb
kkCn3LRiMZNBde2qaKOpc/Mt2tIbTRMpfSncHTBo3Im9IWr2xVd4m3gDVcnWhoJR
TMoMtb4s+dd2SvuMY4kZ0dBDowQTeZKCdbNkLi0K42KlqgWxfqUzY+ffzUNJ+Vf4
9Ff4B5497T7Qy2eFyOrIUSt1U48+zU51BXFE3xzLd9NSmR/wyHVeTz08BMElFV3C
P/yWPrL9JjDAamABnYLm2jkmbOeS9MMDKV82pJcDRBcBAkhMAHopMmsRIzoL5M/d
egf7tO92PXDuh5OHa4EhOGgVNgWeE5SyBA3qTNRwoqmgcgrKCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe+r+uj6XvLmyX5IYl4rGenDn5FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNzYyYWY1ZDgtMDRmNi0z
ZGVjLWE4MmItNTE0MmMxMTY0ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiiBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALO1sSDZHjDHzyKTyB5bLX/fdG935r+zpUOgkS0AWplFn6ZnD3Jzo+Ua
GnduvXSpQdru2D6Nv67uGHoV7OaqIxGgx0mRtMAvcioDaF72TjTy5LlGLVHyEj58
28zeP8hfo1iYgHYyglzq1oIv98N9Ub0R8PNdFYd5+Ukhj7BQH/vMVRNk8lB8VaJF
hv2tfb/iUkod1mVewpmG0quziyA/Gqx0Pguc6eV81V+wH7TBeEX6fa4+lXyUNsxj
ebfXBwk7t+QStayqhW7YwCNEaQgqQhzXPrCMCKaD4a75p8DcOK8sZKQ1MWsJ4iK3
GErgKyJG23edwq/wmE+z67iRMh83Rb4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:36 2026 by rpki-client