Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa
File:                     8011e5b3-48f4-34a8-9932-e07529862633.roa (raw, json)
Hash identifier:          B4Qk0QLulBdhwbE+IRg77GU55mv75sVb7H6vVcpJpDQ=
Subject key identifier:   00:0E:2F:FD:85:C0:90:B3:CC:F5:AB:7A:2E:06:80:30:B8:E7:4F:FF
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584B38219BA2F61D185460A02C60
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        138.32.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:9b:a2:f6:1d:18:54:60:a0:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=14301401-9b25-4a33-b4bc-190d51d63207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:9d:8e:ff:2a:01:e0:0d:97:a0:c3:7d:06:
                    a4:1b:d6:99:8b:14:fe:70:79:63:92:17:95:76:be:
                    48:00:38:eb:90:80:be:a0:38:ea:b4:3a:2f:7c:92:
                    b5:5d:8f:e4:ad:b0:8b:ff:85:bd:5c:f2:60:b1:3d:
                    36:57:16:a5:ab:35:21:23:79:ff:41:02:08:af:3b:
                    a3:2a:af:73:ec:8d:ab:5e:51:bf:e1:9e:37:bc:0f:
                    c7:d8:9a:ed:cf:c2:35:e7:05:32:b5:be:27:ba:cd:
                    45:5e:43:f2:77:11:60:2f:85:98:52:35:2a:fd:4b:
                    d2:1c:c2:2b:4a:22:12:b7:78:c1:69:bd:19:1d:29:
                    e1:0e:80:76:6a:1d:96:76:ce:4f:39:39:e7:18:96:
                    c8:1d:c5:63:b3:dc:34:5d:27:f6:24:08:56:47:36:
                    af:d9:00:f6:e7:15:66:f6:1a:03:2c:32:99:e5:ed:
                    e6:0e:38:5b:52:9b:d1:46:c2:47:6c:8b:85:3c:b8:
                    32:a3:18:e3:a8:e3:b1:21:f0:2d:74:3b:26:9b:38:
                    78:4a:ed:43:c1:48:1e:38:8b:04:4d:bb:33:df:c0:
                    75:21:c0:c1:78:94:13:3a:bb:49:90:68:34:71:96:
                    bf:7a:e6:3c:d2:d0:6d:94:4c:01:c6:22:20:9c:df:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:2F:FD:85:C0:90:B3:CC:F5:AB:7A:2E:06:80:30:B8:E7:4F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:44:02:96:3c:bb:30:fd:19:14:34:9b:3c:5e:c2:84:59:
         7b:a2:ff:96:4a:bc:bc:98:0b:11:0e:cf:9c:dd:e8:88:33:4d:
         04:23:da:d8:90:03:df:c3:c9:e6:b1:6c:8e:27:50:7a:93:ef:
         6a:7a:c0:08:3c:bb:1d:03:63:c8:64:7c:b2:2a:9e:93:db:94:
         17:24:c5:f6:07:07:a5:8f:f0:f4:b3:35:dd:55:a6:0f:fc:4b:
         2c:0f:ed:78:b5:0b:e3:9b:34:c9:fb:c9:ed:87:06:13:d6:b7:
         25:64:be:4b:a5:03:23:88:87:43:43:af:b3:38:d6:f5:9e:b3:
         cc:f0:70:84:1d:12:15:71:ac:5c:b3:17:ef:55:a8:35:63:34:
         f6:68:07:52:8d:01:e4:71:ad:37:0b:de:54:be:a4:bc:30:57:
         71:dd:ec:52:9b:f6:8e:5d:42:fa:2c:c1:d9:87:07:92:23:b7:
         d1:f2:cf:28:1a:de:c8:71:d1:33:37:e2:2a:a6:ee:5a:38:d1:
         d2:5d:a6:79:22:0d:93:33:ef:52:15:9f:1a:ad:2e:12:18:c9:
         8f:2e:df:62:af:e2:f2:53:97:2c:66:a1:a8:99:31:b5:3b:08:
         c9:23:96:9e:2b:87:9b:86:99:ec:38:0c:b2:b4:99:8e:7a:70:
         ae:7b:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:57:14 2025 by rpki-client