Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/e6a06e51-f22e-3d6e-a44a-66a5fbc39abd.roa
File:                     e6a06e51-f22e-3d6e-a44a-66a5fbc39abd.roa (raw, json)
Hash identifier:          prPGt5pJqqKgb+hIxobSv7gWpxo45xZU9X5769Kf3Ak=
Subject key identifier:   52:5F:D1:34:3B:6E:94:FB:DB:EA:80:7E:4A:2C:7C:60:41:9E:AF:8D
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584E82C4DD199361C76C6FC6B740
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/e6a06e51-f22e-3d6e-a44a-66a5fbc39abd.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     18701
IP address blocks:        138.32.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:dd:19:93:61:c7:6c:6f:c6:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=824f2a3a-f737-465f-b4ed-63aba09952d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:e1:7d:4d:ef:73:f8:5a:73:14:05:d8:1e:
                    3c:02:73:05:0c:02:bd:d8:a7:23:c2:67:89:fa:88:
                    73:08:8b:a7:df:fd:d8:12:3f:e3:43:1b:eb:aa:ec:
                    41:b2:b2:e3:99:dd:8b:a8:e6:40:50:c3:d7:6c:b0:
                    07:72:0a:73:7b:29:d6:a8:4a:ca:93:0c:0f:1c:c9:
                    f3:3b:c5:5c:ae:be:57:8d:d1:14:39:f6:f5:d4:bf:
                    16:20:00:ad:b6:34:3e:f2:0d:6e:d0:c8:8d:01:a9:
                    c8:cb:f9:6e:ca:d6:18:93:3b:86:32:d6:ae:28:17:
                    68:f6:c6:c6:cb:a0:42:84:96:c4:68:ce:e2:14:db:
                    ab:40:a6:7d:dd:cb:d6:8a:d0:4a:f1:2b:5a:93:01:
                    95:86:b4:e9:d6:db:56:0c:93:cd:15:6e:58:3b:73:
                    83:0e:e5:38:d9:c9:1a:32:1d:19:27:00:c5:08:55:
                    d4:80:77:c3:34:b3:22:aa:83:97:28:f2:4c:65:88:
                    56:d1:70:fe:91:41:d8:bc:80:9f:8e:24:75:0d:3e:
                    22:af:65:d8:dd:64:e8:6f:40:25:9e:96:e2:b6:78:
                    f8:b3:4e:d7:d0:a4:fa:d9:37:01:88:80:c9:33:ad:
                    7e:14:05:5c:c1:23:ff:fc:a8:52:6b:24:af:46:31:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5F:D1:34:3B:6E:94:FB:DB:EA:80:7E:4A:2C:7C:60:41:9E:AF:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/e6a06e51-f22e-3d6e-a44a-66a5fbc39abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:bb:97:9c:b0:e6:41:d9:05:ea:4f:51:72:71:c7:76:f5:18:
         d8:41:20:4f:a8:0c:a2:7d:69:8d:ac:1f:32:5b:f4:18:b6:f1:
         fe:99:10:14:35:a1:d9:65:58:b9:ec:cb:7d:90:ff:0c:3c:4a:
         ab:0a:48:69:ea:93:72:d0:82:b4:f8:be:9f:cf:00:ce:1e:2d:
         e9:31:e8:87:e3:0d:38:6d:f8:fd:bf:12:d7:a9:50:d6:31:2b:
         25:a5:0b:ac:5e:09:76:b3:40:aa:13:74:3d:e2:b9:24:8e:a5:
         eb:dd:0d:d6:c9:2a:95:ab:3b:c9:c3:bd:4c:6c:fe:28:a8:75:
         8a:63:18:9c:e7:a1:6d:62:7a:11:15:ad:ed:bd:73:7e:c2:56:
         d6:d3:10:34:44:04:9e:fc:c5:ab:3b:51:4b:30:33:9f:46:22:
         8c:34:4f:dd:3d:19:58:ec:20:a0:ab:12:f3:ad:fb:1a:7c:bc:
         70:12:5c:48:f2:b3:45:68:50:5e:ec:71:25:c6:fa:af:14:8c:
         4f:fb:05:c7:99:c4:fd:9f:78:dd:60:04:90:39:45:a8:1d:2a:
         c2:78:67:f8:61:ec:c0:7f:56:d8:6e:9f:f7:5d:a4:9b:be:30:
         36:4f:70:99:06:fb:46:35:29:2d:8e:8e:24:d4:83:ee:48:7f:
         12:d1:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:48 2026 by rpki-client