Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa
File:                     15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa (raw, json)
Hash identifier:          sGMLWsC50K4r86dykb5q/FlgjLm11omPur5oe4fvj0A=
Subject key identifier:   D9:52:0F:08:CD:5C:09:E8:82:12:93:38:C4:6A:8C:58:92:4D:F7:C9
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2D9F4405AD8857EAE126D180
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21549
IP address blocks:        138.207.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:44:05:ad:88:57:ea:e1:26:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=b3bd256e-9f95-48af-9f84-b4f03ff68e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:ed:70:e1:02:f1:d9:cc:2e:24:98:05:d8:
                    3e:72:c4:1d:3f:9c:88:3a:b5:bc:fb:0b:b3:f2:a6:
                    8a:e6:24:f6:e0:92:fe:82:a2:05:bf:05:89:74:d5:
                    6c:89:c7:d5:0f:5e:c6:76:5c:0e:6a:e1:2d:a2:07:
                    3d:e4:74:b7:2f:d3:f5:c8:de:bd:ff:0f:35:a1:5f:
                    07:09:7c:fe:08:c4:07:4a:f5:97:1b:af:d1:3f:d7:
                    53:cb:a2:0a:9f:c5:03:a5:ee:ad:e6:b2:5c:3a:af:
                    9a:74:32:4d:0d:cf:53:4f:47:22:77:3f:42:b7:e6:
                    94:98:80:d4:5f:46:74:72:97:30:4e:59:fa:46:67:
                    c8:46:79:86:89:6f:43:42:25:ef:4e:1a:d3:1f:05:
                    14:1d:98:74:be:e0:12:d9:92:59:b4:0e:d9:b6:13:
                    68:c1:c3:28:33:63:ed:c9:08:ac:1a:6e:10:47:89:
                    f8:06:d1:51:3d:b6:6d:1e:57:0a:0b:92:ec:90:5a:
                    af:38:35:2e:b6:65:ae:4a:b0:3c:0c:7e:b9:4b:d5:
                    54:8c:a3:df:d3:5a:77:ad:94:1e:c7:1f:f5:bf:22:
                    58:f8:fc:80:80:a2:8e:be:45:0d:cd:e3:58:2e:af:
                    58:a5:3d:c2:6c:00:fc:1d:24:bb:ea:96:b0:13:15:
                    49:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:0F:08:CD:5C:09:E8:82:12:93:38:C4:6A:8C:58:92:4D:F7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/15cc6fd6-f409-3fea-ac44-9117840cb4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c7:b7:10:cc:ae:0c:9b:65:b0:02:2b:25:03:c7:84:6c:12:
         30:d8:01:e6:14:51:06:0e:62:71:1e:77:c9:94:78:ea:f6:ad:
         45:60:0b:eb:ed:a0:0f:c4:59:47:f9:11:a8:2b:b6:f3:29:32:
         e4:6c:cb:02:31:61:d4:f8:da:06:33:60:65:c3:ad:59:86:21:
         73:6a:a2:9b:f3:eb:0f:a8:17:67:75:da:94:46:61:f3:76:53:
         f4:d2:4b:cd:63:e5:78:74:ea:61:05:4e:4f:35:6e:b8:8d:27:
         fd:64:1b:ba:01:04:27:16:37:2f:c3:5c:2e:1e:c5:b9:fc:e3:
         61:cf:bf:50:80:9e:8c:fa:8d:5e:af:4c:28:e5:cf:c9:e9:78:
         46:7f:8d:24:79:a8:8a:69:9a:f8:1c:f9:42:00:d5:dc:31:24:
         b9:9f:8b:3a:13:ad:2c:11:a7:dc:5a:c0:e8:dc:c2:1e:07:7f:
         3e:cf:f0:86:ef:ae:e3:c7:e9:62:20:5a:b6:9c:70:07:56:20:
         1c:6a:c9:b7:27:7c:85:b2:5b:3f:9f:a4:62:d6:4f:ad:00:15:
         93:af:d4:3d:8e:d6:c0:2d:a1:99:a4:0f:c8:b1:3a:9e:13:52:
         a0:a5:9a:01:4e:bd:36:26:1f:12:88:6a:06:df:27:72:43:6d:
         31:a2:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:13:26 2026 by rpki-client