Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
File:                     3675121f-0e8b-3664-8540-fd9dfccb894f.roa (raw, json)
Hash identifier:          FpxCorlLbDsYybaL8pNGFmkAdmAUAPbE/uyyYH7xNC0=
Subject key identifier:   FA:25:AF:01:7F:B0:B9:67:15:FD:FD:97:72:5D:12:6C:5D:0A:1D:03
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E69A4B7E09FEBA29D8F8ADE80
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     12025
IP address blocks:        138.207.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:b7:e0:9f:eb:a2:9d:8f:8a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=b7b11197-db9d-4169-9142-1a30ddcffcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:c7:f5:57:19:7b:61:40:3b:d4:d5:72:02:
                    6a:0b:65:64:0a:ef:07:59:aa:bb:be:e7:6c:61:09:
                    cd:39:61:b7:88:b6:0a:56:ad:92:78:15:03:96:f2:
                    bf:e8:bd:32:df:04:0f:a7:d2:b9:3c:43:5d:cc:0a:
                    8c:e3:22:47:24:57:0a:08:04:cc:c9:bf:2d:2a:42:
                    f5:0a:48:cd:5d:f6:53:ab:58:c3:37:d8:8d:8c:19:
                    71:c6:70:30:03:c3:8f:39:43:c9:8a:79:6d:f3:87:
                    82:d3:a8:a3:ba:c7:12:ca:10:d3:89:7e:0c:62:e1:
                    c6:2a:89:d4:cb:a2:8c:dd:a3:d1:f0:f0:89:a8:b2:
                    c5:e5:d2:f6:07:06:8c:35:f5:c9:65:68:2c:a4:7e:
                    9c:2b:a8:1b:8b:be:f4:d5:52:23:82:58:ac:53:21:
                    78:4a:46:b6:d7:a4:8b:a8:65:67:f4:69:6b:0a:d8:
                    14:69:1e:64:1d:28:84:27:ef:e0:4b:77:6c:60:3e:
                    60:82:b9:7b:93:3d:7d:97:ce:5d:d0:25:25:e8:9d:
                    e4:ff:ba:d9:b8:86:29:b5:6e:7f:9f:a8:23:3b:fd:
                    d4:1a:89:5f:56:f6:ae:ab:09:6b:21:cc:39:ee:3c:
                    a7:d0:36:76:d2:43:9f:ce:3d:25:91:f0:87:2b:43:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:25:AF:01:7F:B0:B9:67:15:FD:FD:97:72:5D:12:6C:5D:0A:1D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/3675121f-0e8b-3664-8540-fd9dfccb894f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:33:71:b1:c8:88:2c:c8:cf:1f:ef:7b:cf:d4:ce:37:73:d3:
         a5:9e:92:6c:1a:97:05:16:82:f0:6e:47:84:f8:9d:40:40:ca:
         dd:41:36:15:bb:7a:96:8e:f9:96:c1:d7:7e:3b:23:40:b5:81:
         59:37:a7:72:9e:ad:aa:a3:cd:48:57:87:2c:8b:7f:85:05:14:
         49:85:16:88:0c:4a:75:33:6a:ce:72:21:6e:c2:25:90:4b:1e:
         d7:e4:be:7e:62:de:f5:f7:4b:06:6f:72:97:1d:1c:68:93:50:
         c5:b4:8a:01:81:f1:a7:29:1a:bf:12:5b:ba:4d:83:b6:e4:98:
         e1:6c:d1:3d:38:4d:85:93:1d:c9:81:d2:7a:98:ca:1e:e8:cb:
         be:f9:99:2a:eb:d5:c1:ee:f1:d2:08:a1:fe:6d:88:39:a6:ff:
         8c:9a:7f:3a:44:f7:9e:c8:c4:a9:a8:be:78:62:12:e0:b7:fc:
         2d:8d:9b:6f:ab:bf:18:83:ce:92:92:80:7b:29:db:ef:22:62:
         3e:69:ec:91:cc:db:bb:e8:cc:24:f8:4c:c9:da:b9:74:5c:e3:
         df:5f:11:ad:a9:a2:95:69:88:b6:9f:04:49:ae:c1:9d:83:99:
         e9:f9:70:e1:56:ca:35:1f:72:d1:19:3b:55:11:1e:ee:cd:0e:
         e6:3f:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:34 2026 by rpki-client