Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/97af5fd2-69c4-3bda-a4b5-f67f653f9a0e.roa
File:                     97af5fd2-69c4-3bda-a4b5-f67f653f9a0e.roa (raw, json)
Hash identifier:          /uGYLlByGaBi0SfCH8Zo1C404cYZbUSqwv1y88zK/XQ=
Subject key identifier:   D9:92:18:77:2A:71:17:6E:BF:A0:B3:38:A0:4E:55:69:22:1E:8C:BC
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584E2D9F44107C17151DBDE41DC0
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/97af5fd2-69c4-3bda-a4b5-f67f653f9a0e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     21549
IP address blocks:        138.207.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:44:10:7c:17:15:1d:bd:e4:1d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=86ddc84f-c574-4e1e-b538-1a0a274e2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:1f:28:af:9e:9c:8b:46:c5:47:a0:14:d8:
                    0b:45:18:b8:60:e4:02:8f:6f:7b:22:40:b2:ec:86:
                    bb:f7:2a:04:11:1e:f3:13:9b:f2:75:d8:97:8d:9e:
                    74:e9:b1:09:c6:58:82:9e:e8:3a:10:7d:7a:1a:9d:
                    bd:fb:31:9d:24:f1:44:c9:c8:88:59:67:19:ce:46:
                    ee:d4:33:5e:ef:56:93:09:b5:10:19:45:01:34:32:
                    ae:4b:2a:ea:5d:4d:3f:bd:88:b6:74:0d:4a:29:d1:
                    db:d4:c0:d6:61:51:dc:3d:a6:ac:4f:49:87:62:dd:
                    61:78:3a:16:4a:8d:28:0d:84:e8:10:25:9e:8e:ee:
                    d9:0d:a9:1b:fc:f6:9a:54:bf:53:48:05:85:dc:54:
                    08:51:c6:6a:a2:dc:8e:38:78:d2:d7:e9:ec:bf:f5:
                    fb:7c:07:69:4f:8c:e0:51:78:6c:51:fc:0c:19:b1:
                    fa:c1:3c:f5:e8:2e:19:8e:af:a1:05:f9:09:99:6c:
                    4e:23:7e:8f:6b:5c:99:95:39:44:12:1c:d2:3e:f3:
                    75:c5:af:df:b3:bd:41:a2:bf:17:e1:2b:b8:b3:14:
                    f1:df:fb:82:1e:30:11:38:3e:5f:34:d6:1f:6e:cf:
                    a4:1d:67:d3:0e:a8:f0:9e:7a:70:da:59:02:43:79:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:18:77:2A:71:17:6E:BF:A0:B3:38:A0:4E:55:69:22:1E:8C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/97af5fd2-69c4-3bda-a4b5-f67f653f9a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:a2:0a:c9:2d:c0:1b:1e:51:f5:d8:f1:91:fb:af:8d:e5:
         5f:d4:d1:c3:9c:6f:44:fb:48:cf:42:18:32:6d:ad:1e:75:e5:
         15:fe:59:c8:fd:e8:6d:94:3a:f3:c9:8e:45:6a:c6:1e:09:a2:
         f5:d7:72:3c:6f:56:d7:8c:3e:f3:1c:5e:b3:db:54:70:eb:c5:
         41:54:c7:85:ed:41:35:00:47:c4:da:71:99:0e:8f:23:aa:fd:
         b3:50:a5:f7:a8:3b:af:88:c8:0d:54:9f:86:db:f4:f0:6f:e5:
         ce:3f:0e:a8:95:3e:d0:1d:75:51:1f:dd:eb:33:ec:bb:c5:e3:
         39:db:ae:34:12:33:cc:c4:fb:d0:3d:ad:fd:6d:88:19:d8:b9:
         ae:ec:19:7c:98:bf:81:65:19:a8:89:19:d0:f4:c2:c3:6f:6e:
         34:84:95:21:a2:a3:44:3a:3d:d4:01:fc:f7:f0:47:52:2d:0e:
         59:b0:9d:ec:00:e6:9f:bd:aa:dc:e3:3c:84:c4:96:36:d3:4a:
         8b:68:8b:be:09:6d:02:0a:5b:28:38:0b:f6:51:9d:49:87:88:
         d9:76:66:29:06:d1:ee:f6:89:aa:62:bd:bf:61:ce:61:e5:9b:
         13:e2:53:52:e8:d9:b0:aa:4f:fd:b6:cd:8d:5b:9b:fb:c5:b6:
         fd:aa:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:20:32 2026 by rpki-client