Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa
File:                     df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa (raw, json)
Hash identifier:          6v3B3iZ9+uhBl4fUyT99to6KUgsnil+2E8vyzKA3/GY=
Subject key identifier:   7B:3C:0B:50:CB:EB:15:94:C3:A6:18:15:AF:6D:7D:E5:34:9E:39:CF
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D43AF8DE8F03B2AE306438280
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa
Signing time:             Mon 23 Mar 2026 13:54:27 +0000
ROA not before:           Mon 23 Mar 2026 13:54:27 +0000
ROA not after:            Sun 21 Jun 2026 13:54:27 +0000
asID:                     396368
IP address blocks:        138.207.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:af:8d:e8:f0:3b:2a:e3:06:43:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 23 13:54:27 2026 GMT
            Not After : Jun 21 13:54:27 2026 GMT
        Subject: CN=534f3c80-ab8c-46cc-9e47-d0d3b979d4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fb:3d:41:94:9c:e3:97:08:fd:c2:40:55:37:
                    00:cd:6c:ca:e5:c1:75:7c:0a:0d:a9:8c:1d:fc:72:
                    c9:99:61:bc:c7:36:a8:aa:88:62:99:0b:cc:92:14:
                    0b:55:b6:d2:e0:e1:7e:72:ea:67:48:6a:d7:53:4f:
                    bd:b6:0b:22:98:67:16:cb:fa:cc:cd:e9:38:95:dd:
                    e2:15:f9:3f:25:b1:05:8e:00:8a:29:03:87:6d:44:
                    f7:a0:cc:1e:54:ef:be:58:32:e4:c0:78:5f:f2:a4:
                    c6:cb:d0:31:ec:e6:82:53:66:87:9c:96:cb:28:d0:
                    8c:88:ef:4d:28:7b:96:f2:8d:b2:70:72:34:ba:71:
                    94:41:6e:00:d2:3d:74:77:00:53:8b:53:05:b3:82:
                    7a:0b:53:5e:32:2a:c9:f9:e4:3f:4e:73:00:b8:fd:
                    be:12:c1:c1:d0:e4:b4:39:35:6d:9b:02:e6:9a:1e:
                    3c:1b:a8:ab:cd:dd:73:da:f5:d7:53:78:65:1b:0b:
                    1c:ec:5d:ff:8c:ce:1c:12:a7:76:6d:34:29:b9:79:
                    88:17:67:6e:62:68:67:dc:a5:db:84:d2:5c:3b:c8:
                    da:13:f6:74:47:8d:7d:3e:f7:f3:f9:7a:26:01:36:
                    64:a6:45:bf:53:ab:3a:39:5b:0b:98:c6:65:1a:24:
                    8e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:0B:50:CB:EB:15:94:C3:A6:18:15:AF:6D:7D:E5:34:9E:39:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:fc:12:c4:30:2b:29:54:fc:28:86:c9:9e:69:b1:73:a2:
         c1:dd:e1:da:a1:bb:a5:51:48:8d:37:d6:af:ba:f4:0f:b5:06:
         8c:b8:ee:26:2d:6c:ee:4c:e2:e4:c1:93:af:36:60:f7:da:10:
         61:3e:00:86:94:61:ba:4e:79:09:36:df:94:12:2b:d9:7f:92:
         3b:cd:55:e5:0a:6b:0f:03:88:24:88:35:0e:43:87:47:0f:cb:
         88:08:66:14:ad:45:08:21:d6:43:21:e6:40:4f:81:6a:be:f5:
         38:87:1e:df:96:01:93:ac:36:1a:77:27:58:e2:86:00:82:97:
         b4:4a:5c:4b:d5:e2:38:00:97:c9:29:c0:42:13:8b:d4:1f:10:
         fc:db:10:a4:48:a4:8d:5e:7f:47:52:ad:55:8a:1f:fe:a7:19:
         b3:84:8d:7f:6b:84:b5:70:95:8e:85:c2:14:d7:2a:d3:90:27:
         bb:1e:0b:dd:9b:06:fa:05:88:62:f8:85:76:1e:f7:d2:0a:ec:
         3d:43:97:64:e0:64:2c:d3:67:18:3c:e7:db:c2:56:9d:8e:60:
         5c:2e:d2:90:35:ab:0f:95:a1:d9:a7:3f:3c:d1:74:94:73:3e:
         e5:47:99:48:b9:01:c9:4d:fb:49:11:ba:c5:4a:98:5d:6b:4a:
         7f:80:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:43 2026 by rpki-client