Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa
File:                     ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa (raw, json)
Hash identifier:          Ad4x4ppjijlBv5Vo+XKJcEyHJo0PY8ovD7KmYIbzaEo=
Subject key identifier:   78:F7:06:BE:B7:50:67:C0:94:52:CE:76:D4:2F:02:10:EB:99:06:B2
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F4328584B72C1EDC933BCBFBBDBFAF8C0
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     136787
IP address blocks:        138.128.133.0/24 maxlen: 24
                          138.128.134.0/24 maxlen: 24
                          138.128.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:ed:c9:33:bc:bf:bb:db:fa:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=77b9da8d-af53-4bb6-83ff-6a5e7b459828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d1:77:93:73:79:e3:63:df:ab:50:d5:2a:84:
                    2c:15:8d:09:30:65:9a:70:95:c6:ac:b0:51:d6:b2:
                    fc:ae:75:dd:4b:71:2d:1c:ed:b1:f0:63:79:2d:06:
                    ea:28:0c:bc:94:e2:44:28:29:af:e8:61:bd:0c:0e:
                    08:45:4d:b9:7e:63:fe:34:48:8e:7a:c7:2f:2f:29:
                    48:4c:ab:61:7c:22:d3:b9:7d:b9:97:18:24:45:01:
                    ab:64:33:bf:a7:fa:7a:13:54:82:c5:03:fc:24:ad:
                    20:c3:57:10:7d:7e:8c:56:98:41:8d:11:19:0e:89:
                    e0:9d:82:61:dc:7b:69:8d:9f:62:9e:8c:3f:79:cd:
                    e7:3f:3d:63:c4:cc:e7:c7:e8:98:b2:4f:81:25:4e:
                    40:f4:ae:13:35:a5:3f:cf:e3:30:1f:61:b7:3c:06:
                    fe:d7:48:c7:57:28:ab:6c:f9:27:9c:4e:45:ad:9a:
                    1b:a1:47:44:01:cf:47:23:75:07:f7:22:d0:9a:63:
                    61:59:72:6a:8f:d9:b2:6b:b9:17:62:46:f8:a5:3a:
                    91:25:80:21:a9:04:d9:54:8f:75:b3:da:fa:47:3b:
                    51:1c:68:2f:50:d8:ee:5a:e4:b4:cc:c9:2c:e2:66:
                    82:0b:2f:8b:1a:e6:67:c3:b4:9e:cf:a7:ab:24:0f:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F7:06:BE:B7:50:67:C0:94:52:CE:76:D4:2F:02:10:EB:99:06:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/ba2ca5a2-e222-3194-bfa8-ab52011dc31a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.133.0-138.128.135.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:82:8a:47:13:0e:38:90:e3:20:e0:e3:a6:27:14:a8:eb:
         d0:39:2f:bb:75:59:13:de:05:df:18:79:04:fd:ff:a3:88:8c:
         c4:44:c3:cf:12:5b:e2:cf:ee:41:07:35:cc:aa:05:7c:5f:4c:
         cb:4c:a1:ea:b3:94:8b:2e:28:f6:dd:3d:4d:cc:69:01:4f:d4:
         97:e1:4b:e3:ab:96:fe:16:d6:24:f0:1e:35:55:29:f5:1f:0a:
         a1:a2:31:ff:61:d2:e3:41:83:f8:65:24:89:d6:ea:4d:62:51:
         15:cf:2d:d3:06:62:33:62:ed:13:be:e0:0f:a1:8b:94:f7:e7:
         a3:65:90:c1:4c:08:63:f1:df:cd:b7:c6:71:19:68:04:7f:fa:
         9a:89:8b:6d:f0:92:d6:86:03:06:e4:65:a2:b2:65:87:38:de:
         ca:20:c7:95:66:fb:17:7e:16:40:d2:f6:3b:72:95:a7:b0:35:
         6c:96:4b:1b:ad:e0:7c:65:a2:88:8c:fc:df:7d:c1:a0:f2:33:
         91:c3:0a:e7:22:64:3c:41:a5:11:84:0b:34:80:a4:15:ce:28:
         b5:b7:f2:15:23:97:eb:49:e1:48:a7:46:35:0d:a1:91:75:b5:
         b6:81:fe:c5:63:c4:ca:09:c8:da:22:4e:37:2a:10:73:e6:85:
         d6:d3:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:24 2025 by rpki-client