Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
File:                     27962d7b-6418-3102-a022-ff4ff29b0763.roa (raw, json)
Hash identifier:          UKU+tA6dQ6cRWBo+peVQlrG3wusUzXl+x7/NnBlaXMg=
Subject key identifier:   28:A1:73:FF:CB:6F:7C:35:B3:99:90:3E:79:CB:51:AA:8C:40:9F:7D
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584F1B6245AB490B075D10D9FA80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        138.1.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:45:ab:49:0b:07:5d:10:d9:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=421a8ed3-0ffd-498a-aa92-08ec478e9914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:2e:3c:07:74:92:d6:3e:2a:5a:f1:04:6b:
                    3d:70:68:fe:60:9c:20:cc:02:76:82:e6:01:96:12:
                    94:27:39:f9:f4:48:2d:8d:58:e5:ab:8f:74:7f:57:
                    be:72:58:a1:1d:90:a6:19:3f:51:5d:43:1d:ab:7d:
                    87:bb:4b:ea:bc:23:20:eb:bf:fb:60:19:ec:7f:4d:
                    cd:5b:96:df:8b:bb:57:e2:58:b0:31:0e:18:76:34:
                    76:3f:da:16:e3:5e:2f:e1:bf:37:69:a7:08:82:f1:
                    46:b8:3a:dc:7c:cd:fa:ff:bd:3b:f5:c4:b6:c2:a6:
                    89:6b:7d:e3:30:11:f8:cf:b0:0d:f2:80:9c:94:06:
                    55:03:8e:a8:c9:7b:0f:cf:5d:ed:e5:63:4b:6f:41:
                    e5:77:49:35:67:60:2c:10:f9:df:42:5c:06:23:d1:
                    6e:6b:23:af:18:2c:4c:0f:87:9c:4c:18:ee:60:c2:
                    07:3e:95:fd:41:79:7b:2d:5a:8e:5d:ec:a9:39:18:
                    b2:63:a4:01:41:a6:c3:2f:5e:20:d5:2c:5b:4e:19:
                    46:c8:25:ca:6b:a3:2a:14:28:7f:e4:63:d1:53:05:
                    77:b2:31:52:97:32:7f:52:5e:3a:2a:59:27:ca:41:
                    64:c3:54:b6:dc:71:78:b3:06:db:d6:fc:5f:5d:d2:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A1:73:FF:CB:6F:7C:35:B3:99:90:3E:79:CB:51:AA:8C:40:9F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/27962d7b-6418-3102-a022-ff4ff29b0763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.1.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:fd:c6:95:35:b0:2f:67:f7:8f:c5:b3:e8:a7:04:55:5b:
         a2:03:64:84:79:a3:a7:2f:69:59:cc:62:88:b4:d1:4e:70:07:
         27:12:b1:cd:45:67:cf:ed:ac:dc:39:d8:0a:fe:76:84:7d:f3:
         84:5f:bc:15:31:b4:ef:b6:17:4d:ec:56:11:2f:5c:11:71:09:
         0e:e3:dd:c4:62:ae:69:de:23:e2:10:02:a0:f4:1a:14:bf:2c:
         62:d3:52:29:12:13:1e:20:2f:12:b2:4a:d2:00:5b:18:e0:64:
         e6:70:fe:32:38:e5:e9:4f:5f:fe:84:8f:7f:7a:06:ce:85:5f:
         3c:bc:c5:fc:fc:d3:96:2b:c3:77:8c:b0:de:32:cb:59:35:21:
         5b:5b:e1:bc:74:cc:5b:70:a5:04:7d:4f:3e:92:4c:3f:e0:c5:
         1c:18:85:6d:cc:2e:5f:77:d0:40:95:2e:36:48:a4:82:11:ac:
         33:15:f1:0c:2a:f9:1d:6b:41:8a:f3:ad:a2:80:8d:28:de:e8:
         ad:51:5e:8d:55:85:ec:6c:8f:0a:f3:9d:ac:80:50:f7:d9:3b:
         25:88:1b:7e:30:bf:7a:78:bf:e1:9a:05:8c:1f:38:05:e0:8a:
         05:f8:93:ef:72:77:7a:15:e5:cf:dc:3a:34:9b:db:d5:3b:1f:
         63:4c:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:57:38 2026 by rpki-client