Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e0daa518-ac68-3027-a4f5-b32e62469fe5.roa
File:                     e0daa518-ac68-3027-a4f5-b32e62469fe5.roa (raw, json)
Hash identifier:          wdMviX7YsuJKZaPkzdXvSG50VQyc99qVlQcg+8NjdEA=
Subject key identifier:   18:4B:1E:A4:81:F1:D1:B2:08:59:8C:BA:17:A0:74:2C:2B:1A:37:D0
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E6F3EC8606B76211A92187900
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e0daa518-ac68-3027-a4f5-b32e62469fe5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        138.1.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:c8:60:6b:76:21:1a:92:18:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d686767f-319b-4e5e-90fc-8d5dc125b803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:03:c2:7f:42:1a:07:24:f1:98:a7:cb:3d:
                    5f:b2:a2:97:63:98:1f:09:f2:61:ac:a7:41:27:d0:
                    75:0d:6f:89:a7:fb:2d:d4:64:20:35:c5:33:9e:7a:
                    16:7e:18:d3:60:29:80:ec:46:d9:51:85:52:4a:13:
                    32:46:70:20:a4:6d:c9:00:3c:96:b8:dc:3c:61:df:
                    24:77:ea:e4:04:5a:91:5d:0d:6d:c9:61:12:38:bd:
                    a8:b5:51:4f:5c:8a:ff:17:1e:96:32:e3:9d:38:3b:
                    f2:28:2b:4b:b2:1b:15:ef:5b:46:69:33:2f:86:fd:
                    ea:48:04:e8:04:18:81:2e:56:c1:3d:9c:60:81:45:
                    8a:57:28:06:48:32:c8:e3:c0:5f:47:98:34:c9:02:
                    b2:a3:0e:b6:01:5e:0f:8e:5a:2d:90:4e:d8:a4:08:
                    d0:3b:36:97:ae:43:04:3f:b9:97:f0:27:0b:d2:d6:
                    38:c9:a7:0b:0a:64:fc:8e:75:1e:37:3d:25:18:87:
                    87:ac:4a:26:00:16:86:69:43:45:50:10:56:e5:af:
                    8d:f2:27:f1:9e:e5:75:ef:c5:e7:c1:81:37:54:24:
                    07:1f:e7:93:66:54:95:87:f8:3c:ad:c9:fd:21:ee:
                    f5:ae:b4:bd:ed:2c:dd:88:46:b2:8c:8c:a6:6c:f7:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:1E:A4:81:F1:D1:B2:08:59:8C:BA:17:A0:74:2C:2B:1A:37:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e0daa518-ac68-3027-a4f5-b32e62469fe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.1.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:61:65:16:e5:87:a3:2c:e1:41:35:ac:d7:52:b9:2e:49:
         cd:75:c6:ce:6a:d3:cb:c8:d5:6a:ac:66:c5:af:79:6a:cc:03:
         01:7d:b9:78:b7:ce:63:d3:d4:a0:cf:af:7f:ab:34:3e:88:4c:
         2c:9f:2f:50:cd:3d:0d:f0:79:9c:18:79:ad:23:d7:ce:50:5b:
         3e:be:44:b7:e6:d9:13:b6:e4:17:da:05:54:d2:5f:94:70:38:
         65:ca:6c:35:db:95:d5:80:b1:41:fa:68:a8:db:73:62:ab:6e:
         45:37:5d:bd:69:ac:92:5c:21:1a:d6:f7:25:d3:d9:78:a4:e1:
         67:3e:87:d0:28:55:8c:82:d1:5b:fd:76:bd:5f:1f:6c:14:2e:
         9e:12:fd:df:a2:e2:82:2e:ef:c5:42:f4:e6:a6:ea:7a:e8:ac:
         18:ff:77:d1:8a:ca:43:0b:5d:79:43:05:ca:1f:ac:c2:9a:05:
         f2:90:8c:3c:b6:5f:ff:07:a0:13:64:3d:14:f4:7c:90:51:f1:
         5f:e1:81:cd:7f:9f:10:24:ff:bd:ba:43:db:6e:9e:4c:af:35:
         4a:a6:05:cf:51:c9:92:fc:9c:fb:71:81:88:8f:42:ca:e0:b6:
         40:8c:b7:45:e6:9c:5e:f8:1e:43:9f:81:a2:90:8b:e4:51:ca:
         81:f6:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:09 2026 by rpki-client