Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa
File:                     e166c054-c750-3fa9-ae7d-80d1294357cc.roa (raw, json)
Hash identifier:          hAhhUsrSlsqFYn0bTxCJnPgwjamjsBd53PormUn9nAE=
Subject key identifier:   4A:17:CE:7C:FC:31:82:77:B3:C3:01:B6:D4:88:6A:DC:47:3D:39:CE
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584E6F3EB0B3AEBEBDAFBBF4FEC8
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        138.1.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:b0:b3:ae:be:bd:af:bb:f4:fe:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=32067eb7-ceba-4d22-a40a-d617939903d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:8f:54:0c:71:06:d5:72:40:5b:6f:a2:1c:
                    1d:7c:8c:de:4e:37:90:34:e3:73:9b:d2:a9:50:b2:
                    20:9d:fa:54:c7:42:d3:b6:db:0b:a0:3f:d5:37:3b:
                    a6:a2:85:56:f2:62:fd:01:91:33:b4:ef:bd:84:9e:
                    55:08:b0:ba:f3:6c:07:9a:96:ef:69:81:9e:91:62:
                    5c:21:58:13:22:75:7e:6d:75:53:18:b2:dd:bd:d5:
                    fd:9d:40:cf:fd:b3:ee:7d:6b:f6:66:02:d8:c1:c1:
                    a5:8a:ee:f8:a2:ab:9a:5a:c7:25:39:37:47:3f:55:
                    f1:10:a0:5d:82:a9:ea:e6:65:43:3f:14:9f:23:f4:
                    51:db:d3:4a:2b:a9:51:7b:6f:e0:2c:70:0a:f8:88:
                    f9:83:b2:cd:46:38:87:17:ed:39:7f:fb:2a:01:81:
                    25:a7:9f:2d:7a:4d:8a:4f:e8:88:27:ad:66:6c:26:
                    69:6c:55:0a:92:b1:45:f5:ee:b6:c9:c6:a6:3e:30:
                    5b:6a:67:ba:87:b0:a1:0b:a3:b7:8a:ff:a2:8c:a6:
                    68:6c:8e:4c:fe:1c:5d:e4:52:70:74:4b:fe:d9:50:
                    42:5a:d2:75:d8:30:14:7b:0a:c1:54:2e:05:e0:89:
                    57:3a:4c:91:32:d5:78:38:2e:6a:75:3b:13:94:4e:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:17:CE:7C:FC:31:82:77:B3:C3:01:B6:D4:88:6A:DC:47:3D:39:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/e166c054-c750-3fa9-ae7d-80d1294357cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.1.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:72:82:e2:6f:c5:d4:e2:50:66:91:ff:b3:47:67:bc:89:
         40:86:5a:5e:c5:03:77:15:c6:95:13:88:9d:0f:a4:64:fd:c2:
         5c:09:00:b6:7b:82:e4:b4:cb:75:63:f2:e8:e5:26:7e:4d:05:
         b6:d7:27:40:16:04:cb:a8:f1:be:88:93:24:7e:58:93:51:1f:
         0b:06:6b:7d:9e:d1:27:a1:60:7d:44:2e:f2:0e:05:9b:f9:79:
         34:a0:e4:4c:e2:61:15:41:55:07:98:3d:2a:d5:11:3e:a9:6a:
         27:5e:41:bc:fb:c5:1c:ba:41:4b:7e:b9:ce:ea:0e:fa:e4:3d:
         84:3c:ca:c8:00:53:ec:cd:d8:d1:0c:c9:31:d9:77:f7:cd:18:
         86:6f:17:4f:1f:a6:49:6f:fe:e7:77:5a:10:cc:73:89:ad:a3:
         ed:92:4d:99:a5:8c:d3:e9:b6:95:32:bc:01:a8:7f:77:7c:9f:
         7a:ae:6a:f7:96:93:d4:ef:35:bd:81:d9:5c:d4:a9:fd:61:84:
         33:0b:83:bc:ea:b1:2f:e9:9d:86:dd:5a:38:ae:3a:a6:1a:46:
         14:d5:01:c0:e2:23:fe:91:2e:01:8b:c7:e3:a1:07:1f:e1:b3:
         eb:f1:37:60:b3:52:cb:5c:0a:7a:2a:43:bf:1c:10:7f:d0:2f:
         57:77:a0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:00 2026 by rpki-client