Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa
File:                     1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa (raw, json)
Hash identifier:          OoPrh2hqLHX5BAavDCfLQxU/8KZ3yuJCsgfPoqlc/V8=
Subject key identifier:   9E:1A:63:5A:CE:F1:82:98:F7:3C:32:30:4B:1E:CB:E1:E7:D2:EE:5C
Certificate issuer:       /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
Certificate serial:       010D0C9F4328584F1467A0EEC10365137D3EE600
Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     63436
IP address blocks:        138.43.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a0:ee:c1:03:65:13:7d:3e:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=f7a94511-9b8b-4abf-8da4-32c6610b89ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:a0:9e:72:2e:ab:b0:97:f5:8d:d4:0b:68:
                    82:ff:33:04:a6:c1:68:e0:14:db:b8:a4:a7:96:bc:
                    8c:b7:6e:19:60:15:37:97:1c:c4:94:c4:46:b6:85:
                    5d:44:cf:2c:65:41:b5:bd:7a:6c:5e:d7:ea:3b:07:
                    93:12:da:6a:e5:f1:76:a0:cf:3c:cd:bd:35:3c:e1:
                    9a:5f:f5:5b:a1:53:fb:09:dc:50:42:25:5d:51:3b:
                    83:77:92:5b:73:09:3a:1d:00:01:09:ce:f7:60:48:
                    9d:cb:9d:ba:be:fb:a7:81:c6:dc:60:12:90:47:54:
                    1f:da:3c:ad:26:8f:72:91:53:49:ca:35:89:a2:79:
                    7c:d7:d3:92:fb:58:53:64:eb:ef:6b:a7:4e:45:59:
                    df:24:14:bd:b3:77:2b:72:a7:87:e8:ed:7c:b0:c1:
                    f6:1e:74:56:6f:e6:5e:6f:37:4c:82:e9:7c:c0:53:
                    59:e5:eb:4c:fc:c6:c5:53:29:27:42:98:b4:b0:00:
                    a7:69:3b:a3:f4:11:b0:f7:cd:38:f7:41:22:6d:92:
                    0e:50:a5:4d:90:b1:4e:be:70:d3:7b:7e:2a:7e:d2:
                    5a:91:9d:ec:97:6c:c9:66:69:71:8c:c8:d5:94:c2:
                    50:af:d5:aa:79:54:91:03:26:e8:75:67:ad:08:fd:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1A:63:5A:CE:F1:82:98:F7:3C:32:30:4B:1E:CB:E1:E7:D2:EE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/1c2f149d-33f1-3a20-8d61-9bac34efb16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl

            X509v3 Authority Key Identifier:
                keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:41:fa:a9:f6:3d:8b:80:69:08:88:d6:22:fc:b8:13:52:
         d7:d5:38:32:ea:ad:3e:91:f3:2c:b6:8c:04:7b:5a:6a:62:11:
         b7:bc:9e:0f:54:95:48:30:b4:f1:a9:fc:d2:41:b2:4a:9f:e5:
         d1:64:df:2e:b7:03:f8:9f:95:66:61:c1:89:e9:8f:68:5e:14:
         de:17:6c:b6:40:76:d3:4f:c6:f5:4b:de:ae:c1:55:e2:98:a3:
         15:ae:fd:c9:a7:42:3e:06:f9:af:f1:63:36:31:49:20:4c:d6:
         4f:6c:c6:59:a1:64:69:3d:19:bf:6d:73:16:0b:f5:d5:8c:f1:
         9d:9d:d3:18:3f:ab:25:67:16:ee:ea:b4:26:c3:59:17:a5:a6:
         34:ef:e6:45:28:bf:1e:d5:f9:a6:c1:f6:5a:bb:9f:ff:2b:7c:
         38:09:ee:f4:64:f3:bf:72:43:8f:b3:fa:92:f3:b8:dd:5d:fe:
         17:08:70:e9:f8:eb:4d:c0:b8:18:a9:40:1d:66:82:fd:31:80:
         44:3a:9f:cb:3f:f7:ed:c9:95:b0:e2:73:80:1c:5b:4f:5a:08:
         06:15:77:b0:51:7a:27:bb:0a:0f:12:32:81:e1:b7:8d:25:3c:
         41:47:6c:02:81:d7:b2:b8:c7:b0:c7:17:46:c9:83:a6:65:0d:
         d4:f5:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:33:59 2026 by rpki-client