Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
File:                     14e815f8-9bf5-3679-b99c-adfb53e03dab.roa (raw, json)
Hash identifier:          /l1GtxN8W2XmSbIKhQYbQvsNB4XBkhJ3uVLNqMCN92U=
Subject key identifier:   04:15:63:C0:4D:C1:FC:1B:5E:E3:A0:25:57:19:32:93:F9:EA:2D:E7
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F4328584DE84B354901BDC072A673B900
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     396253
IP address blocks:        138.43.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:35:49:01:bd:c0:72:a6:73:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=5d8ee1c1-ba87-42ae-9e40-8ff184804459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:27:80:c0:cb:1f:ab:b6:4c:27:86:2b:73:
                    14:c7:72:5f:ba:b9:1e:a8:44:56:be:37:8b:fc:1a:
                    3a:fb:ba:9f:c1:05:b9:22:68:9c:35:cb:80:5c:d5:
                    5a:a4:c6:47:4a:b5:a5:49:2c:84:ce:cc:01:32:0c:
                    88:6c:e0:4d:08:41:bf:fe:b7:8c:3a:22:a4:53:97:
                    bd:2f:39:79:09:96:75:4b:ec:96:5e:ad:3a:5f:95:
                    ed:72:d6:42:e6:e7:ce:8d:84:54:86:98:f8:eb:0f:
                    f9:89:f3:c2:78:77:6c:fe:90:dd:82:12:4f:f5:f7:
                    a6:03:99:a3:e8:f3:cc:da:9b:11:55:2d:e6:86:c5:
                    ef:fd:b1:3d:bc:e4:50:56:30:5e:9e:aa:16:d5:a5:
                    f4:e1:4a:4c:5a:4d:19:fd:e0:bb:64:f3:b4:79:f7:
                    33:39:28:18:dd:c0:2d:4c:ca:73:de:50:78:db:db:
                    38:c7:d8:3c:ec:33:06:75:12:68:5a:ca:42:a8:1c:
                    c9:18:4f:7f:08:a3:f5:dc:ab:23:05:b2:2d:19:a1:
                    96:ca:15:e6:13:0a:97:59:6e:36:05:49:eb:3f:f4:
                    83:82:e8:37:1c:6a:d9:aa:52:65:62:be:d3:d5:94:
                    08:0f:0d:af:21:65:92:69:ea:0f:66:be:cf:5e:3f:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:63:C0:4D:C1:FC:1B:5E:E3:A0:25:57:19:32:93:F9:EA:2D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/14e815f8-9bf5-3679-b99c-adfb53e03dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:6c:da:a1:6d:69:ab:24:4f:99:54:a5:d0:a9:04:f5:6b:
         20:92:03:ee:79:08:96:6c:ef:9f:b7:bb:e3:b8:f5:21:33:e6:
         36:ac:9e:33:a0:dc:eb:5c:06:a8:8a:9e:97:95:f2:1c:31:00:
         0c:67:ff:9a:c5:2b:8c:17:b2:45:03:88:a2:c7:ba:82:09:53:
         f6:10:2f:51:8e:0f:cb:56:5c:ce:d7:24:4b:9f:cd:47:68:74:
         15:de:64:c6:a0:e2:dd:d8:d4:a7:3d:1c:02:56:0a:f8:e7:dd:
         5a:5d:ee:89:e9:08:22:fe:a8:c4:34:fa:b8:ee:8c:2a:5a:b9:
         71:23:d1:c0:9e:8a:9c:3e:04:c6:46:80:35:a1:77:71:7b:db:
         69:46:2c:ff:69:46:49:46:6e:ed:bb:17:95:b9:57:44:3f:1b:
         51:80:b2:4b:e0:4a:2d:f8:bf:be:03:61:32:23:b0:3e:65:88:
         95:51:2f:0f:8f:45:8b:f6:bc:47:c2:ed:1a:00:58:96:30:e7:
         0d:aa:24:b0:cb:db:49:75:c8:e7:e8:ef:93:d6:33:88:e9:bb:
         36:0c:cb:01:5e:3f:ef:63:ae:1e:b7:09:cd:23:56:22:83:c9:
         22:86:30:e3:d0:27:0f:30:63:9d:51:53:02:86:20:55:77:63:
         47:1d:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:39 2026 by rpki-client