Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa
File:                     ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json)
Hash identifier:          xRCtrCROoDjY4+i30MBrfSsyz/iOBP14OoF8W/aEaAE=
Subject key identifier:   6C:CB:0C:6A:B0:C7:D3:5E:48:BE:18:82:B4:BF:7B:42:3C:87:66:4B
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584AA42B7BB9493AD3C224F27C80
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     395437
IP address blocks:        138.43.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7b:b9:49:3a:d3:c2:24:f2:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=f6157f05-818c-4416-9e8c-9e9d6d0c5c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:87:0a:6e:2e:1b:83:b7:06:62:6b:19:f0:
                    39:10:96:18:17:8a:fe:f0:b3:65:f9:47:f6:a1:b6:
                    40:6d:a8:90:1b:75:f7:0c:4f:67:30:27:9a:05:d5:
                    df:b7:0c:b5:92:34:c7:32:f7:75:6d:c1:45:b9:85:
                    3f:62:14:28:e7:1a:76:a1:b6:8f:a5:b7:b4:0a:6a:
                    7d:ec:59:ae:73:68:ef:17:96:40:25:5b:36:f6:a0:
                    97:e3:f9:29:12:97:e5:a9:de:fd:6a:f5:36:fb:ac:
                    5c:e5:98:90:3e:09:2b:dd:85:a5:d5:b3:90:f9:66:
                    a8:f1:a8:9d:86:5b:19:ac:b1:0c:f6:06:fd:cf:21:
                    51:64:ea:23:7e:43:29:2d:2f:82:03:1d:c4:64:f6:
                    41:d8:eb:37:cd:c0:ce:91:76:4b:f0:88:1c:74:7f:
                    c4:4a:c2:69:54:82:88:92:6c:a6:e6:50:49:32:49:
                    38:8b:2e:fa:ac:5a:80:04:b5:de:76:36:56:5f:f1:
                    3e:87:48:02:41:d5:3d:39:46:f7:86:be:96:94:ae:
                    17:53:43:69:4f:bf:eb:2a:a6:ca:9b:2d:90:ad:8a:
                    3b:f6:10:07:9e:4f:09:b5:58:e8:5f:f9:6d:a3:ec:
                    b0:ce:62:0b:73:b1:fb:29:18:09:7f:81:00:4a:e1:
                    a9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CB:0C:6A:B0:C7:D3:5E:48:BE:18:82:B4:BF:7B:42:3C:87:66:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:48:d8:d8:24:27:c2:5e:04:2e:1d:8e:6b:4f:77:d1:61:0d:
         42:31:fe:9a:2b:1b:1b:72:83:3b:98:2c:ab:fe:7b:2d:a1:8c:
         ac:0a:9b:d2:45:d6:e7:c4:53:ef:60:2e:db:98:97:61:ef:02:
         cf:65:a5:5c:d3:26:11:50:cc:e8:17:a2:97:60:f0:db:86:15:
         a4:13:71:a5:da:b3:9a:5a:0f:9b:78:c4:fd:85:3d:89:a7:6f:
         55:38:81:e5:fe:ce:56:e7:2f:51:7e:fb:38:a3:cb:7d:ab:19:
         1e:01:e1:cf:36:80:93:ed:cf:d9:70:ed:dd:27:df:45:08:f8:
         71:ab:75:16:95:75:d8:f9:b8:48:6e:6b:36:e9:d6:b8:d6:7a:
         95:53:b1:99:7f:a4:64:3f:cb:97:13:47:d1:8c:9f:ce:dd:97:
         67:18:d3:b8:1c:bd:d8:32:fc:71:ae:cd:ba:f3:19:63:cf:c8:
         b5:4d:36:ac:fc:1e:56:e8:e2:f0:5e:12:6e:eb:0a:a9:76:51:
         11:a2:f9:1b:8f:44:29:b5:f4:e9:75:66:9d:0e:e7:50:d9:46:
         64:68:f7:1a:3c:d8:2c:fd:e6:2c:e0:90:bb:65:91:1d:82:f2:
         cc:d0:7c:0d:d2:d1:47:12:19:f6:7b:01:a1:07:81:c9:fa:93:
         df:f0:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:17:15 2025 by rpki-client