Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa
File:                     f5643093-be3f-3931-b854-e93e480f3970.roa (raw, json)
Hash identifier:          QL95amE6AguQBgaZIBuy+JUGvYN0+QjM+91/onk36Ao=
Subject key identifier:   44:58:6C:9B:A6:0F:C5:24:91:5A:E1:E9:61:15:E8:93:7E:91:75:05
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F4F080940312C2560F812AA80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        138.113.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:09:40:31:2c:25:60:f8:12:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=7cfe0539-2992-4888-acea-c3bff63b7809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:7d:0d:a2:b7:1e:cf:76:45:c2:c8:be:bc:
                    f2:32:eb:e3:e9:42:e6:fc:1e:24:f0:a8:f7:8d:8a:
                    75:a6:20:bd:bc:02:69:18:1d:02:3a:6f:27:aa:6f:
                    01:c8:55:ae:09:5f:32:b4:3d:8b:c1:fa:41:53:4f:
                    ff:28:2a:c5:2c:2e:23:b7:90:ff:b6:fc:bb:09:8c:
                    84:f0:7a:90:b0:17:5d:9d:a8:b6:c3:12:a5:92:39:
                    22:d3:eb:5f:d0:13:8e:8f:b2:d0:b2:56:7f:3e:3a:
                    43:1c:c4:e5:60:1a:6a:a8:be:be:75:4d:87:bb:9b:
                    54:1e:70:59:44:f7:52:d5:fd:ac:4d:25:a7:19:73:
                    06:bc:7d:92:3b:70:9e:46:9c:be:66:5d:14:e2:b8:
                    b0:d0:fa:11:f2:b0:be:96:13:16:d4:4b:02:76:84:
                    4f:be:f7:f1:e1:36:3b:e7:f9:23:84:8b:b9:7d:e2:
                    1e:3f:38:dc:2c:90:e5:38:1b:06:dd:ad:64:44:f4:
                    50:c9:87:9f:a3:c1:c7:89:cf:f6:ee:bd:e9:74:6a:
                    e3:13:61:c1:fe:13:c9:66:4f:fa:d1:d7:a1:a1:3d:
                    9d:24:a5:bf:6c:27:da:a9:10:62:73:c9:d4:8f:ee:
                    10:42:2d:77:13:46:b3:c0:4d:49:5e:92:48:d2:26:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:58:6C:9B:A6:0F:C5:24:91:5A:E1:E9:61:15:E8:93:7E:91:75:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:5b:d4:38:e2:0e:60:55:4b:20:b4:76:1f:09:1c:40:77:
         05:12:1e:45:0b:e9:21:6b:a5:cc:75:4a:49:ea:4e:8b:27:67:
         d2:4f:b7:70:47:c7:ea:70:af:75:26:7f:dc:0a:e8:8f:ee:b2:
         44:71:24:f4:04:3c:a5:0e:6c:41:86:a3:5f:8d:a5:06:0a:b6:
         12:f7:35:3f:02:c6:cc:7a:bf:59:ee:bc:b4:13:9c:bf:71:27:
         22:8d:9e:72:ae:1d:6c:48:97:a5:a4:86:c9:85:94:c8:7a:7a:
         de:b6:3f:1b:ab:63:14:6c:3e:d0:7d:64:c4:67:f5:74:62:c1:
         ed:96:59:ab:3e:b8:25:75:03:1c:4d:a1:8e:69:98:31:30:3b:
         93:b2:e6:25:11:07:5c:f1:25:84:b7:3e:76:c6:bb:1d:e1:94:
         58:57:aa:8e:6e:b8:7f:40:64:cc:85:20:7d:9a:3f:89:ac:03:
         fe:98:4c:94:16:89:71:0e:50:5c:b0:d3:00:1a:42:bb:3d:7c:
         cc:23:a7:cd:cd:dc:66:eb:28:a3:d1:49:9e:03:4b:24:8e:69:
         80:e5:c2:4f:9f:e2:f3:78:78:b0:fd:46:5a:3a:2b:9e:43:92:
         47:70:16:71:db:4e:dc:90:b9:6d:f3:e5:e6:dc:4e:63:aa:bb:
         f0:18:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:52:57 2026 by rpki-client