Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
File:                     df871738-5e35-3002-9112-c507cc9ddafc.roa (raw, json)
Hash identifier:          U8Fhk3OsFCFOFR8MotaQP1NGXCk8+6/e59hLSmVvzSY=
Subject key identifier:   81:4D:4B:1C:71:E5:60:E3:2B:BA:33:B9:55:F5:77:E3:78:39:D4:88
Certificate issuer:       /CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
Certificate serial:       010D0C9F4328584DE84B377387E4913513BF47D0
Authority key identifier: 25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     17326
IP address blocks:        138.129.16.0/22 maxlen: 22
                          138.129.64.0/18 maxlen: 18
                          138.129.96.0/19 maxlen: 19
                          138.129.128.0/17 maxlen: 17
                          138.129.217.0/24 maxlen: 24
                          138.129.219.0/24 maxlen: 24
                          138.129.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:37:73:87:e4:91:35:13:bf:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62aeef8-b35b-4ca6-b7a3-93be1a181338
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=59f48536-c3d0-45b7-940a-5be82c901800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:bc:e2:ac:be:fe:a0:6a:3d:c3:0f:77:2b:
                    d6:a9:05:f0:6f:aa:45:23:db:42:97:b2:97:d7:b4:
                    97:2e:54:74:95:a9:ac:32:fa:33:5e:a2:1a:96:87:
                    c5:3b:a1:7b:50:34:66:50:85:a0:c0:e2:f5:f6:0d:
                    9f:8c:6c:c2:d5:ab:b4:23:68:6a:78:d3:f1:9d:fb:
                    28:6e:ca:e4:c2:3f:09:c2:32:6a:a5:67:cf:a2:80:
                    db:31:84:4b:7b:74:40:a5:a0:6c:1d:3b:e4:d6:62:
                    8d:20:ae:e1:5f:26:88:53:26:dd:2d:14:a8:3d:53:
                    60:e7:f1:9a:d1:4d:23:00:92:1a:b6:b4:cd:49:88:
                    d7:54:05:61:c2:26:7b:c0:f6:d7:be:7b:b6:c1:ec:
                    df:4a:17:41:6f:4c:ca:ea:b0:c1:cd:a7:91:f0:b1:
                    f9:20:ba:58:28:04:5b:7c:0b:5f:6e:63:fd:c1:37:
                    32:11:b5:c2:cd:a2:4f:b9:05:3b:24:84:62:03:fd:
                    b3:d9:cb:ea:65:53:77:8c:a8:24:46:1a:c3:b7:ce:
                    31:37:75:76:5a:82:7e:af:cd:35:25:5e:3e:8f:ce:
                    bc:88:3b:89:ff:22:e4:70:cd:fa:b7:e1:dc:90:68:
                    d8:bd:76:b2:d9:9f:bc:c6:0c:7e:69:15:ad:92:bd:
                    66:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4D:4B:1C:71:E5:60:E3:2B:BA:33:B9:55:F5:77:E3:78:39:D4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/df871738-5e35-3002-9112-c507cc9ddafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338/a62aeef8-b35b-4ca6-b7a3-93be1a181338.crl

            X509v3 Authority Key Identifier:
                keyid:25:CE:5B:D6:D2:2A:6C:53:F9:97:25:F6:97:61:D6:F9:C6:B2:E8:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a62aeef8-b35b-4ca6-b7a3-93be1a181338.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.129.16.0/22
                  138.129.64.0-138.129.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e2:af:eb:b5:e6:4e:e3:1c:5d:d5:a6:fd:36:93:c1:94:3f:
         6b:4b:a6:e0:d8:66:3a:d4:f2:30:2f:33:fd:34:3d:88:9c:05:
         0d:9f:81:ac:4a:4c:38:7f:ac:c4:91:f3:ca:36:7c:4e:57:47:
         67:5b:0b:ec:a9:80:21:17:b0:ec:a6:ea:70:b5:19:ca:38:6a:
         78:38:d1:6c:c9:90:da:a5:55:7e:2b:15:4c:4e:d2:11:f7:44:
         01:b9:eb:06:94:6d:59:32:73:62:5f:0c:d9:69:5a:9d:30:84:
         72:b1:d9:12:98:54:81:1e:6a:aa:23:27:d5:da:6f:b1:df:a3:
         f0:93:0b:96:e6:7a:b7:2e:66:60:68:56:ad:c2:a6:c0:40:e5:
         0e:83:20:df:42:86:59:9d:d3:e6:f8:55:7a:6d:60:d6:3b:e8:
         fb:95:31:e2:a1:fe:19:ca:51:fe:3d:3f:37:bb:f8:3d:41:fd:
         cd:79:09:84:02:a2:64:2d:7d:53:cb:cf:b7:6e:07:de:8f:f1:
         66:ec:a0:34:f9:6d:13:b2:12:8f:a1:30:d1:05:34:ed:a6:7a:
         5d:85:8c:b8:5f:ee:03:81:a9:f3:bb:8f:8a:63:73:e9:60:71:
         55:8b:d4:4e:6f:c9:20:fe:aa:e4:8d:0c:9f:54:9e:8c:a2:b1:
         d7:39:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:41:27 2026 by rpki-client