Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa
File:                     24b3e43b-3b83-3437-be0d-021a80ce94df.roa (raw, json)
Hash identifier:          FCLRpaEtAgbCXj2KAZWXjoyWfeoFOc4kjr6nzbVr4Es=
Subject key identifier:   AE:89:E2:41:D6:A8:9A:77:C3:48:53:5F:F9:A6:30:E0:8A:FC:8B:6D
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584F15CCEF05EF032C0AEC8E0580
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        138.32.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ef:05:ef:03:2c:0a:ec:8e:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=2f0d560f-23c4-4cf4-a834-f2ebb2af0129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:7f:78:1b:6f:a5:f1:21:f7:65:c0:1f:01:
                    49:f7:d9:79:8e:f4:29:03:b4:fd:39:15:88:22:ef:
                    88:4d:e0:d3:ed:81:a7:b2:0b:b5:38:8c:25:15:40:
                    f8:00:41:7c:c0:70:33:23:f8:1f:63:63:36:69:a6:
                    ed:f1:7b:67:cf:ac:7c:b5:31:b4:ce:50:7b:a9:b5:
                    c9:5e:66:d2:46:a1:af:8b:62:6d:0f:63:06:c4:18:
                    76:58:08:a2:42:02:9d:85:62:2c:c3:22:be:75:69:
                    f2:98:12:29:d3:8a:e3:29:92:e5:b0:be:e6:04:6b:
                    bb:b3:22:bb:b1:c6:c3:69:ed:24:d1:7e:a2:79:48:
                    39:c6:cb:b2:1a:a7:e2:63:11:49:a4:49:fd:ed:73:
                    14:a6:ec:8f:1f:34:f8:99:0a:3f:ce:3a:5e:3e:07:
                    a2:40:4a:94:32:f1:cc:2e:2d:02:46:6b:ea:06:ce:
                    56:ba:82:0b:6b:6c:16:ba:df:67:d9:40:d6:a8:aa:
                    94:70:a9:86:66:e5:b4:1a:e8:fc:d7:4d:4d:12:2b:
                    3a:ed:52:10:d7:08:99:9f:8e:e9:ee:aa:8e:6b:98:
                    6c:ca:d2:3e:90:29:5e:a3:95:76:a3:ac:b1:d5:f4:
                    a4:0a:9c:2a:d8:50:39:41:71:52:c1:9f:1f:7f:b1:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:89:E2:41:D6:A8:9A:77:C3:48:53:5F:F9:A6:30:E0:8A:FC:8B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/24b3e43b-3b83-3437-be0d-021a80ce94df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:3e:c8:3c:c8:5f:a3:7e:9d:cf:b2:8c:8e:b8:da:72:73:
         59:fa:72:7e:f8:88:91:cb:9f:45:6d:11:f5:3a:50:0a:05:6c:
         33:a9:32:58:a4:42:a1:e9:97:ac:f2:02:d3:30:59:29:b3:2d:
         83:bf:58:3a:ea:b3:4a:c7:dd:62:d8:fa:ae:13:e1:5f:bf:6c:
         fc:54:02:33:11:11:eb:7e:fa:50:d0:35:16:33:c2:8e:b6:09:
         78:12:de:99:43:db:80:b4:e1:c3:a0:0a:b4:6f:8c:48:c5:59:
         2b:86:38:aa:68:48:48:f3:b9:56:2f:6c:1c:ba:a0:29:9a:e4:
         02:70:9f:de:26:fa:52:a1:57:a7:26:54:4a:90:d3:19:23:cf:
         6a:09:4c:ae:93:e1:ea:a6:ee:8b:98:9b:3e:50:a2:a5:02:3a:
         af:40:34:4d:41:12:a2:af:f4:be:cb:cf:ae:b4:c5:32:aa:01:
         89:e2:bb:51:fb:fe:4d:08:e6:fb:12:ad:a8:2a:63:74:42:54:
         30:d8:14:b8:4a:6f:c2:8c:0f:22:82:00:29:8c:c7:ae:44:34:
         19:68:05:5c:9f:26:aa:8d:53:2d:7d:98:cf:dd:4c:e7:f4:e5:
         0b:12:28:a8:92:6d:fb:43:55:6a:fb:40:0e:17:a1:a9:a2:bf:
         66:aa:2f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:07:46 2026 by rpki-client