Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa
File:                     8011e5b3-48f4-34a8-9932-e07529862633.roa (raw, json)
Hash identifier:          d25UPB0Ndd4z13JEK3wJYCqwJbv61n4Ol7HjzGzzYQM=
Subject key identifier:   FF:B8:24:74:83:1F:D6:D2:E6:0A:1B:C5:30:D7:DE:05:A8:D3:52:13
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584DD8F067EEC753DFCC9D729740
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     14618
IP address blocks:        138.32.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:67:ee:c7:53:df:cc:9d:72:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=ddf72066-c952-4090-9d23-a2e2f405db0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:46:f0:3e:c0:63:cc:d9:46:5d:ce:da:aa:d3:
                    c6:e3:45:bc:9b:e6:15:c9:db:47:6e:d5:6e:c4:5e:
                    d9:b1:f8:43:f8:62:32:2f:73:fa:d5:af:15:63:90:
                    f9:06:f9:d7:9e:94:ff:f5:6e:d5:92:ec:c8:83:af:
                    61:61:c4:90:04:29:b9:3f:a8:f0:f3:3f:df:2c:13:
                    2c:3a:df:6c:d2:34:73:ce:a5:c0:77:76:fa:76:88:
                    8b:df:29:f4:36:59:d2:11:5e:5d:e3:59:9d:fb:2d:
                    1b:5d:64:30:ed:9e:bd:ce:0d:8d:d2:0f:a5:3c:42:
                    8c:ef:1d:08:f6:4a:3e:23:cb:a4:bf:12:a3:8f:ff:
                    f7:54:96:5f:f3:54:1a:30:f0:af:23:b3:d1:9d:91:
                    c8:49:e7:01:55:49:2d:8d:2f:8a:2d:15:b8:0f:42:
                    04:d6:b6:54:f0:d4:b3:e1:19:36:46:c1:c3:b5:d1:
                    7f:8c:1b:31:4e:da:15:c6:2f:4a:40:17:a0:ee:71:
                    c6:a0:ff:87:c7:46:3b:44:3d:c3:ec:fd:73:66:f8:
                    b8:c4:fb:c4:5b:93:94:09:9d:9b:7e:ac:5f:04:5e:
                    20:d7:cc:2b:94:61:61:04:56:6f:7f:7f:ec:d6:8b:
                    6c:75:59:cc:e4:42:5d:89:ef:26:f6:44:fe:ac:4f:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:24:74:83:1F:D6:D2:E6:0A:1B:C5:30:D7:DE:05:A8:D3:52:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/8011e5b3-48f4-34a8-9932-e07529862633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:28:7d:3a:e7:ed:a9:ee:56:ca:4e:fb:11:ba:7c:62:e7:
         0c:3a:da:13:0d:20:04:1e:9c:83:34:3b:63:ad:3e:aa:fa:89:
         79:6f:66:57:8c:c8:f1:7f:e4:70:a0:56:4c:56:fe:4b:f1:a3:
         9a:b5:02:95:68:b9:58:2d:44:47:7a:6b:8a:ad:2c:09:38:6e:
         33:87:12:84:cf:4e:00:2d:80:07:16:56:9c:1f:09:68:b9:2a:
         71:f8:2f:e2:7e:64:71:5f:a6:d1:7c:de:f0:e3:48:83:d4:de:
         96:59:17:db:af:16:a8:e7:6a:5a:d5:45:8c:f4:8e:ba:e0:24:
         26:f9:08:15:16:39:3b:70:dd:9f:f7:3a:d3:a1:d4:5c:c3:e0:
         da:bf:c6:dc:6a:bf:7e:70:e2:35:7a:1f:3b:a6:4a:78:b9:70:
         d0:e2:50:9f:f5:ca:f6:aa:85:f0:c0:46:09:52:ec:11:fe:0f:
         b4:17:4a:53:01:aa:2e:92:9b:9c:13:bd:ab:44:d3:1b:d2:8d:
         77:b4:f0:ca:b0:48:0e:ff:60:06:46:99:ab:fe:82:d4:5d:8f:
         0b:82:da:05:dd:6d:ba:a7:59:9d:04:75:de:95:e5:b2:fa:61:
         a9:ce:02:96:c4:f3:17:35:96:5e:17:6e:d0:1c:7b:03:cf:ae:
         54:4b:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:13 2026 by rpki-client