Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa
File:                     37aeddef-dd3b-3dec-801b-e0f9e620765c.roa (raw, json)
Hash identifier:          /8b8fmZmONtH4tBrbDAzryYsXf0ZfMPPSHXPUCRH2Oc=
Subject key identifier:   DF:7D:8B:A5:93:F3:F1:A4:57:FC:4D:CD:C1:04:09:D8:42:62:36:36
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584DEB15E3FC950DAFADBCD94740
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     393238
IP address blocks:        138.28.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:e3:fc:95:0d:af:ad:bc:d9:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=8fa8b820-4474-4120-9d87-60a7d6c2347a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:ac:d2:db:ed:1e:62:5e:04:17:99:09:8e:
                    2d:f3:12:ec:1c:a0:f6:84:e2:fb:22:36:48:25:58:
                    96:63:76:21:37:c7:1f:40:88:ff:e7:f9:42:5f:02:
                    d9:20:95:bd:4a:eb:9b:b4:03:dc:50:63:15:aa:2f:
                    25:fe:c4:23:82:67:cc:46:42:fc:d4:76:f1:bb:20:
                    5c:4d:b2:a2:9c:48:55:5f:80:c9:ba:49:94:eb:c3:
                    82:84:c3:7d:31:12:b3:b8:48:a0:4c:24:8a:d1:aa:
                    76:6c:2b:5d:39:c1:6e:7f:fb:0e:72:95:ae:e5:f2:
                    88:dd:56:76:00:fe:a7:2a:53:d5:df:31:04:81:eb:
                    2f:3d:32:99:95:89:cf:f3:d9:95:fe:09:7e:d7:fe:
                    51:6f:9d:f4:23:0e:85:25:bd:34:8d:e9:7c:17:a0:
                    f5:b0:e6:d3:e4:b2:49:18:69:4d:00:46:77:01:7f:
                    6e:7f:77:5b:e2:e2:b9:fa:1a:ff:a6:76:91:95:9e:
                    c4:b8:01:ea:16:23:eb:82:60:cc:c1:86:15:58:ae:
                    6a:78:64:7a:b7:0b:ca:2d:fa:dc:f6:e6:73:1b:58:
                    9d:6b:3f:8a:95:05:59:e5:8b:f2:8f:31:f6:1a:89:
                    10:47:93:c0:0c:73:58:4d:14:87:f5:e3:be:5d:0f:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7D:8B:A5:93:F3:F1:A4:57:FC:4D:CD:C1:04:09:D8:42:62:36:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/37aeddef-dd3b-3dec-801b-e0f9e620765c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.28.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:bd:5f:40:2a:73:3f:34:76:64:ce:f3:e9:4e:53:f2:46:
         12:2e:6d:6e:c9:5c:cb:2f:90:72:34:e3:b2:f0:30:27:41:68:
         20:cb:62:b4:c0:5b:28:af:fe:dd:62:9a:0e:60:bd:68:4e:7f:
         9a:e7:5d:d2:bd:38:08:7c:bd:0c:36:fd:44:2d:64:f0:fc:b2:
         9f:7d:7c:86:f7:06:83:e2:4c:13:0f:cd:1f:23:97:b5:2a:62:
         1f:1d:9d:bd:89:37:f9:c7:05:13:13:4a:75:e4:51:61:fa:37:
         c6:46:bf:c2:da:30:8e:6b:e3:50:8a:05:00:60:cb:32:34:ef:
         9b:d2:0d:65:26:8e:bd:69:9c:8a:59:8e:8a:dd:6f:9a:93:a0:
         d4:6c:a9:8c:2c:b6:cf:7c:86:af:dd:81:5c:4c:51:ee:24:a8:
         e0:3b:3c:5a:d3:5c:ba:1c:12:53:dc:de:4c:f8:80:82:3b:78:
         b7:61:91:39:20:97:c4:81:b7:f6:fb:13:5a:ab:33:ea:75:2f:
         94:61:e4:55:a1:1b:21:2f:2e:3a:62:18:fd:52:c0:50:f0:5c:
         97:55:1b:d6:70:c6:72:63:cb:dd:f0:71:00:27:88:d1:79:7e:
         35:15:c9:0b:33:29:ce:ac:b8:ea:eb:39:65:21:e8:c4:56:a7:
         a2:03:dd:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFeP8lQ2vrbzZR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2Ux
MmY4MB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk
OGZhOGI4MjAtNDQ3NC00MTIwLTlkODctNjBhN2Q2YzIzNDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN+s0tvtHmJeBBeZCY4t8xLsHKD2hOL7IjZI
JViWY3YhN8cfQIj/5/lCXwLZIJW9SuubtAPcUGMVqi8l/sQjgmfMRkL81HbxuyBc
TbKinEhVX4DJukmU68OChMN9MRKzuEigTCSK0ap2bCtdOcFuf/sOcpWu5fKI3VZ2
AP6nKlPV3zEEgesvPTKZlYnP89mV/gl+1/5Rb530Iw6FJb00jel8F6D1sObT5LJJ
GGlNAEZ3AX9uf3db4uK5+hr/pnaRlZ7EuAHqFiPrgmDMwYYVWK5qeGR6twvKLfrc
9uZzG1idaz+KlQVZ5YvyjzH2GokQR5PADHNYTRSH9eO+XQ/yEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN99i6WT8/GkV/xNzcEECdhCYjY2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MTkw
MzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvMzdhZWRkZWYtZGQzYi0z
ZGVjLTgwMWItZTBmOWU2MjA3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzE5MDM4ZDktNjkyMy00ZTI5LThi
MzYtZjQ1YjA2Y2UxMmY4LzcxOTAzOGQ5LTY5MjMtNGUyOS04YjM2LWY0NWIwNmNl
MTJmOC5jcmwwHwYDVR0jBBgwFoAUd7Dtd6dLz91nSrrpZ2b4HS5vbQMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDVi
MDZjZTEyZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHihwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmhvV9AKnM/NHZkzvPpTlPyRhIubW7JXMsvkHI047LwMCdBaCDLYrTA
Wyiv/t1img5gvWhOf5rnXdK9OAh8vQw2/UQtZPD8sp99fIb3BoPiTBMPzR8jl7Uq
Yh8dnb2JN/nHBRMTSnXkUWH6N8ZGv8LaMI5r41CKBQBgyzI075vSDWUmjr1pnIpZ
jordb5qToNRsqYwsts98hq/dgVxMUe4kqOA7PFrTXLocElPc3kz4gII7eLdhkTkg
l8SBt/b7E1qrM+p1L5Rh5FWhGyEvLjpiGP1SwFDwXJdVG9ZwxnJjy93wcQAniNF5
fjUVyQszKc6suOrrOWUh6MRWp6ID3cs=
-----END CERTIFICATE-----
Generated at Thu May 28 18:33:22 2026 by rpki-client