Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
File:                     48b04ea5-053d-355d-9e7e-68ca99d7a329.roa (raw, json)
Hash identifier:          7aLIYc6XvNKFzReV5+U/ILlfCwaltN0inRBC63xcJes=
Subject key identifier:   6A:72:24:FF:85:F8:41:37:47:B0:B9:6A:6B:0D:3B:55:AE:EF:31:29
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E6144B119C36FBA44BB7158C0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     54994
IP address blocks:        138.113.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b1:19:c3:6f:ba:44:bb:71:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=1adf1e7b-aab4-40ef-a4d2-5e8354961389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:32:f2:03:7a:8c:59:a6:15:10:5f:85:7d:26:
                    b6:c9:b2:2b:e8:c2:a6:c8:c0:21:d1:29:f2:42:66:
                    98:ad:c4:6d:9d:43:44:00:22:9f:7d:14:a7:2f:5a:
                    76:f6:1d:02:a0:35:5b:ff:61:26:14:70:f3:e3:ca:
                    21:25:0f:0c:22:81:45:ef:a1:ed:e4:10:7c:78:f9:
                    78:6e:19:68:49:45:8e:1d:10:f6:a9:97:8b:56:1e:
                    5e:72:92:64:76:5f:a7:ee:14:cc:c4:87:6c:f2:03:
                    cc:f9:62:9c:0c:34:58:08:04:e7:34:01:a1:ac:60:
                    29:59:4b:01:66:c1:02:56:48:70:14:09:62:0f:e8:
                    7c:b8:7d:61:09:fd:83:2d:a0:ff:35:85:5e:10:c2:
                    6c:de:30:87:a9:6b:dd:1a:ee:83:99:c6:fb:dd:e5:
                    83:90:5a:6e:89:8e:0d:36:8a:15:0a:a0:58:21:06:
                    e7:f8:be:88:6d:41:51:08:58:e5:20:a6:8e:0e:55:
                    94:bd:c9:55:73:15:13:92:eb:2d:5f:ce:d3:9b:a5:
                    58:9c:06:18:b8:ff:76:48:f3:51:c5:00:3f:3a:35:
                    e8:3f:57:60:3f:2b:97:c1:6b:c1:54:76:90:b9:a6:
                    91:37:75:a8:4a:d9:b6:ac:0f:3e:d3:6c:70:c8:c7:
                    22:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:72:24:FF:85:F8:41:37:47:B0:B9:6A:6B:0D:3B:55:AE:EF:31:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48b04ea5-053d-355d-9e7e-68ca99d7a329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:89:ad:94:5e:8e:b8:28:c3:9f:d2:a2:b3:c2:bc:92:68:
         05:17:07:af:a3:86:2f:d9:3e:ea:16:d4:8c:6c:39:dd:58:8e:
         ae:13:28:d9:62:2b:ba:f9:2d:d3:8e:51:e2:5f:64:a9:5e:f4:
         02:39:fa:43:9a:84:58:9c:65:3b:f1:2e:df:ec:ac:ff:26:d2:
         a6:0e:ca:0b:b1:45:98:1c:42:a6:33:86:06:8b:f6:09:65:82:
         a1:e9:93:9a:86:17:c8:dc:cf:31:1f:18:a9:c9:cb:ad:eb:ec:
         74:08:51:4e:76:de:c8:68:0d:4c:c3:2f:68:bc:2f:05:f1:fe:
         74:4a:8d:09:36:a8:9b:e9:ca:3e:47:ec:bf:b8:1f:4d:f5:1c:
         8c:a9:ef:f0:68:1c:6a:3a:7b:ae:6c:d4:d6:2e:22:21:d6:d4:
         19:82:ef:a9:54:78:cb:fe:4b:96:d8:b8:09:c0:6a:38:ab:b6:
         4b:94:34:c1:c8:86:a5:2b:bf:09:55:9c:77:da:2f:c1:96:e8:
         87:91:e5:67:eb:90:bf:73:98:9e:12:20:f1:5b:27:2b:f3:80:
         80:18:dd:74:43:32:a0:ab:bf:3a:f2:5d:20:19:b8:38:df:a9:
         82:e3:96:e6:cb:78:da:4d:49:e8:9c:f1:5e:a8:26:5d:88:c8:
         e9:4e:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:08 2026 by rpki-client