Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa
File:                     37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa (raw, json)
Hash identifier:          W8L0W9M2ucPKREbrg0XIvSJfviajF1+BW7rr9Wi0/qk=
Subject key identifier:   54:DB:E3:D7:C5:2F:BC:D2:0E:2F:F0:52:D2:D0:70:F3:DD:EC:0A:B3
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584B0313E7CA1ADEFE37484489C0
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa
Signing time:             Fri 29 Aug 2025 00:55:14 +0000
ROA not before:           Fri 29 Aug 2025 00:55:14 +0000
ROA not after:            Thu 27 Nov 2025 01:55:14 +0000
asID:                     18701
IP address blocks:        138.32.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:13:e7:ca:1a:de:fe:37:48:44:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Aug 29 00:55:14 2025 GMT
            Not After : Nov 27 01:55:14 2025 GMT
        Subject: CN=dc42009b-5c37-4291-b1a0-1430d52006f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:db:d9:d0:86:37:72:3b:7f:24:c0:66:51:
                    60:a6:d7:c0:33:aa:b7:78:46:89:42:08:7a:09:b7:
                    92:93:d6:44:6b:c9:8f:88:b9:27:8a:fb:db:85:9f:
                    66:2b:b6:c7:e7:f0:6a:b5:18:0b:20:d9:d4:54:6f:
                    e6:1d:e6:97:4a:cc:ad:de:b8:05:22:25:fc:ab:ec:
                    97:5f:fe:9a:c4:46:43:30:9a:ba:bb:02:a5:82:d9:
                    32:51:14:bb:fd:6f:08:c3:1c:73:09:28:1a:0a:4a:
                    9e:f5:55:53:c3:75:a2:f9:cf:1e:e2:5c:79:19:98:
                    e8:04:e6:d7:6b:ef:41:ac:4a:12:8f:99:59:e6:d4:
                    48:f7:72:75:07:c7:56:79:29:31:1b:32:07:69:8d:
                    8d:06:41:c0:ff:af:12:b3:ec:27:9e:c9:c6:4b:06:
                    76:6d:a2:c1:ce:b5:f2:cc:60:aa:8c:84:5c:21:4a:
                    6e:fc:0e:de:09:ae:89:fc:f2:0c:42:89:a3:1e:2a:
                    e0:29:dd:1d:a9:3f:20:59:14:b6:28:0d:56:df:8c:
                    0b:d1:98:22:fe:37:96:bb:c2:b0:2e:cc:95:12:15:
                    93:1c:13:b3:d8:80:6b:d5:8c:a7:88:46:c6:4a:32:
                    68:d7:9b:62:76:48:48:ee:8d:71:5f:ef:04:d9:fe:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:E3:D7:C5:2F:BC:D2:0E:2F:F0:52:D2:D0:70:F3:DD:EC:0A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/37bf02d4-a378-324c-8da9-205b8f0ba7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:83:22:2a:82:90:c1:c3:57:c1:2c:80:05:3e:b1:2c:f0:70:
         41:2f:34:e1:ae:c5:66:17:57:75:ec:28:ac:1a:2c:d1:65:b1:
         3b:a8:95:4b:f5:87:fc:40:bf:36:59:ba:d2:6b:cd:07:0d:96:
         04:93:3a:57:21:72:f2:94:ae:6c:2a:8f:b3:2c:f0:1e:54:ab:
         51:82:d4:f2:bb:04:5d:09:14:72:d7:0d:ae:98:b6:06:2b:65:
         9b:7c:bd:20:58:52:2d:16:1f:98:da:1d:94:48:14:c4:ee:94:
         53:fd:6c:c3:b8:e5:96:6f:3c:1f:c2:04:a3:16:6f:b7:84:b1:
         ae:8b:79:17:b1:23:f6:0e:82:4e:1a:83:3a:4f:f5:9b:52:e4:
         cc:54:4b:a7:e7:c0:17:1d:ca:fd:e2:a2:92:0d:c7:e5:63:74:
         89:53:90:28:07:d9:45:e1:66:68:c0:a0:df:a6:e4:63:c3:c2:
         d6:44:00:69:93:9e:a1:8a:31:77:d2:7e:be:40:5e:b2:2b:4a:
         fd:0f:32:24:36:d8:e5:7f:bc:ad:d2:33:dc:81:71:35:22:3b:
         03:2a:e8:b5:9b:06:99:87:dd:8e:f4:e4:c1:d5:48:82:44:69:
         40:6a:10:e7:53:6d:6b:dd:5e:c8:43:e8:bd:64:bd:70:1e:74:
         8f:72:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:34:26 2025 by rpki-client