Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa
File:                     54330fd4-6c17-3e7d-a020-c9952dd07be0.roa (raw, json)
Hash identifier:          mB9T1I2Uc2JyxW9q7gAMnLj7RTZO+RYL+HofNWvu5MM=
Subject key identifier:   6E:11:59:0D:A3:F4:BA:1A:66:6E:41:14:B3:FD:A1:F4:51:84:1D:FF
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584B031B3D014DB20768583AA160
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa
Signing time:             Fri 29 Aug 2025 01:10:00 +0000
ROA not before:           Fri 29 Aug 2025 01:10:00 +0000
ROA not after:            Thu 27 Nov 2025 02:10:00 +0000
asID:                     18701
IP address blocks:        138.32.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:1b:3d:01:4d:b2:07:68:58:3a:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Aug 29 01:10:00 2025 GMT
            Not After : Nov 27 02:10:00 2025 GMT
        Subject: CN=f814f4d9-66d7-4403-a11c-3b7b6bf0b47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:ea:44:68:3a:d4:b2:72:48:58:d0:38:1d:
                    ca:45:07:15:c6:dc:54:82:3c:d6:b9:2d:65:b2:33:
                    39:a7:81:42:88:bd:c9:6c:50:c4:a0:12:56:f3:a9:
                    da:d0:a6:cb:4e:ea:fd:8f:8d:cb:99:43:f8:a6:7d:
                    b3:1c:25:4c:91:7d:c7:1c:34:32:39:60:3e:e1:14:
                    b9:c2:f5:71:bc:1b:ab:a8:4b:90:e2:11:e0:bc:f2:
                    66:65:0c:87:32:f3:58:7a:23:3d:09:b6:64:f7:df:
                    3c:3d:76:fd:3c:b2:b8:50:97:27:d9:0f:c9:6c:c3:
                    cc:bd:1e:34:a0:6e:ba:c3:fa:89:b9:de:3f:42:be:
                    29:32:dc:27:e9:36:00:3d:df:a3:16:1c:3d:a6:7f:
                    9d:35:bf:44:65:89:7a:06:85:b2:df:66:28:89:7f:
                    bf:38:98:c9:34:99:cc:ad:d1:d2:9a:0a:f6:04:cf:
                    37:d4:13:5d:c3:06:a7:c9:d6:d6:fa:de:ff:cc:b7:
                    6e:63:ae:6f:e8:2c:45:1e:c6:01:8f:05:8e:dc:3a:
                    ac:03:a0:31:70:99:05:38:6b:b8:53:e1:ad:5d:e6:
                    d3:ee:d2:7f:11:46:33:88:5c:4e:ac:2b:c9:04:40:
                    22:ee:b4:38:90:4c:ed:47:85:03:76:ac:6b:9e:b0:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:11:59:0D:A3:F4:BA:1A:66:6E:41:14:B3:FD:A1:F4:51:84:1D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/54330fd4-6c17-3e7d-a020-c9952dd07be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:c0:81:15:1f:68:22:e5:3a:27:5c:c7:7d:8d:44:dd:62:
         2e:a5:89:f6:b3:ef:17:d6:20:ef:9d:00:60:a6:97:09:8a:ad:
         3b:55:a9:84:e7:17:5a:bd:45:8c:22:38:4f:df:e3:11:98:54:
         f8:97:a9:dc:ca:a2:36:12:75:d7:83:ea:bb:35:0c:da:5b:cc:
         e4:a0:b0:30:e5:55:75:fb:a3:6c:e7:fb:a1:8b:7e:25:1d:78:
         3a:92:9e:10:14:6e:33:cb:a8:3b:b5:85:8f:35:e2:26:75:8d:
         12:c7:84:7c:cd:81:68:83:a4:aa:fe:7e:ca:e9:59:68:a6:02:
         d1:60:d2:32:17:43:b7:77:0f:a9:91:e4:42:c5:15:07:4a:99:
         b6:bd:04:9d:01:f0:e1:4d:e5:7e:a6:8b:bf:b8:47:ca:9f:e9:
         41:ef:7f:87:8c:8c:5b:c3:e5:cd:67:51:35:a6:a9:80:49:bf:
         3b:5c:ec:70:9c:72:4c:78:2f:fc:b2:1b:69:c4:70:47:b2:c6:
         74:38:5d:f2:b5:c5:85:9d:8b:3a:63:58:b1:4f:e6:9d:9c:3d:
         00:8f:d3:ee:64:2f:42:b6:a5:80:8e:01:8b:8e:47:93:eb:92:
         b1:fc:4c:bb:49:d9:b9:f0:08:26:9d:8e:37:2d:ef:df:d1:2a:
         8b:f1:7c:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDGz0BTbIHaFg6oWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZjMzlmNjQtZjM1Ni00NTljLThiZjctZDE0MmE3YTE2
NmYzMB4XDTI1MDgyOTAxMTAwMFoXDTI1MTEyNzAyMTAwMFowLzEtMCsGA1UEAxMk
ZjgxNGY0ZDktNjZkNy00NDAzLWExMWMtM2I3YjZiZjBiNDdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHqRGg61LJySFjQOB3KRQcVxtxUgjzWuS1l
sjM5p4FCiL3JbFDEoBJW86na0KbLTur9j43LmUP4pn2zHCVMkX3HHDQyOWA+4RS5
wvVxvBurqEuQ4hHgvPJmZQyHMvNYeiM9CbZk9988PXb9PLK4UJcn2Q/JbMPMvR40
oG66w/qJud4/Qr4pMtwn6TYAPd+jFhw9pn+dNb9EZYl6BoWy32YoiX+/OJjJNJnM
rdHSmgr2BM831BNdwwanydbW+t7/zLduY65v6CxFHsYBjwWO3DqsA6AxcJkFOGu4
U+GtXebT7tJ/EUYziFxOrCvJBEAi7rQ4kEztR4UDdqxrnrBHnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4RWQ2j9LoaZm5BFLP9ofRRhB3/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZmMz
OWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQyYTdhMTY2ZjMvNTQzMzBmZDQtNmMxNy0z
ZTdkLWEwMjAtYzk5NTJkZDA3YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmZjMzlmNjQtZjM1Ni00NTljLThi
ZjctZDE0MmE3YTE2NmYzL2ZmYzM5ZjY0LWYzNTYtNDU5Yy04YmY3LWQxNDJhN2Ex
NjZmMy5jcmwwHwYDVR0jBBgwFoAUTVKIAwVs9yp/0Oe8MH4kmI0tICAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZmMzOWY2NC1mMzU2LTQ1OWMtOGJmNy1kMTQy
YTdhMTY2ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiiAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECywIEVH2gi5TonXMd9jUTdYi6lifaz7xfWIO+dAGCmlwmKrTtVqYTn
F1q9RYwiOE/f4xGYVPiXqdzKojYSddeD6rs1DNpbzOSgsDDlVXX7o2zn+6GLfiUd
eDqSnhAUbjPLqDu1hY814iZ1jRLHhHzNgWiDpKr+fsrpWWimAtFg0jIXQ7d3D6mR
5ELFFQdKmba9BJ0B8OFN5X6mi7+4R8qf6UHvf4eMjFvD5c1nUTWmqYBJvztc7HCc
ckx4L/yyG2nEcEeyxnQ4XfK1xYWdizpjWLFP5p2cPQCP0+5kL0K2pYCOAYuOR5Pr
krH8TLtJ2bnwCCadjjct79/RKovxfHY=
-----END CERTIFICATE-----
Generated at Fri Sep 5 13:14:56 2025 by rpki-client