Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa
File:                     557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa (raw, json)
Hash identifier:          +/50buEExmAUZ0QWDnWQiai0O5i8OWkjjBErmhJeQRs=
Subject key identifier:   7D:07:A6:3F:21:9A:48:9C:16:AD:A1:C4:7E:E5:62:4B:10:A9:E2:86
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584B03144CC77DB8BAEE7E267980
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa
Signing time:             Fri 29 Aug 2025 00:56:02 +0000
ROA not before:           Fri 29 Aug 2025 00:56:02 +0000
ROA not after:            Thu 27 Nov 2025 01:56:02 +0000
asID:                     18701
IP address blocks:        138.32.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:14:4c:c7:7d:b8:ba:ee:7e:26:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Aug 29 00:56:02 2025 GMT
            Not After : Nov 27 01:56:02 2025 GMT
        Subject: CN=42d2c387-3ab0-4b53-8475-3c4aabd31efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5e:e2:65:32:67:3e:64:56:e6:70:16:ec:90:
                    13:9b:4f:b1:cb:de:65:4d:52:f1:62:8a:a4:c6:e4:
                    05:56:68:d8:dd:30:e1:d0:c0:db:ca:1c:98:2b:de:
                    6e:ff:8f:e4:83:9c:2e:46:ad:5b:a5:74:5d:4f:c0:
                    6e:8a:e4:9a:35:71:32:1d:39:5a:58:1f:e2:89:da:
                    e7:99:17:9d:81:b8:ce:c7:60:6c:70:4d:ba:c1:9b:
                    af:48:06:8e:a9:35:56:ac:75:20:9e:61:2d:4b:fe:
                    52:30:df:63:6f:49:86:8b:a0:1d:a3:8c:a7:89:34:
                    42:3b:93:52:5d:e0:e6:05:28:35:f4:d0:ff:82:4f:
                    da:1a:1c:53:0f:e3:1a:2e:ee:fb:4d:1c:a2:0e:7c:
                    2a:13:62:51:f6:35:56:0a:2f:1a:32:aa:ab:1a:d6:
                    4b:28:4b:12:b9:70:c1:09:3b:0d:b5:0e:d7:ec:e7:
                    aa:da:d3:90:3c:04:9e:53:8b:6f:26:24:ae:d6:09:
                    87:63:73:2f:94:78:b8:41:41:0b:ee:35:0a:d9:ac:
                    fa:4b:d4:bd:e5:12:ac:d9:2e:eb:12:aa:e8:ed:ad:
                    c6:38:3d:08:36:54:ba:44:9d:28:bb:44:00:f9:a7:
                    1a:d5:1b:d6:93:1f:86:2e:65:d5:d2:06:08:b5:b9:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:A6:3F:21:9A:48:9C:16:AD:A1:C4:7E:E5:62:4B:10:A9:E2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:e2:67:ce:d1:c4:f2:a7:53:45:02:90:b8:22:15:21:5d:
         07:56:26:48:4a:72:7e:12:47:ba:bf:ff:e5:8e:40:43:b5:7a:
         bd:1e:27:22:63:d8:81:5b:01:44:8d:1c:2b:89:c6:a8:47:87:
         00:6d:ad:d4:63:29:62:5f:39:45:ab:88:47:c3:79:93:48:95:
         77:17:fd:fa:1d:52:af:c0:c4:7d:45:69:92:25:dc:2e:30:b9:
         88:a0:66:bd:44:9f:e3:21:f5:bb:87:8b:dd:75:19:57:ef:d1:
         2d:1b:59:af:98:0c:87:65:54:ae:f4:ad:b7:30:81:97:92:de:
         eb:5f:32:a3:36:4e:0c:b2:4a:a4:94:e9:21:b7:3c:d6:97:dc:
         1d:a6:ac:b9:36:a0:df:2a:fd:0f:a0:97:a0:a8:dc:c5:6d:00:
         08:44:60:47:f8:29:d1:e6:0c:8b:e1:f3:0a:1a:67:df:db:4c:
         71:47:80:91:5a:bc:0d:d4:da:7b:57:1f:05:35:f7:35:e9:6f:
         38:4d:7e:54:16:ef:0c:b4:2f:e7:d6:48:41:67:36:60:fc:ea:
         5d:93:f6:ac:97:95:ba:d1:09:ae:65:e0:ec:b9:ec:8c:6d:91:
         f0:b3:23:95:93:f4:d4:01:60:62:09:5c:07:8a:4d:7f:4c:3a:
         fa:b8:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 13:19:01 2025 by rpki-client