Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa
File:                     557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa (raw, json)
Hash identifier:          X66jKT3cyV4Lre9AaRq9zWeCmnmtivpPKDljoMEqEgc=
Subject key identifier:   1B:69:32:B4:D3:2D:7D:80:CB:08:76:10:EA:AE:BE:EE:DD:15:F0:B7
Certificate issuer:       /CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
Certificate serial:       010D0C9F4328584DA28015A225D2A0582F77A200
Authority key identifier: 4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     18701
IP address blocks:        138.32.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:15:a2:25:d2:a0:58:2f:77:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffc39f64-f356-459c-8bf7-d142a7a166f3
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=cbd70030-2c9c-413a-9b19-65846377fb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:d3:8a:3a:62:bc:fa:e4:ad:e8:1e:f9:69:
                    3b:cd:31:52:a4:74:c3:8a:29:a2:e0:ad:6b:3b:33:
                    7c:e6:3c:b1:9c:42:2d:ad:98:49:a3:8a:99:59:3f:
                    ce:2b:d4:d5:11:d6:e2:15:13:fd:f4:2a:fc:de:44:
                    95:07:07:a3:d5:8f:ac:28:6f:be:a1:0f:c0:fd:9c:
                    6c:80:5b:65:74:b6:cb:52:2b:8e:0d:b2:fb:ab:90:
                    cf:9b:63:ea:07:60:ab:ed:5b:c8:28:62:55:66:3b:
                    6f:9a:7b:ba:6c:d4:cd:a8:49:fb:7b:33:ab:70:7b:
                    99:ae:38:c9:e7:89:ec:94:71:27:0b:f8:4b:68:cf:
                    0a:a5:42:12:39:d4:a9:80:01:32:94:33:46:20:b5:
                    55:bf:18:41:53:38:76:05:c7:35:a3:98:06:b0:91:
                    d0:f9:ed:6c:3f:89:5d:ce:ce:77:d5:e6:c6:84:4d:
                    80:44:51:1e:b5:0a:9b:b5:6a:39:f0:cd:3c:60:73:
                    b8:88:e9:62:82:b5:f8:b2:51:0f:ae:ec:aa:b2:83:
                    23:99:47:e6:88:40:cc:4f:31:20:40:58:c8:a0:a2:
                    5b:45:29:cb:7d:ce:40:9f:6a:f2:b9:ec:ed:03:00:
                    ff:07:d5:39:72:d5:5a:f9:98:4f:f9:27:20:b8:60:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:32:B4:D3:2D:7D:80:CB:08:76:10:EA:AE:BE:EE:DD:15:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/557665bb-e9c9-3059-a5bb-41981f2c4fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3/ffc39f64-f356-459c-8bf7-d142a7a166f3.crl

            X509v3 Authority Key Identifier:
                keyid:4D:52:88:03:05:6C:F7:2A:7F:D0:E7:BC:30:7E:24:98:8D:2D:20:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ffc39f64-f356-459c-8bf7-d142a7a166f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.32.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:96:16:6e:a1:02:d3:f8:75:d8:4c:5b:d7:96:fe:f9:a2:
         3b:79:7b:f0:87:24:5c:65:3a:04:aa:eb:6f:99:05:55:d3:89:
         9b:c6:b2:47:b4:32:95:4b:a4:f5:17:a9:ee:b0:60:a6:7d:9b:
         90:ce:4c:8f:ce:15:ca:3a:28:59:fb:50:a4:7d:5a:2f:f2:0f:
         31:8e:95:fe:ba:11:39:2c:0c:8a:9c:e6:e9:79:bc:68:8a:01:
         55:16:52:92:4a:16:9e:11:97:ed:ac:83:ea:4e:67:66:d5:71:
         8a:a3:48:aa:51:e3:ec:f2:53:47:bd:5e:3a:8d:77:b6:2f:e4:
         4c:5b:ba:96:44:32:01:c8:0b:f5:6c:6d:1a:d2:5c:35:13:a9:
         ec:84:10:11:98:0f:07:da:57:e3:af:10:50:b2:c7:f1:6e:fd:
         19:dc:22:29:e4:80:55:0b:37:e8:ef:d9:0b:94:66:41:67:bd:
         49:d7:f2:ad:88:1b:83:5c:11:89:5b:91:2b:a6:2c:e9:4c:60:
         a2:13:6d:b5:7b:2f:78:ae:a7:d2:41:3f:09:af:39:84:66:9a:
         60:de:dd:bb:05:62:9a:7a:d7:ad:7b:a7:7f:68:9d:5f:e4:3d:
         e8:87:d4:22:9a:03:80:39:5a:cc:f0:98:a4:51:83:bb:88:73:
         fe:be:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:14:10 2026 by rpki-client