Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa
File:                     df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa (raw, json)
Hash identifier:          4vyXhLRCu5J7h5eYk4JGWShwMiLb9oNkPlcfoiXAV9U=
Subject key identifier:   B3:39:43:1E:B1:E6:E2:A8:8F:24:4D:F3:3E:5E:DE:81:0B:28:0F:2A
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584EC63C7452A43E4297A40C0380
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     396368
IP address blocks:        138.207.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:74:52:a4:3e:42:97:a4:0c:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=8c7f58aa-6024-4884-b8c3-0540dc4bd9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f8:1c:5b:58:80:f9:ba:34:db:62:02:f2:3c:
                    07:72:3c:63:a5:7c:d3:8b:a6:3f:79:c0:ce:cd:e3:
                    62:50:93:a0:e5:0f:00:c3:7e:c4:fc:d4:f8:88:52:
                    e4:ba:c7:a1:14:ba:2d:9f:14:8f:c1:02:6a:49:c6:
                    85:49:3b:fd:7f:e7:44:60:25:f2:e3:07:28:ac:47:
                    31:8a:a5:48:93:c9:e5:59:92:26:3b:86:5e:01:4f:
                    87:cf:5b:b8:78:69:c9:d1:fa:10:11:45:94:21:80:
                    06:11:55:65:ad:c9:11:30:b0:eb:a2:55:7e:07:6f:
                    06:5d:f6:2d:c5:c1:74:7b:f8:c9:62:35:47:75:17:
                    d4:ae:2f:e1:44:87:99:9f:3a:66:3f:36:71:29:8f:
                    c5:2e:ea:e7:1e:83:c1:f5:3b:6c:d0:4e:1b:0e:dc:
                    e9:25:09:16:47:df:72:88:a2:0c:98:57:61:b4:25:
                    73:b4:66:fb:d7:00:68:28:da:46:4c:4f:31:45:85:
                    8d:d4:56:1d:94:73:54:9a:8c:68:a3:d6:f8:eb:4c:
                    13:81:37:cb:d7:4c:29:45:eb:8c:33:2d:d1:07:43:
                    24:bf:4d:a7:d5:83:63:1a:36:fc:10:bd:83:27:cb:
                    72:ed:00:fc:aa:46:fe:0f:e1:e8:a1:17:3a:e5:38:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:43:1E:B1:E6:E2:A8:8F:24:4D:F3:3E:5E:DE:81:0B:28:0F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/df86d6b1-98fb-3117-a717-c8b49c81fbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.207.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:74:70:f4:9b:8a:05:18:73:32:69:a1:8c:c1:ca:aa:38:f9:
         ef:82:17:9d:73:7d:5a:79:f4:88:4a:88:6e:ba:12:0c:79:39:
         38:6a:d2:88:de:4f:87:a2:9f:e1:78:a8:91:f9:3c:71:8e:cb:
         05:e1:bd:c9:d1:f8:3d:c0:b8:63:bf:35:63:e3:8b:4b:3d:2d:
         92:69:b9:60:d8:2f:b3:c3:16:98:44:e3:fa:e1:0e:ed:b1:7a:
         3d:73:01:36:fc:0e:22:41:a0:1f:ef:d8:57:5b:f3:96:93:b9:
         1b:06:e1:a0:5b:97:ae:32:62:ee:65:3d:ad:01:06:19:55:c0:
         07:9b:91:f9:9e:aa:2b:12:f8:a6:f1:df:f8:ea:2b:c2:64:3d:
         86:85:3a:0f:fc:cd:25:98:24:dd:b3:66:41:f3:0d:9e:10:be:
         93:af:5e:00:bc:55:d9:74:c3:73:28:bd:f9:be:57:a4:db:f6:
         45:ac:27:af:e0:e9:8f:f8:b7:f2:8e:a0:0d:d6:e5:b0:1f:de:
         27:a7:3a:d4:4f:08:07:55:f9:e5:3e:d8:b2:4b:b6:a7:2a:6c:
         c8:3b:df:18:a3:e3:d1:7d:9e:a7:4c:48:bb:ff:81:6e:ea:be:
         2a:37:61:02:a6:32:a9:79:a1:05:d0:e3:23:d8:cd:7e:ce:73:
         29:90:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 07:22:45 2026 by rpki-client