Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa
File:                     38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa (raw, json)
Hash identifier:          Vy/XwxNgOHh006qPdHwCDfB+yj616vHUHQljMw3N998=
Subject key identifier:   CE:C3:4B:73:49:1F:F4:11:C6:FC:10:29:10:05:BB:AD:EA:F5:46:75
Certificate issuer:       /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial:       010D0C9F4328584E6EE34260356362ACF6234C00
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa
Signing time:             Wed 08 Jul 2026 18:05:20 +0000
ROA not before:           Wed 08 Jul 2026 18:05:20 +0000
ROA not after:            Tue 06 Oct 2026 18:05:20 +0000
asID:                     209043
IP address blocks:        172.103.32.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6e:e3:42:60:35:63:62:ac:f6:23:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
        Validity
            Not Before: Jul  8 18:05:20 2026 GMT
            Not After : Oct  6 18:05:20 2026 GMT
        Subject: CN=c00dc0a9-b479-4ee8-857d-d10f8601116e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:43:0b:b3:7c:f1:4c:06:f4:47:67:90:e3:
                    94:c1:0f:c9:6e:5c:79:b2:d0:2d:6c:ab:e1:ff:23:
                    52:89:2a:7f:4f:46:25:e1:8f:f3:31:6e:16:17:7b:
                    01:2a:bb:2d:53:ab:a8:1e:a5:58:f0:83:d3:4b:ef:
                    c5:16:f9:7a:ec:76:4f:d1:63:a7:ad:e6:5c:a4:69:
                    b0:ef:e3:97:1b:73:a7:d3:58:8e:8e:31:e8:f6:42:
                    07:55:04:99:b1:d1:cb:b2:06:36:6b:46:40:41:06:
                    e0:e0:a6:89:39:17:ad:73:18:8f:e7:00:b2:cc:5e:
                    62:e1:72:46:c5:1c:c3:e8:b9:5b:9d:5c:f5:fc:d8:
                    28:0b:95:70:9c:67:5d:82:c7:1e:40:ed:06:c3:0f:
                    e6:e2:9f:0b:4f:df:8a:e7:35:b8:b0:62:3d:09:0e:
                    f7:b5:45:44:16:8a:0e:b4:0a:2e:23:64:48:3c:45:
                    ff:03:a1:35:0d:22:d3:a6:8a:2a:c0:04:8a:4a:2a:
                    f8:e2:51:a8:8c:3f:c9:c6:60:71:0b:1f:dd:af:c8:
                    3c:03:43:34:69:97:78:b7:f4:34:fb:70:fa:db:14:
                    f4:46:cf:49:0e:5e:70:b6:a3:af:9f:07:69:f2:36:
                    f9:9a:ba:8c:c4:19:55:8b:c9:21:15:da:33:74:4d:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C3:4B:73:49:1F:F4:11:C6:FC:10:29:10:05:BB:AD:EA:F5:46:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/38bfe1f7-6fb6-3cff-a7c0-4441192fba81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl

            X509v3 Authority Key Identifier:
                keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.103.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:cf:64:f3:8b:05:43:9e:f2:fd:7f:20:3b:4a:5c:f7:c9:
         e1:3b:75:ff:74:f1:cd:16:21:a0:2f:5e:7d:1c:8c:02:ba:f8:
         71:00:26:64:c9:35:20:e9:9c:0f:3f:bd:f1:0b:b0:2f:ff:b3:
         43:57:b3:41:6c:83:a7:94:41:55:57:78:f8:46:d5:f8:e5:db:
         d5:5c:9b:52:86:9f:69:43:a7:33:07:dd:70:7c:57:61:c8:1f:
         da:5d:14:70:cf:0b:00:10:77:04:6d:ca:a1:43:df:ed:2f:90:
         5c:91:55:70:85:df:fb:d9:e0:5a:2f:0c:1a:2a:ed:22:ea:6f:
         87:3d:c9:54:11:d9:b2:7b:7d:f9:8e:05:a6:83:46:1a:17:ec:
         86:6b:17:52:b2:3d:c8:6f:a2:d5:bd:35:2b:d9:a8:bf:a1:dd:
         96:65:a0:7f:3a:ba:03:9c:24:e9:14:2d:15:6a:dc:1e:27:9c:
         16:32:0f:e2:17:93:78:07:6b:6f:db:93:19:b7:77:40:2f:9d:
         f7:d7:8b:95:b6:db:0e:a3:94:ed:3e:da:58:6d:e5:c6:45:97:
         32:a8:66:33:1a:83:11:73:f0:fe:7d:1b:d1:0d:cd:e0:04:84:
         c7:a7:ae:b2:fd:d0:ad:fd:6b:6d:a1:4f:7a:bf:cd:5e:79:8c:
         b4:74:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 09:13:31 2026 by rpki-client