Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
File:                     d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa (raw, json)
Hash identifier:          IaZj2SNw2zIvMvD5f/LEJpf+WIi3XqoivvGUBgWhiTs=
Subject key identifier:   1E:23:31:BF:B8:70:41:90:3A:C0:29:3E:0C:45:B5:A6:3A:65:52:9A
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F4328584F698D897BBBF14B5044929480
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     7018
IP address blocks:        167.253.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:89:7b:bb:f1:4b:50:44:92:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=f6a01499-a36e-4975-a43d-2efb42140fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:a2:74:d7:ce:00:3d:e7:7e:3b:2e:25:06:
                    63:ba:e5:c5:ba:77:ce:5e:d2:e7:20:1e:bc:25:46:
                    80:7d:bd:a8:7e:d7:5e:60:df:06:40:c6:ea:82:ef:
                    25:1c:03:08:fc:77:36:9a:8b:50:14:13:68:4b:e9:
                    3f:1c:13:7b:c2:9f:1c:92:d0:28:3a:3c:51:b6:b4:
                    d2:95:04:15:47:4d:0d:c2:a7:b9:32:5b:35:14:5a:
                    f2:27:8d:12:4d:f4:6e:d0:a9:04:7a:0f:39:d3:ab:
                    0d:14:c6:4a:47:71:e9:67:32:9d:16:a6:4d:69:da:
                    d5:3e:eb:87:1a:f9:09:c8:67:01:63:a6:dd:21:96:
                    b6:56:fb:54:74:2f:38:2a:5f:71:02:27:1b:36:4e:
                    69:2f:5f:7b:8d:23:18:f6:e2:0a:10:d9:5c:17:41:
                    78:67:94:34:af:82:f1:8a:a0:2a:08:14:12:e3:68:
                    bb:a1:c6:0f:03:84:48:fd:7c:88:77:12:42:10:32:
                    fe:6f:70:8d:1e:95:25:82:31:10:a4:3c:bc:29:02:
                    e5:b4:bf:68:f5:76:ad:db:40:3a:6b:58:ec:19:ed:
                    27:bc:a5:73:13:f6:18:b7:75:33:14:bd:3f:d6:f9:
                    0e:88:71:5b:5c:f1:28:c9:52:88:a4:a4:5f:17:63:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:31:BF:B8:70:41:90:3A:C0:29:3E:0C:45:B5:A6:3A:65:52:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d31d8a68-3aae-31fb-8758-9c9ec721c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:27:07:ff:0f:e3:9b:5f:4e:40:94:69:13:36:25:f4:0e:be:
         09:3e:da:b9:ac:07:cd:7c:75:53:a5:0f:7b:72:31:e8:e9:2e:
         29:1b:48:38:9b:d6:20:1d:95:4e:fc:b7:e5:57:b8:6b:05:11:
         9b:ed:40:b8:86:70:0b:38:ce:fe:e7:2c:d0:42:8b:da:24:1d:
         b9:c7:0e:d5:80:a4:68:eb:a1:88:0f:73:6c:1f:a2:e1:d2:f4:
         72:0d:e2:da:5e:bc:68:a0:0d:39:2a:f0:69:be:ec:14:3d:cc:
         a0:84:18:4b:cc:d4:30:90:76:bc:0f:34:c6:47:34:f5:e1:2b:
         3b:b0:77:cf:a0:67:59:b3:7a:e4:2d:99:e0:76:3c:35:be:cf:
         48:2a:70:d6:02:22:14:72:6a:3d:6c:94:5f:bc:00:eb:7e:1f:
         83:d9:d2:61:26:f7:98:36:62:2c:7c:61:04:1f:28:49:18:70:
         05:2c:78:8a:04:d7:58:75:b1:aa:2e:35:28:55:d7:98:ea:f1:
         eb:79:75:18:36:44:bb:ae:56:de:38:b8:14:2c:1a:35:07:48:
         bf:bc:02:9b:e2:cf:c4:d3:ec:1d:d1:03:0b:54:65:7c:cd:9a:
         2f:5a:fd:d6:84:d2:b7:74:8f:ac:50:f0:cb:bc:a7:6d:31:83:
         62:39:a6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:35:33 2026 by rpki-client