Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/387a56b1-8565-3c77-ae94-86b03ca0dab3.roa
File:                     387a56b1-8565-3c77-ae94-86b03ca0dab3.roa (raw, json)
Hash identifier:          xhYOV43RyhQAHsuaqxLKH95LI7BYtW92V3lR6L/qvQI=
Subject key identifier:   01:0F:3F:96:D5:4A:41:00:EB:5D:77:A3:A7:5F:60:31:47:29:21:7C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B742FA1538CA32C128EBDFAA0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/387a56b1-8565-3c77-ae94-86b03ca0dab3.roa
Signing time:             Wed 08 Oct 2025 13:17:26 +0000
ROA not before:           Wed 08 Oct 2025 13:17:26 +0000
ROA not after:            Tue 06 Jan 2026 14:17:26 +0000
asID:                     397954
IP address blocks:        38.147.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:2f:a1:53:8c:a3:2c:12:8e:bd:fa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 13:17:26 2025 GMT
            Not After : Jan  6 14:17:26 2026 GMT
        Subject: CN=4ddc6500-f251-40b2-bd92-6eaa1d4e8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bc:7b:35:4c:32:5b:1d:b9:4e:91:8f:6e:e4:
                    35:c2:34:c2:1a:30:a5:be:81:dd:11:01:3e:ff:71:
                    ce:27:97:5a:1c:d4:73:7d:81:61:89:01:b8:a0:34:
                    15:84:91:3a:9e:68:69:19:37:3c:63:df:48:5b:b8:
                    b4:39:45:ec:97:55:bf:1d:ab:cd:e3:fc:a8:9b:99:
                    27:34:e8:fe:b1:69:d7:23:80:86:fd:9c:08:05:00:
                    ed:06:8a:ac:d7:fe:84:db:9c:bb:ac:fa:a5:99:03:
                    8d:da:52:0e:4c:72:06:04:77:2e:00:8f:77:a7:6b:
                    25:d7:0d:f0:0e:02:7e:ee:cc:8e:56:57:ea:29:08:
                    49:a9:11:2f:56:8f:68:72:92:80:69:66:e4:bd:6a:
                    e9:3c:90:5c:6d:4b:f7:3f:fb:b9:0d:c9:12:81:8c:
                    b3:ae:81:e6:cd:32:8a:10:e3:1c:0c:15:fb:8e:91:
                    f2:ad:4e:47:1d:64:43:a5:5e:3d:b4:3b:bf:8c:df:
                    46:f7:1a:a4:c0:83:1a:d1:c1:57:fb:04:8e:12:f4:
                    ff:aa:0a:f2:e3:f6:10:d9:38:74:f5:b0:0b:95:de:
                    16:f0:c3:30:75:ae:de:0b:b5:e3:52:22:86:69:f5:
                    66:06:09:cd:67:92:35:eb:95:82:73:9d:9a:9b:42:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0F:3F:96:D5:4A:41:00:EB:5D:77:A3:A7:5F:60:31:47:29:21:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/387a56b1-8565-3c77-ae94-86b03ca0dab3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.147.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9d:17:61:c9:8a:90:55:70:22:13:02:33:73:4e:b4:44:53:
         c3:27:f7:81:b3:9a:5c:6b:e1:68:5b:f9:19:d7:7b:09:3c:8f:
         93:1a:13:57:50:7d:37:b3:37:99:31:a1:f2:e8:46:f2:b3:98:
         77:71:75:7a:75:5c:0c:a9:43:36:40:7b:f6:2a:d9:94:9f:ec:
         15:df:5c:f3:d8:a6:55:a8:c6:8a:e1:ff:2b:ea:8d:5b:21:fa:
         8b:05:36:ea:88:56:55:6e:95:1f:4e:e1:70:30:aa:70:05:c4:
         37:43:41:a2:78:62:2b:5e:f0:d7:0a:2d:47:0a:a6:33:24:fe:
         43:3f:25:c2:56:ef:4d:86:c2:a3:82:6e:03:43:1f:1f:28:2f:
         36:c2:e5:d3:ed:4e:6b:80:ea:0f:dd:16:33:d8:fb:06:7f:06:
         96:db:67:11:0e:62:bd:bf:7d:31:f4:08:b3:96:6a:98:11:2e:
         ae:29:22:a1:d4:da:a0:e0:80:01:bd:ef:70:ea:55:a9:a5:d3:
         11:77:00:60:09:28:e4:57:ff:89:6c:0a:6b:83:45:2c:42:fe:
         7f:9f:58:30:1c:9a:b7:03:23:4c:f6:e3:5d:19:42:1b:4f:fd:
         04:b0:ef:02:7b:3d:a0:b4:2c:77:0d:8c:a2:6e:1c:08:c8:b5:
         29:79:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:14:01 2025 by rpki-client