Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38da2dd5-8163-3a2a-8a18-b308576acfc2.roa
File:                     38da2dd5-8163-3a2a-8a18-b308576acfc2.roa (raw, json)
Hash identifier:          0htAGdV7V8/w9dgLe7Z91+UqYxNtWobY9DODnNwkxhk=
Subject key identifier:   36:4C:C2:03:95:7B:02:81:C9:4F:24:FC:00:2E:2F:D1:FA:CB:18:30
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B63E54C08AB86E31BCA1BD4E8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38da2dd5-8163-3a2a-8a18-b308576acfc2.roa
Signing time:             Thu 02 Oct 2025 17:14:44 +0000
ROA not before:           Thu 02 Oct 2025 17:14:44 +0000
ROA not after:            Wed 31 Dec 2025 18:14:44 +0000
asID:                     61484
IP address blocks:        38.7.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:e5:4c:08:ab:86:e3:1b:ca:1b:d4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  2 17:14:44 2025 GMT
            Not After : Dec 31 18:14:44 2025 GMT
        Subject: CN=439ec57d-579e-4642-a823-c155a9de0375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:20:98:cc:bc:31:e8:c2:d6:f7:70:c5:98:
                    a9:5b:c4:e4:fe:e9:3a:77:b9:77:ed:a7:4b:dd:e3:
                    57:40:98:15:aa:50:42:98:24:56:06:42:14:c6:54:
                    73:38:06:9e:f1:37:50:a6:47:7e:fa:31:52:92:4f:
                    c7:2a:46:b5:c9:0e:be:6c:de:1f:41:2d:7f:38:c5:
                    2f:17:df:81:e4:61:fe:f5:45:37:7b:19:70:ea:62:
                    83:df:85:e7:ba:e6:17:89:09:f0:d6:e2:21:b8:3b:
                    1d:e2:12:b7:dc:5b:a2:00:a1:e7:e8:c3:75:77:83:
                    68:4f:a0:f5:fb:fa:40:d4:8f:83:df:33:00:56:d5:
                    ca:fe:c8:68:83:0d:e4:c1:6d:c7:e3:44:08:35:88:
                    38:68:61:1e:9a:6c:2e:f0:0f:e5:97:84:7b:c5:80:
                    a2:c2:c2:80:ef:47:a8:b2:fa:e9:1f:97:ee:f8:bf:
                    aa:6c:04:8b:2a:f9:3b:f7:cf:d3:02:33:f3:a9:46:
                    88:2f:20:83:ba:d0:67:14:b0:f5:ef:cd:13:3d:1d:
                    d9:74:b6:a8:22:12:62:84:94:16:60:0a:93:14:0e:
                    6b:af:82:01:f7:7a:fc:3d:da:d8:63:e5:ff:a2:c3:
                    1e:40:71:ae:2b:4e:48:4d:1b:f4:99:99:3d:c5:05:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4C:C2:03:95:7B:02:81:C9:4F:24:FC:00:2E:2F:D1:FA:CB:18:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38da2dd5-8163-3a2a-8a18-b308576acfc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:a6:2e:9f:98:dc:3a:96:d7:36:55:2a:3b:85:c9:4c:0e:
         2e:48:b0:ef:23:a9:d1:80:73:2d:8f:2c:7a:37:0e:9c:c0:f0:
         d6:68:41:8a:f8:15:67:6e:f0:9c:71:6e:ef:19:ac:de:78:fd:
         c4:47:ba:a2:30:87:26:22:fc:51:d1:5f:77:f8:a4:bd:1b:13:
         7a:9b:19:82:c8:e8:4f:91:e9:ae:26:62:b6:9b:10:a5:f1:c7:
         4f:52:e4:4e:4e:ba:a4:d1:d5:07:01:83:b5:52:23:68:3b:0f:
         d6:e5:2b:95:cb:0d:d7:b7:e2:64:9f:42:b2:23:51:ae:ad:98:
         b1:ba:16:82:07:07:96:9d:02:f9:5f:7a:f4:11:da:17:c2:ba:
         e7:f2:fd:2a:5d:be:83:a6:21:61:f6:d0:97:81:2b:cd:ce:60:
         37:32:20:6f:cf:8a:1b:f8:e7:bc:4f:f5:b0:e6:f4:d9:f5:77:
         6b:1c:17:d1:a5:ea:0e:0a:63:39:c8:c0:8e:da:1c:d2:74:23:
         c9:6d:52:00:b9:02:e0:d4:67:c8:da:65:c7:00:43:76:43:7a:
         ec:c5:c2:01:44:1e:ab:d4:24:72:d8:ad:1a:96:a1:d9:67:a8:
         98:1a:73:f4:de:47:92:c5:d2:97:70:7e:95:91:eb:c6:a6:b2:
         87:fa:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:10:52 2025 by rpki-client