Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa
File:                     39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa (raw, json)
Hash identifier:          4W4xUkOwoWeILOKhJUNDEbdyX+DfU6FxujABv4kVN+8=
Subject key identifier:   F8:E9:AA:99:F3:0D:3A:3C:65:10:60:F3:73:40:1C:A7:4A:89:1A:E2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B6F154417F5F60CFCD25A3640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa
Signing time:             Mon 06 Oct 2025 17:25:16 +0000
ROA not before:           Mon 06 Oct 2025 17:25:16 +0000
ROA not after:            Sun 04 Jan 2026 18:25:16 +0000
asID:                     33570
IP address blocks:        38.126.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:15:44:17:f5:f6:0c:fc:d2:5a:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  6 17:25:16 2025 GMT
            Not After : Jan  4 18:25:16 2026 GMT
        Subject: CN=d62996da-ade9-48f0-a1af-ca7bab74a0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:9e:c7:1a:a9:0a:0e:f6:29:62:fd:24:05:
                    dd:4e:ad:4d:61:32:11:00:53:d3:a8:a6:f4:55:ee:
                    16:ea:03:1c:b1:e8:c4:e9:3f:6a:b3:55:91:71:8b:
                    cb:e6:4a:85:30:16:0b:93:55:d5:50:e4:27:d1:55:
                    94:f3:b1:cb:8b:df:5f:ca:ce:c8:b4:1f:ab:6f:99:
                    f2:6b:df:51:99:5f:e2:01:b5:4f:01:46:37:e2:fe:
                    a5:54:c4:34:54:6c:ee:2d:0e:51:59:6d:a9:34:61:
                    25:5b:fb:5c:89:e7:75:c1:6d:7b:f9:85:55:69:4d:
                    ab:b5:ce:1d:84:03:41:21:9f:dc:4f:7f:f9:bd:8d:
                    53:fe:97:4c:67:bd:0b:9c:bb:31:cf:7d:03:45:b9:
                    c8:f6:11:97:e2:b2:42:7c:e4:1a:60:e5:96:bf:23:
                    94:49:1e:cc:cb:b7:2f:c6:43:59:0e:1f:dc:2c:1b:
                    c1:ca:8b:5b:6b:67:f4:ee:62:ed:9d:bd:ce:3b:64:
                    e4:54:d2:a0:0a:35:d8:c4:fa:b9:cd:76:0c:46:54:
                    69:25:4d:2d:4f:7a:54:0e:95:f5:96:cb:78:ad:d7:
                    7d:68:d7:40:5f:73:02:3d:f2:0b:ce:c7:33:cc:4a:
                    4f:85:c4:92:f6:90:79:7f:d8:45:d8:10:00:56:59:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:AA:99:F3:0D:3A:3C:65:10:60:F3:73:40:1C:A7:4A:89:1A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39a32e0a-5fec-3cc8-a631-fe37f8d7dc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.126.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:68:9a:f8:89:15:15:bb:22:0f:f6:df:16:51:12:41:66:
         7d:a2:69:92:2d:95:cb:44:2f:38:10:54:f3:42:01:39:e7:79:
         50:59:d9:a6:b7:66:bb:90:6b:6d:1d:6a:3a:9e:45:79:1e:40:
         f3:ce:f6:9c:44:05:e1:47:72:52:5a:89:f8:06:30:27:77:3c:
         6a:4e:0c:94:b5:49:1f:d7:cc:46:0f:39:6e:8e:f9:ee:83:5b:
         0b:8f:44:f5:fa:ab:72:2f:27:da:27:55:83:e9:f5:da:6c:b9:
         a6:22:0a:42:db:f0:91:2f:15:07:57:2a:f7:87:96:9f:9a:40:
         a3:e9:e5:8a:c0:23:fb:ea:3e:c7:05:e9:f6:6b:ac:7a:51:c7:
         04:64:fd:0b:29:e4:7b:ce:29:57:f8:84:46:2c:b8:71:51:b4:
         10:16:1c:0d:b6:8f:4c:28:cd:90:5b:24:ff:55:4a:1e:cb:2a:
         55:9a:02:c9:32:51:09:01:e6:ad:7e:44:19:c2:84:90:e1:dc:
         6f:33:6b:c3:35:70:2e:99:a4:35:ba:2d:0a:30:3e:64:b6:8f:
         40:85:a9:5c:bd:11:80:91:d1:bd:9a:1d:a5:79:32:23:52:9b:
         43:94:7f:cd:42:f0:87:87:13:d7:a7:49:7a:38:ac:9c:62:a2:
         ae:c4:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:30:08 2025 by rpki-client