Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa
File:                     69070604-9ddc-3ffa-8457-fb94b553b978.roa (raw, json)
Hash identifier:          GtNTpZsbCIgIduBrVFoPOZUJaqUGon8LVRk7E27OX4Y=
Subject key identifier:   27:E2:C4:3E:FD:77:F9:81:C5:C5:E5:2A:73:ED:09:3B:DC:9C:33:B5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EDF5C91129DEEDB123D6A3F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     140224
IP address blocks:        38.54.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:91:12:9d:ee:db:12:3d:6a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=8d19aee3-9f31-4115-a445-bcb32148b525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:03:47:43:97:a9:95:b6:9e:ae:50:a8:07:
                    cb:6c:96:87:9e:29:08:af:59:f2:50:6f:d2:e7:bc:
                    f3:45:47:e5:0b:d1:99:9f:df:7e:f0:d9:c7:b2:de:
                    81:78:36:33:86:19:80:98:bf:c2:76:cd:8e:99:72:
                    df:47:04:32:e3:5e:37:a4:d7:6f:d4:fe:aa:eb:d5:
                    e4:ea:fd:50:01:ee:e1:f2:a1:51:95:30:af:8c:b2:
                    11:5d:0b:c9:ed:38:0e:bb:c7:52:ca:a8:a2:5b:dc:
                    c6:9f:b8:3b:69:3e:07:86:53:71:99:2c:fe:4c:40:
                    93:b5:d3:96:67:00:e0:85:4e:32:16:01:be:a7:88:
                    bd:85:8e:d1:4e:b8:eb:6c:47:59:67:b2:fc:84:84:
                    05:62:ef:d4:15:bb:ea:41:87:57:5e:d4:7d:42:ee:
                    81:e8:fa:09:d6:eb:88:6a:92:5f:77:c5:86:cc:12:
                    87:56:02:9d:fc:bd:3e:e1:71:06:61:b5:9b:80:e3:
                    4a:86:d7:bf:ee:a8:7c:b9:96:3d:d9:e3:61:d2:d6:
                    ec:0a:ae:63:09:ce:65:52:81:5a:98:5a:2c:2a:5c:
                    1a:81:f4:c2:ce:4d:d7:a0:d0:38:6b:a6:84:c1:40:
                    49:eb:c9:02:87:c6:39:c5:15:7e:d0:fe:78:21:ee:
                    3a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E2:C4:3E:FD:77:F9:81:C5:C5:E5:2A:73:ED:09:3B:DC:9C:33:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/69070604-9ddc-3ffa-8457-fb94b553b978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.54.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:5f:71:d8:af:46:a3:58:30:7f:23:5b:db:ab:af:1e:35:
         72:a5:ec:fb:83:ef:0f:ab:b0:28:a0:d9:21:cf:57:13:e9:79:
         51:f4:56:16:e2:07:39:fd:d3:5f:b1:40:5c:24:89:86:a9:a2:
         9e:4e:01:25:ae:79:a4:79:b1:ea:3e:f0:0a:96:18:62:6f:3e:
         04:d9:25:01:c2:dc:75:52:85:be:1e:9d:eb:e5:84:ed:0c:b6:
         51:4e:09:8b:9f:97:11:2e:52:90:ed:e3:e1:6f:de:51:99:8e:
         44:00:6e:85:55:8c:d7:c0:bf:46:ac:3f:e3:cf:bc:5f:c2:49:
         96:30:e1:05:8e:4f:8c:39:8d:b4:50:02:9d:86:47:2a:ea:6c:
         ff:6e:2c:e8:b0:d7:23:a4:78:23:3a:4c:f5:bb:00:2a:f0:4c:
         c1:41:9d:6e:77:99:17:dd:33:82:08:f0:8a:ef:11:a9:51:19:
         cc:ca:5e:35:ed:ae:1d:b3:c2:fd:ef:38:ef:8c:4e:db:ef:1b:
         ed:5d:41:62:42:44:d6:88:ea:48:5b:7e:c6:9a:c4:6c:bf:70:
         25:b9:03:21:9a:3a:03:4e:18:15:3f:a0:dd:e8:9f:35:47:6a:
         0e:b4:39:a8:34:82:d1:78:fa:77:36:31:18:86:7c:1b:51:f6:
         7f:6d:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:51 2026 by rpki-client