Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa
File:                     8358c290-aee6-3f93-81d1-a0c85d50b978.roa (raw, json)
Hash identifier:          NIeypw+Xy8v6VbDWes5ZbGHSGDeqeAO9PWe7MHRTIxA=
Subject key identifier:   35:4C:90:65:D7:CA:6D:A7:51:B4:E0:BC:F3:9B:5A:6A:E9:B8:5E:D1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E8DEFBBB323340535BA033000
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     64130
IP address blocks:        38.56.113.0/24 maxlen: 24
                          38.137.195.0/24 maxlen: 24
                          38.137.196.0/24 maxlen: 24
                          38.137.197.0/24 maxlen: 24
                          38.137.211.0/24 maxlen: 24
                          38.199.72.0/24 maxlen: 24
                          38.199.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:bb:b3:23:34:05:35:ba:03:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=e56f3c1c-bb45-4f3a-90ae-0bbc2448ff5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:0b:83:c4:63:95:f0:13:96:6d:26:d4:38:
                    81:b7:8b:dc:bc:6e:6c:f4:08:e9:c1:d0:14:30:ec:
                    c2:5c:08:13:3b:c6:fc:18:f7:ae:cc:d7:40:8e:1d:
                    0d:0c:6a:80:14:9d:0f:30:c4:6b:72:da:d5:c3:d2:
                    9c:62:d5:95:da:d6:00:62:db:49:3b:ba:53:8c:06:
                    28:98:d2:95:d9:ba:bd:69:d7:ae:91:95:50:62:0b:
                    34:f1:3a:21:4e:a3:5f:60:2b:ed:15:a3:7f:ab:0a:
                    9b:26:52:13:8f:79:27:11:5b:3c:f3:ad:d9:70:7c:
                    a7:ed:cb:66:77:8a:58:61:63:79:41:9f:02:54:1d:
                    26:df:fa:54:ea:1f:6c:2a:ec:ae:2b:65:ab:5d:5b:
                    13:96:a3:d5:4a:e9:cb:9f:40:d8:3f:64:e8:88:9a:
                    ab:12:ce:fe:04:72:d5:75:18:39:b2:63:77:b1:04:
                    17:1c:e0:75:d2:0b:81:de:ca:17:92:56:8d:57:96:
                    db:2e:e2:e7:ea:3b:8c:83:f4:39:30:9e:ac:22:9a:
                    c6:42:79:56:45:7e:29:a8:0e:e3:ff:1d:87:d0:35:
                    f5:3d:de:62:88:39:c5:8c:68:35:64:8e:d6:17:08:
                    09:d8:f3:90:d7:aa:e9:cb:01:1a:9e:c1:11:7a:76:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4C:90:65:D7:CA:6D:A7:51:B4:E0:BC:F3:9B:5A:6A:E9:B8:5E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8358c290-aee6-3f93-81d1-a0c85d50b978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.113.0/24
                  38.137.195.0-38.137.197.255
                  38.137.211.0/24
                  38.199.72.0/24
                  38.199.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b1:e0:2b:8c:c6:9d:be:74:44:34:ce:4a:17:57:98:43:b5:
         18:89:0b:00:6b:0e:e7:0d:ce:1c:18:b1:fd:ef:f1:f1:01:00:
         6e:58:ec:cb:49:19:4d:40:7f:0c:26:21:58:e0:a1:ca:45:8e:
         94:d3:63:de:1b:b7:27:fd:c1:27:c8:b3:15:03:e2:dd:b4:c1:
         1a:1e:48:78:00:f9:14:08:ea:80:6e:16:a0:88:fb:5c:9f:f3:
         fe:7e:5f:a5:f1:22:3b:1f:bc:a5:58:4c:27:7f:67:90:89:30:
         e9:8b:ff:ff:56:92:de:d3:4e:1c:cf:69:2e:36:a9:a1:17:aa:
         4e:79:71:ec:06:a6:fd:a5:ad:1d:34:b7:dc:0c:6a:1f:cb:a5:
         ed:57:a5:df:62:2c:e7:e3:ec:31:1a:91:a5:ac:e0:7a:50:c5:
         38:b8:39:c4:f8:13:a0:bb:77:a7:39:e6:99:68:8c:d3:c7:5c:
         e0:b8:44:62:52:7b:d7:e6:ec:4f:68:4b:ad:4a:dd:b9:12:3b:
         64:fd:70:be:a0:3f:c8:b7:3c:97:27:02:30:cf:cf:b0:b6:8a:
         64:76:95:e2:a9:29:df:42:12:bf:c3:33:3b:c7:fa:c7:89:2f:
         b9:a2:73:10:df:dc:f7:d7:a0:2a:16:aa:68:9a:dc:79:e2:f3:
         cb:c1:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:46:59 2026 by rpki-client