Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9758260a-5f10-3ad4-b39c-55bd614bff29.roa
File:                     9758260a-5f10-3ad4-b39c-55bd614bff29.roa (raw, json)
Hash identifier:          86GZGg2gGC2yM5TaYICwFyBqFJMfJfSAVr2/sutm7O8=
Subject key identifier:   76:DD:19:14:BC:F5:B6:B5:76:68:83:2A:DE:AE:14:CA:DB:B4:EE:6A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E39D56C8873E401E66AA213B0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9758260a-5f10-3ad4-b39c-55bd614bff29.roa
Signing time:             Fri 19 Jun 2026 17:59:37 +0000
ROA not before:           Fri 19 Jun 2026 17:59:37 +0000
ROA not after:            Thu 17 Sep 2026 17:59:37 +0000
asID:                     52491
IP address blocks:        38.3.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:d5:6c:88:73:e4:01:e6:6a:a2:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 19 17:59:37 2026 GMT
            Not After : Sep 17 17:59:37 2026 GMT
        Subject: CN=83088959-14d4-4550-a2d5-3010551aa490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:f6:51:42:fb:da:28:06:df:2c:6f:06:ba:
                    f9:22:69:6e:b0:dd:0f:41:de:6a:10:e1:9b:fc:69:
                    d9:63:23:82:c5:5a:f6:c4:fd:f8:8a:ec:5e:8b:87:
                    8d:19:36:d9:a7:a2:75:32:ef:42:c8:de:2b:c5:cb:
                    cc:16:66:33:b4:c8:a6:6e:59:19:41:08:44:52:5f:
                    ba:1c:66:44:09:76:30:86:22:2d:e7:33:8f:1b:00:
                    18:d5:1b:6d:71:3f:43:38:94:59:4a:24:b2:02:b5:
                    2b:b4:51:7a:80:ca:5d:e5:36:2e:3c:f4:f1:ec:9f:
                    be:38:ac:34:53:ca:ec:e7:95:87:f5:a2:d1:3b:49:
                    6d:02:4b:44:17:9b:5b:1d:21:b9:8d:96:03:1c:00:
                    20:95:97:f1:06:6b:f7:7e:d8:d3:81:24:9b:d6:4e:
                    41:2f:7f:9b:80:90:92:cc:b3:0d:8e:bd:08:88:f0:
                    a5:85:cc:4c:41:ab:be:83:d9:4b:68:8b:3f:de:06:
                    68:eb:75:3a:b1:6a:5a:04:f4:10:e9:80:db:ce:e4:
                    8b:db:1f:18:7a:75:57:87:34:eb:a3:4f:51:25:40:
                    26:90:99:a6:32:63:44:0f:8e:77:07:2c:5c:69:c2:
                    e0:b0:63:31:27:18:cd:7e:c8:b4:53:27:32:07:25:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DD:19:14:BC:F5:B6:B5:76:68:83:2A:DE:AE:14:CA:DB:B4:EE:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9758260a-5f10-3ad4-b39c-55bd614bff29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d3:5b:78:8a:04:69:e2:df:65:b4:fb:d8:b4:fb:55:86:ec:
         43:06:09:3c:36:f4:93:0d:f2:40:78:69:33:c1:4d:b7:06:9e:
         0a:65:58:5c:e3:cd:76:25:bc:97:45:7f:5c:bf:84:ef:c6:29:
         7c:41:6c:a8:af:2f:0b:d0:31:0c:0a:ff:70:01:ad:de:1e:c3:
         92:c5:bf:7d:3a:0c:d6:78:1c:cb:b3:01:d5:94:dd:83:a4:58:
         7d:ab:37:2b:75:1c:5c:0c:cf:f4:8b:41:1a:b0:bd:30:5a:c0:
         e9:36:f6:80:c7:8f:a5:47:c3:aa:ad:f8:4e:82:08:32:a4:c3:
         f7:64:f8:ee:70:01:db:1a:81:ee:cd:44:eb:ea:2e:72:7e:6a:
         4a:d8:15:6e:9e:62:9a:d4:ae:0d:a4:78:50:28:68:00:70:0f:
         34:1a:b8:33:10:bc:d3:60:8d:c8:27:8b:c6:7e:25:2f:ca:aa:
         30:2c:26:21:01:e1:51:00:4d:21:40:6b:19:11:b1:91:e3:c6:
         ce:46:af:2c:22:60:c5:74:60:a3:01:c9:a9:fa:78:91:a4:83:
         13:bd:ce:dc:5e:46:11:8d:4f:dd:a3:d1:a8:28:41:34:de:b1:
         49:46:fe:d0:5a:8e:05:94:f3:34:c6:69:69:b7:de:c8:a7:80:
         07:2e:4c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:03 2026 by rpki-client