Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9fd9ddbb-bfed-324c-ba96-51354aecd378.roa
File:                     9fd9ddbb-bfed-324c-ba96-51354aecd378.roa (raw, json)
Hash identifier:          rH8ATzLTKdovk6jLplYvbZW1m87j+FfRe+d0oIjWP7M=
Subject key identifier:   16:20:4F:51:17:05:F9:48:EC:9B:E5:31:41:9B:A8:44:F7:23:AC:9C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584BA9F7DC1B7E9E71B124C88640
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9fd9ddbb-bfed-324c-ba96-51354aecd378.roa
Signing time:             Mon 27 Oct 2025 19:38:43 +0000
ROA not before:           Mon 27 Oct 2025 19:38:43 +0000
ROA not after:            Sun 25 Jan 2026 20:38:43 +0000
asID:                     269832
IP address blocks:        38.96.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:f7:dc:1b:7e:9e:71:b1:24:c8:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 27 19:38:43 2025 GMT
            Not After : Jan 25 20:38:43 2026 GMT
        Subject: CN=97b84b96-0f4c-4c43-a650-444c5b4433de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:08:ba:00:a8:d9:2b:f3:b5:b8:b2:79:d3:
                    64:ca:a2:91:54:e5:30:b1:28:6e:11:d2:c0:3e:41:
                    d4:22:8c:3e:4e:7d:b8:86:d8:e5:a1:18:91:09:ea:
                    b6:c3:d3:98:77:fc:bf:b2:67:9e:87:1d:fb:85:41:
                    06:56:57:82:14:00:db:87:d6:de:bd:b9:00:35:c9:
                    d6:fe:ef:ca:92:4e:4f:0c:23:ed:e7:d1:79:e0:8a:
                    3f:d5:f2:9e:30:79:f3:e8:bf:28:a9:5a:bd:ce:df:
                    a1:27:fe:7b:54:c5:1b:4e:f3:5d:da:2d:58:8f:81:
                    9b:eb:52:bb:c5:81:d2:c5:43:f8:2a:2c:bf:1a:bb:
                    2e:56:34:64:22:0c:e4:4e:48:10:c4:92:e7:92:b2:
                    8e:e2:8e:8d:e1:65:45:90:03:96:9f:3a:3f:5d:c7:
                    a5:4e:d1:fd:0d:c3:fa:21:be:65:ed:6a:09:6f:88:
                    7f:42:ee:cc:a1:c2:9e:ee:4f:1a:cf:f7:8c:fc:59:
                    c1:ff:2b:31:30:cd:3b:c4:fd:9e:c4:b4:92:9f:ee:
                    10:4c:e3:a4:45:c6:f6:08:57:c6:b0:65:97:cb:3c:
                    b8:0a:19:d0:d8:12:e8:d9:e9:57:76:31:32:dd:41:
                    6b:b0:20:03:4c:dd:44:fc:a7:a2:ed:47:46:03:d2:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:4F:51:17:05:F9:48:EC:9B:E5:31:41:9B:A8:44:F7:23:AC:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9fd9ddbb-bfed-324c-ba96-51354aecd378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.96.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:c6:5f:04:b8:36:28:a9:75:7a:a2:74:95:2d:e5:a3:6f:74:
         67:ba:22:30:2f:28:2f:de:f5:b5:e1:1d:e0:7b:dc:44:1b:5c:
         9e:1d:e2:00:6d:5c:77:99:a0:1b:c4:a2:ff:83:bb:98:6d:09:
         a8:09:47:c0:30:9a:4a:c6:a1:2f:9b:47:ee:fe:4c:84:0a:4e:
         fd:90:6d:8d:39:0e:dd:dc:34:4b:93:78:3b:61:6e:cd:02:f7:
         79:8a:ce:90:a4:9a:70:e4:a3:67:79:04:bf:17:eb:53:55:55:
         c3:76:38:99:e0:07:93:d4:fa:8e:1e:7e:3d:b7:89:2a:67:53:
         28:e8:a2:c1:dd:30:77:98:91:80:0b:6d:cb:ea:b6:76:14:61:
         23:d9:ab:f7:78:11:94:6a:d5:9d:f5:22:0f:23:d8:cd:e9:2f:
         2a:c3:f9:56:d4:84:35:67:c0:10:30:2d:d3:30:7a:ac:99:b5:
         a3:fa:ff:03:8e:f7:ba:ed:67:54:11:84:3c:4b:de:97:11:84:
         6a:5e:04:00:75:5e:a7:02:32:3b:d8:a5:e0:fa:e7:07:f0:e4:
         f7:28:bc:de:26:98:cc:b7:ff:84:93:1a:2d:ab:6c:37:1c:ce:
         49:e9:1b:91:09:66:de:43:c0:2b:6f:f0:8a:48:58:05:bf:f5:
         6f:b5:1f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 19:59:59 2025 by rpki-client