Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa
File:                     aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa (raw, json)
Hash identifier:          PthFu1SI6Ak+tB+UsOR9fcx2CVguCA1FKTcIBkHtaP8=
Subject key identifier:   7D:5C:87:93:0B:36:41:37:67:D0:BE:F4:19:34:C6:48:64:E4:4F:A3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DF640B098F8601EAA0BCD9040
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     272823
IP address blocks:        38.10.102.0/24 maxlen: 24
                          38.77.199.0/24 maxlen: 24
                          38.191.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:b0:98:f8:60:1e:aa:0b:cd:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=49abf877-539c-448c-81df-08f31e0d98ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:e4:84:ea:97:61:6c:02:88:27:b3:da:b2:
                    e3:cb:ee:d0:f8:20:e1:bc:bd:9f:23:fc:5f:f9:02:
                    65:ea:b6:15:99:6b:d1:67:2f:3a:b9:5e:f5:dc:02:
                    11:12:c8:c4:c3:a3:76:2a:5b:83:40:8d:ff:ad:ef:
                    3d:0d:8d:39:ba:3f:c4:8b:78:3e:33:ca:75:ab:71:
                    45:14:b8:b9:e6:cf:b8:a2:9a:05:69:b5:e9:b7:e4:
                    30:0b:0d:06:27:b3:7c:6e:3d:a8:eb:e2:9d:27:4f:
                    8d:66:4c:d3:b9:80:fa:87:7d:32:cf:14:0c:0a:70:
                    d4:e3:11:59:df:57:02:58:5b:58:67:c9:80:a5:8b:
                    64:41:59:bb:ac:78:70:ac:37:43:a9:8f:ea:bb:d3:
                    7f:cc:a5:48:c3:b6:8f:83:7d:4c:fa:01:b6:21:8a:
                    d1:83:51:d8:99:3e:51:cf:5b:89:b4:92:8d:8f:a0:
                    6d:57:c7:4c:4b:b5:3a:f4:5c:02:b3:e9:b9:6c:00:
                    fe:12:43:4b:30:3a:fb:04:42:7f:b1:23:b7:bf:f9:
                    28:ce:24:c9:b9:ee:61:16:7c:f9:bb:79:ab:5e:9b:
                    69:4b:c0:22:91:88:36:3a:33:77:5b:e2:5d:db:2c:
                    57:81:93:71:7b:e1:5d:ef:e7:38:dc:49:7a:34:91:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5C:87:93:0B:36:41:37:67:D0:BE:F4:19:34:C6:48:64:E4:4F:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aa0e8396-47ad-34a0-a449-64a9fcd18b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.10.102.0/24
                  38.77.199.0/24
                  38.191.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:49:c8:96:5b:07:b7:46:70:06:52:67:5a:66:ef:f4:10:
         56:8c:e9:f5:03:fc:19:26:3f:65:4b:1e:02:ab:3f:7e:99:56:
         1e:ee:77:55:37:87:9a:88:0d:bf:84:4f:71:a2:1d:c0:c0:08:
         92:1f:1f:b3:c1:93:f6:49:bd:05:33:5a:6b:df:eb:88:ec:7b:
         6a:e2:0b:36:32:eb:73:2b:e5:31:75:70:a9:31:75:33:11:5d:
         99:98:2f:a9:23:ae:23:bd:41:f8:30:96:2e:25:ff:33:88:2d:
         98:80:2f:27:f1:70:34:ea:c8:db:f0:46:98:78:cc:4c:03:b5:
         56:97:aa:3f:92:a2:9f:e4:a5:ff:6e:0d:5d:c0:43:70:ee:e6:
         ee:b8:cc:e7:ae:2d:8c:ea:60:cd:5d:54:47:26:73:a0:da:cd:
         5f:99:5e:20:7e:0a:e9:8c:b7:36:6b:56:a3:01:2c:ad:7d:9a:
         ba:2b:83:ff:7a:e3:3e:53:36:16:c0:83:d2:0e:62:2f:54:e9:
         ff:85:9f:8f:38:2c:8a:db:3f:a2:00:7c:23:50:21:2d:d2:f0:
         08:a9:89:4a:bf:18:28:cc:a0:2a:fa:2a:5a:77:05:06:cd:c8:
         9d:72:ef:99:47:55:dc:bf:18:35:35:11:9b:86:04:49:0f:fa:
         cc:c3:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:55 2026 by rpki-client