Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa
File:                     d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa (raw, json)
Hash identifier:          vubGYco35zz7F96tL+QXYiF0z6i45FQUMM1Q4S6MFLY=
Subject key identifier:   1E:0B:3D:B5:1C:23:6D:80:32:B6:42:CB:E2:15:71:8B:D3:7A:9B:7C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D4F8A63A3E52B568C51C943C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa
Signing time:             Fri 27 Mar 2026 19:49:16 +0000
ROA not before:           Fri 27 Mar 2026 19:49:16 +0000
ROA not after:            Thu 25 Jun 2026 19:49:16 +0000
asID:                     273039
IP address blocks:        38.254.112.0/22 maxlen: 24
                          149.100.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:8a:63:a3:e5:2b:56:8c:51:c9:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 27 19:49:16 2026 GMT
            Not After : Jun 25 19:49:16 2026 GMT
        Subject: CN=51cdb240-b0d7-4023-9ec7-0d0c34516c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:c3:e9:5d:48:2a:b6:3d:28:c1:39:aa:c0:
                    25:59:b1:21:3a:6f:67:30:dd:3c:1f:8c:06:d1:51:
                    61:4a:f8:d7:d8:89:9e:27:b8:58:f4:3c:8d:95:00:
                    38:7d:22:15:0c:49:f9:c1:6f:1c:26:bc:bb:8d:9f:
                    60:0e:c8:f5:21:74:33:1f:2d:32:26:e6:87:06:43:
                    76:aa:c2:89:2c:7d:2b:d2:ae:ba:85:48:0a:20:e0:
                    60:5e:96:7d:3d:28:0c:4f:01:c5:fd:7a:ee:f0:61:
                    51:b7:46:50:cd:87:da:ae:ff:1d:c6:23:84:94:8a:
                    5f:9d:45:7e:37:be:21:ae:7d:7b:16:ca:75:2c:87:
                    8e:77:6d:77:07:49:3b:8a:e9:f9:b7:42:47:b6:49:
                    78:51:25:4c:67:bf:d0:ee:6a:29:8b:3d:66:00:60:
                    36:7f:16:bb:80:83:0d:8c:9e:d6:cb:e5:d6:66:0e:
                    49:27:e2:8a:28:74:a8:fc:a6:27:f5:61:62:fb:60:
                    0e:3f:89:14:3c:7f:f9:00:17:19:9e:74:4d:50:ca:
                    f9:3f:c3:9a:d9:d6:1f:2c:03:ed:72:7b:3a:3e:1e:
                    67:d3:97:70:9c:d8:5e:84:22:82:68:d7:a4:58:ba:
                    88:2c:36:2d:c7:6b:a9:99:3d:8e:0c:1d:1b:f8:2d:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0B:3D:B5:1C:23:6D:80:32:B6:42:CB:E2:15:71:8B:D3:7A:9B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d605bbb6-8366-3d9e-964b-ff9d4fbdd081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.254.112.0/22
                  149.100.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:d5:c1:df:6f:d4:d6:4e:5d:b3:27:1c:f4:70:ff:ac:71:
         64:5b:20:71:00:db:12:eb:90:b9:fe:00:76:e3:10:8c:8c:aa:
         bd:13:61:e2:fa:76:a0:07:64:04:2e:dd:8f:3a:bf:23:bc:11:
         2b:8f:89:f0:79:bb:0c:83:12:62:14:dc:db:23:c4:f0:8a:af:
         ac:bf:86:d3:d1:0a:6c:4a:9f:a3:62:9d:64:0b:ef:d3:9e:ff:
         42:3f:5d:25:95:42:d4:7c:f9:68:1e:03:ac:07:1d:2e:f2:54:
         23:e0:40:41:78:f2:b0:f0:a2:f9:36:68:30:2a:95:ff:6a:58:
         ef:54:1a:af:3d:49:05:7e:b9:bd:6a:f1:61:2b:55:00:5f:58:
         da:db:e3:83:41:22:fd:dd:55:1e:d8:d1:f2:94:4a:6b:92:8e:
         e6:64:1b:5f:68:86:8f:49:20:bd:78:ec:35:3a:9e:4d:b2:03:
         ff:c4:6f:67:47:cc:72:b1:c2:e8:0b:d3:7d:ca:43:c5:97:74:
         64:99:36:18:f6:56:93:a7:60:c1:48:8d:31:bf:84:4f:4f:9b:
         fc:6b:c8:d1:ff:dc:17:bf:83:8a:53:aa:f6:38:79:e3:d0:69:
         21:39:9d:cf:a1:2c:cf:0a:7b:1d:f9:3b:18:bb:e8:78:3b:c3:
         97:44:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 07:15:25 2026 by rpki-client