Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa
File:                     39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa (raw, json)
Hash identifier:          j5CxpZf9c2xVQEZntW4SfMbH7r9JiR0BlfeOt4bLQds=
Subject key identifier:   19:A5:01:0F:4D:D2:DE:4A:51:5E:C8:07:01:F1:4A:7B:B0:47:D3:21
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584E2D9F23435C109F24247C5B80
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397423
IP address blocks:        68.233.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:23:43:5c:10:9f:24:24:7c:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=37e32ec7-01ff-40ea-8ad5-8dfe32a5a184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:37:49:90:93:bf:f0:2e:85:81:21:e6:cf:
                    74:79:ce:2e:7b:8f:84:d6:29:cb:84:53:29:30:e1:
                    75:39:8c:6f:ff:af:a9:7c:87:b7:00:aa:b1:fc:bb:
                    58:7c:42:8b:cd:98:4f:9e:0d:1e:62:15:ce:2b:df:
                    8a:6e:ec:66:62:31:4e:5e:88:8c:bd:09:85:11:b5:
                    ca:bc:16:6e:73:cc:e2:2f:a3:af:ab:79:ef:b3:6c:
                    65:60:4f:60:d0:4c:84:d5:6d:ef:84:1a:f8:45:23:
                    70:bd:ab:b7:14:fb:08:48:bc:6c:f6:37:e0:65:81:
                    70:52:7d:c1:84:b5:23:1c:17:a5:55:22:86:f2:86:
                    c4:56:c9:53:77:fb:21:a4:30:1c:dc:fc:37:95:e9:
                    cc:fc:6a:e6:4d:a0:2d:ce:5b:8f:b7:0f:d6:7c:d8:
                    f6:99:85:58:fe:67:fa:a6:82:36:14:37:2d:21:a6:
                    68:94:27:da:29:ba:3b:c2:55:09:5a:4f:e8:82:12:
                    03:48:78:fc:cc:a5:ca:11:4b:1b:69:79:d4:47:f7:
                    12:9f:3f:3d:f8:ce:1b:62:c8:9a:ac:61:d6:b1:58:
                    17:9d:10:ae:3e:23:03:0b:ef:87:98:2a:16:f8:17:
                    ae:d3:8b:99:11:28:3a:be:1b:17:c1:b5:63:fa:e6:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A5:01:0F:4D:D2:DE:4A:51:5E:C8:07:01:F1:4A:7B:B0:47:D3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/39d6a2b3-c979-3632-a4a7-34ad97baa32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:54:ec:d2:97:f8:a8:44:34:9f:be:db:0e:68:44:e0:69:
         9a:0e:b5:4c:52:2f:0e:c5:77:87:18:4d:6c:47:fd:df:5b:fc:
         b4:34:86:76:7d:ef:f4:3d:8d:4c:3d:19:2e:92:2c:a2:fe:bf:
         53:71:39:b9:82:3f:a2:00:80:32:40:f5:36:2e:4e:cb:bf:78:
         02:a9:41:11:43:17:04:f0:9b:18:5d:ef:12:2b:54:17:d1:ec:
         aa:9f:21:97:38:dd:4d:a1:ce:3a:c5:d8:f9:23:aa:54:ff:bb:
         5b:c3:99:eb:fa:c5:b2:6b:f0:bb:72:ce:10:47:3c:79:20:17:
         91:d1:0f:7d:e3:1b:73:d5:7c:56:b3:1e:f6:15:20:a9:f9:3c:
         b9:b0:bf:7b:4b:56:7e:24:72:1d:e3:84:cd:1b:d7:f8:b4:39:
         28:ac:32:ed:f6:bf:52:11:ab:e9:df:92:39:32:9a:ee:ae:f1:
         10:4c:85:79:27:54:ed:f4:fa:5b:fd:ee:ee:cf:fc:59:78:e8:
         1a:ba:92:b9:da:fc:7a:d9:95:3a:27:bd:3f:7e:c9:ae:97:71:
         22:64:3c:b2:91:e3:6d:d1:e0:8f:d5:b7:8b:b7:45:15:0c:d3:
         8f:71:f0:79:74:86:d2:89:84:fe:45:c1:bd:3c:1b:b0:ab:92:
         3c:5b:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:16:20 2026 by rpki-client