Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/38a0d887-29ba-306b-8df4-d40b3e1c0208.roa
File:                     38a0d887-29ba-306b-8df4-d40b3e1c0208.roa (raw, json)
Hash identifier:          HpszAVVkUy445aI2qzFbvEzfjVfRTLI7OUBpsDIMqys=
Subject key identifier:   A8:AC:7F:8B:D9:7E:B3:FB:1F:D5:21:3E:60:8B:23:8C:EB:C8:E4:CD
Certificate issuer:       /CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
Certificate serial:       010D0C9F4328584E64D6A676D58DC8B0B64D5380
Authority key identifier: C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/38a0d887-29ba-306b-8df4-d40b3e1c0208.roa
Signing time:             Sun 05 Jul 2026 03:41:50 +0000
ROA not before:           Sun 05 Jul 2026 03:41:50 +0000
ROA not after:            Sat 03 Oct 2026 03:41:50 +0000
asID:                     16509
IP address blocks:        131.162.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:d6:a6:76:d5:8d:c8:b0:b6:4d:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d22a1a-fc42-41ba-92e0-a233913b3c86
        Validity
            Not Before: Jul  5 03:41:50 2026 GMT
            Not After : Oct  3 03:41:50 2026 GMT
        Subject: CN=00e4b50b-6808-469d-aef7-886fb6810ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:04:ec:dd:f7:e0:64:7f:fa:bc:dd:ec:4e:
                    c3:9d:e1:9b:1f:da:e8:0b:79:8f:09:24:d0:12:b0:
                    74:c1:07:a2:8b:27:e6:f0:91:95:7a:cf:1f:9d:80:
                    ee:72:75:78:c0:fb:ac:68:bd:f5:7a:7d:d5:bc:93:
                    6a:69:39:b1:d9:f5:b9:ae:0a:f5:1b:c8:c2:64:1d:
                    8f:bf:e0:d5:84:0e:b1:78:8f:f3:1b:ac:bd:ba:2f:
                    db:66:b5:5e:c0:7b:13:ed:00:4a:58:ad:61:c2:3b:
                    dc:15:69:a6:cb:ef:eb:30:05:28:6e:d5:8a:66:a5:
                    4f:e2:fd:a5:9f:e1:43:63:a8:9f:00:c7:0c:33:5d:
                    dd:40:08:10:a7:53:76:15:8d:64:4a:06:c6:72:da:
                    07:a1:f1:e5:ef:04:96:d9:53:f8:1c:f6:18:3d:66:
                    88:43:27:b2:43:24:36:d5:54:62:32:17:e4:7c:bb:
                    56:89:f4:94:87:57:ff:b8:7b:5f:4a:c3:56:7b:f8:
                    37:ca:5d:ee:f3:6d:7f:61:4e:3f:5c:19:09:e0:a1:
                    e3:53:02:e7:ab:9c:78:67:77:1b:09:b1:bb:3f:2e:
                    4c:7f:cd:47:1c:dc:a8:19:c5:d6:a4:ec:c9:88:01:
                    66:c4:6e:8c:14:7f:0b:62:03:a5:eb:c4:d2:56:ee:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AC:7F:8B:D9:7E:B3:FB:1F:D5:21:3E:60:8B:23:8C:EB:C8:E4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/38a0d887-29ba-306b-8df4-d40b3e1c0208.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86/74d22a1a-fc42-41ba-92e0-a233913b3c86.crl

            X509v3 Authority Key Identifier:
                keyid:C3:D3:22:A9:74:F7:21:7C:96:FA:3E:27:A6:90:34:74:A6:75:8B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/74d22a1a-fc42-41ba-92e0-a233913b3c86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5b:b5:d6:95:f4:78:0f:ec:c5:0d:45:1f:3e:6f:d2:19:51:
         4a:37:7e:e5:f1:45:d3:d4:ad:17:aa:74:61:56:d5:a7:5d:31:
         21:93:0d:42:b1:74:5b:1c:81:4a:dc:9e:a1:78:82:63:a0:6e:
         f9:51:38:8b:51:4f:84:a9:a3:53:23:6d:e7:4a:93:fc:4e:a4:
         b2:53:45:00:6e:cb:75:91:37:12:d8:a0:71:ba:5c:d8:f7:ca:
         92:9f:9a:de:b5:a4:6d:fa:2f:43:9a:29:05:70:4c:3e:d5:3f:
         59:e3:66:01:73:bb:b3:f0:b4:3c:d6:ff:02:b1:86:18:5f:89:
         52:fe:66:53:06:2c:a9:7c:22:76:30:b4:f1:5c:76:41:65:99:
         37:5b:6e:84:97:d8:db:aa:ee:c0:77:b8:ae:07:5d:48:00:79:
         01:45:f4:ff:77:28:5c:f0:9d:13:0f:7a:5b:6f:d2:b3:a9:45:
         77:db:e9:85:33:41:07:82:65:87:9c:48:0e:95:51:8f:c0:19:
         21:90:67:24:06:54:f6:84:a0:c1:a4:48:3d:14:7f:9d:c0:6b:
         09:10:41:9a:64:42:ff:b9:aa:3d:7e:e9:ea:52:26:87:ea:2b:
         9b:f0:71:d3:46:a4:43:1d:eb:6c:ba:a9:dc:a8:a0:1b:c2:62:
         6a:23:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:25 2026 by rpki-client