Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/01b58880-52a0-3d3c-bfc4-8bba28eae68b.roa
File:                     01b58880-52a0-3d3c-bfc4-8bba28eae68b.roa (raw, json)
Hash identifier:          yMJuwPDSyrsndeN4Nflq4ME8N7F3h+7HRE06Jl0nbLU=
Subject key identifier:   B3:56:69:8C:3A:B2:8A:50:16:4C:6F:66:09:33:0A:71:42:F2:34:BD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D9D8F9B0420857FADEA2A1780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/01b58880-52a0-3d3c-bfc4-8bba28eae68b.roa
Signing time:             Fri 24 Apr 2026 18:32:50 +0000
ROA not before:           Fri 24 Apr 2026 18:32:50 +0000
ROA not after:            Thu 23 Jul 2026 18:32:50 +0000
asID:                     274294
IP address blocks:        38.44.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:8f:9b:04:20:85:7f:ad:ea:2a:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 24 18:32:50 2026 GMT
            Not After : Jul 23 18:32:50 2026 GMT
        Subject: CN=ed9c2645-5bbb-41f6-96dd-9af99b536ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:04:ff:35:c3:7f:d1:6b:73:04:ed:81:b3:
                    f7:33:98:f6:b0:a0:82:3a:01:e8:83:f7:bf:71:90:
                    fa:8b:d4:6f:d7:7f:72:06:34:ba:37:5c:34:6e:42:
                    9d:89:58:0e:b8:1b:18:54:70:2d:52:92:c9:77:74:
                    ad:9f:65:03:0e:02:c7:69:fb:9e:87:bf:e2:33:74:
                    da:a5:31:fb:26:c7:a2:9b:4e:97:94:44:80:97:d6:
                    40:ff:fa:2a:c7:f5:fb:ff:a2:25:58:fe:80:26:72:
                    be:5b:b8:de:91:21:76:d7:38:86:17:93:25:43:05:
                    d4:01:cd:6c:3a:15:c6:00:65:68:23:99:1e:f1:57:
                    ef:5f:cd:b7:33:8b:54:f4:1a:e5:20:e8:f2:c6:7e:
                    66:41:b7:47:22:84:b5:a1:c4:a4:5b:26:b2:dc:1b:
                    44:eb:42:7e:85:8d:d1:68:09:f4:8d:c7:8e:a0:c5:
                    04:9c:99:e6:16:30:33:e5:3b:98:de:2e:04:2c:d6:
                    2a:52:69:d1:44:e4:af:3a:0e:c3:25:25:da:5e:77:
                    55:be:eb:d0:76:67:60:e4:3d:59:be:21:2d:c6:46:
                    70:b6:04:a8:fb:ff:61:2c:fb:4c:66:8e:06:18:f7:
                    9b:be:41:15:72:df:fe:97:f0:a6:d2:4c:af:1d:03:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:56:69:8C:3A:B2:8A:50:16:4C:6F:66:09:33:0A:71:42:F2:34:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/01b58880-52a0-3d3c-bfc4-8bba28eae68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.44.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:2b:47:d8:58:a2:9b:0a:4f:9a:d2:33:cb:f4:7c:61:0d:
         7f:dd:7b:04:0d:8f:54:b1:c9:0b:b5:b4:93:06:ad:00:10:62:
         3c:d5:aa:6c:17:63:d3:bb:27:2f:7d:91:73:1d:a9:c6:26:a0:
         3c:fa:b4:d1:c4:19:04:42:4d:5a:1e:24:ff:6a:33:b5:b6:a5:
         f4:93:b5:6e:ac:a7:37:32:58:63:4e:36:0d:c7:e9:b0:9d:03:
         f0:b2:ca:6f:77:08:fe:47:96:2d:d4:80:f7:c9:ee:6e:a8:a5:
         58:26:7c:2b:0e:ad:d3:84:dc:be:2b:00:c9:98:bc:6f:ad:22:
         96:4d:ad:3b:a5:13:53:a4:85:7e:0f:9c:f2:63:4a:ea:55:f8:
         69:a2:88:6f:ee:2e:be:5a:c4:f3:1d:20:58:0d:a2:fd:3b:15:
         b6:b8:fe:30:99:d5:f0:99:32:53:06:64:45:86:d5:e7:7d:8c:
         1d:fd:b4:9d:15:2d:c9:28:e9:43:2c:84:e7:2a:e0:e6:e8:52:
         05:dc:00:59:49:5c:cf:ec:b8:8f:3c:3c:e0:0e:4c:25:c5:d8:
         26:31:c5:a8:4f:8d:f9:87:87:e8:e7:cf:8a:4b:ce:b5:c3:12:
         69:3e:56:bc:a7:0d:e7:f7:22:78:4e:10:82:9d:a2:d8:26:d0:
         f4:5c:83:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:11:47 2026 by rpki-client