Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/05bb4a79-03c2-3df4-8d6f-d8bca6557999.roa
File:                     05bb4a79-03c2-3df4-8d6f-d8bca6557999.roa (raw, json)
Hash identifier:          Rz5Kn+aaSWBJePuQG1NKllLxE8Yf3NfCxNDzyUH99f0=
Subject key identifier:   AD:FE:FD:FD:04:BF:EE:77:28:CD:06:A3:05:19:A6:4D:CB:60:83:FF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA799C426E867F92C614EA6A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/05bb4a79-03c2-3df4-8d6f-d8bca6557999.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        38.203.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:c4:26:e8:67:f9:2c:61:4e:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a103dd40-4757-4bbf-95cd-ac0e91815d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:85:4f:88:6f:fd:d0:d3:fd:53:19:db:6f:
                    44:d2:ec:b6:4c:99:72:12:2a:a1:7b:10:3e:b4:55:
                    99:72:2c:78:39:92:dc:7d:13:f5:d8:6d:0e:b0:cc:
                    cb:20:b2:ad:f2:6f:8a:6f:6a:32:78:52:a9:85:72:
                    f2:78:6e:ff:1a:06:2b:1a:9b:af:1e:ae:e9:d6:1f:
                    15:9a:98:30:49:f6:8a:79:49:a4:5c:b7:ec:d1:9b:
                    e9:da:4e:63:23:6c:7f:81:0d:2e:78:be:eb:e0:d3:
                    cd:be:23:52:b7:14:5d:2a:2c:e3:99:95:84:ab:e3:
                    48:87:a9:5e:1e:2e:9a:d9:f2:5e:02:fe:d5:2e:e9:
                    24:f3:ac:40:b2:7e:74:2b:b5:9d:1d:a5:ae:09:89:
                    80:be:54:32:d4:9d:fc:ab:ec:52:64:76:da:59:86:
                    0c:18:db:a8:7e:04:7f:15:8e:93:56:a0:03:95:f0:
                    68:a7:c5:d9:49:fb:42:d2:11:86:84:3f:1e:ee:07:
                    bc:23:59:96:2d:3b:63:96:a5:20:77:a8:26:8f:62:
                    c6:e9:ac:aa:d3:c0:c5:d3:cf:ce:28:4f:ff:fe:f7:
                    67:d8:66:fe:86:8b:aa:6d:2d:bd:a3:82:81:ce:d3:
                    46:9e:12:51:8f:4c:59:9c:17:53:cd:10:8e:33:94:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:FD:FD:04:BF:EE:77:28:CD:06:A3:05:19:A6:4D:CB:60:83:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/05bb4a79-03c2-3df4-8d6f-d8bca6557999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.203.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:c8:a4:84:43:ef:fe:2f:52:c3:f3:b9:f9:2a:2f:39:b3:
         f6:d6:b1:85:3c:a1:44:b6:a8:5a:e9:8c:d2:7a:de:75:7a:ba:
         2f:c1:d5:d9:33:0f:85:d2:b6:27:6b:4e:28:4e:72:3f:04:f4:
         c3:ea:78:e3:6e:7f:76:2c:32:fa:03:8c:5f:bf:9f:ca:01:79:
         50:a4:71:59:39:cf:18:82:45:28:3b:3c:fc:17:98:b3:70:b9:
         45:16:b7:99:0e:56:b8:6e:7a:9f:d6:e6:67:5a:a4:82:d2:a7:
         95:c9:d5:0b:64:d8:03:8d:31:b2:bf:78:15:7f:bb:31:d3:f2:
         10:c5:ab:04:63:16:cd:f0:15:6f:fc:f7:00:0a:d4:ee:6c:56:
         ac:db:58:ba:61:e0:ce:3e:b6:12:4e:7a:6d:12:14:fb:05:95:
         1f:b8:ef:82:21:2b:ba:1a:c6:20:7f:c9:9d:4f:75:d7:03:18:
         12:3a:3e:90:15:8b:9f:3a:fc:37:64:e3:8e:60:c4:51:cd:94:
         44:be:4d:9d:03:60:18:46:74:55:42:e0:70:7a:56:f2:9f:50:
         7c:df:c0:26:79:4b:17:cd:5a:ac:a9:4f:29:ee:0a:36:b9:93:
         0d:7c:1e:73:0d:4d:f9:8b:f7:56:7d:05:55:a3:e5:1d:29:8d:
         6a:06:6a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:28:05 2026 by rpki-client