Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/09baf9f5-9eee-3755-a6ae-a7cfaddcae48.roa
File:                     09baf9f5-9eee-3755-a6ae-a7cfaddcae48.roa (raw, json)
Hash identifier:          yNlUQu4jFqn/iyyyeOnlDnyTZBQEsQwv+yzCamJmC/Y=
Subject key identifier:   64:E5:02:C3:64:F2:A5:ED:E3:37:38:3D:92:29:4C:A1:79:09:3F:57
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EE442F78B97F2BA067E076600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/09baf9f5-9eee-3755-a6ae-a7cfaddcae48.roa
Signing time:             Wed 19 Aug 2026 19:07:45 +0000
ROA not before:           Wed 19 Aug 2026 19:07:45 +0000
ROA not after:            Tue 17 Nov 2026 20:07:45 +0000
asID:                     269506
IP address blocks:        38.210.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:42:f7:8b:97:f2:ba:06:7e:07:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 19 19:07:45 2026 GMT
            Not After : Nov 17 20:07:45 2026 GMT
        Subject: CN=3cad305b-e6e6-4349-9a78-5d853f7f25ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8a:ce:cf:29:32:94:4f:9b:11:13:6d:14:22:
                    41:e8:26:18:40:ff:3e:21:76:c5:1f:1e:fc:f6:9a:
                    1d:c7:4d:b7:66:3b:0a:fc:89:b6:0e:d0:0c:5d:e2:
                    87:d3:ff:72:04:79:ac:d7:2a:8b:f1:15:3c:68:c6:
                    8a:aa:0e:2e:cd:a6:e6:cc:18:64:3f:8a:ce:3b:71:
                    59:5c:a4:17:20:be:af:38:0c:39:d4:20:26:bf:bf:
                    77:6e:35:23:23:98:67:93:0e:0c:e7:5f:4d:a7:af:
                    92:55:62:c9:ac:da:7b:5a:1e:49:6e:b3:fa:5b:4a:
                    fc:9c:97:11:f0:e9:08:44:62:10:77:da:1b:0a:26:
                    9f:7e:07:d5:bd:2f:83:36:c6:0d:5b:fa:13:9a:50:
                    33:6d:56:e1:7d:cf:32:60:97:c0:be:05:03:27:d7:
                    87:bc:46:c9:1f:a8:2d:0a:fe:05:c8:04:28:fe:2e:
                    9f:ae:43:c7:54:c8:40:d3:bd:5b:1b:d6:43:33:77:
                    3c:a3:f2:df:df:aa:85:a1:cd:7a:f2:6a:ee:14:9c:
                    45:68:3f:bd:fc:5e:fd:69:d6:73:07:5f:92:63:e2:
                    a0:e2:d8:74:4e:f3:81:53:4e:50:4a:a1:80:5d:d5:
                    a0:06:4a:b4:e4:f2:54:4b:f3:79:84:4f:c8:81:bf:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:02:C3:64:F2:A5:ED:E3:37:38:3D:92:29:4C:A1:79:09:3F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/09baf9f5-9eee-3755-a6ae-a7cfaddcae48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.210.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:49:a5:95:d6:fe:7b:cd:aa:ec:5a:1a:de:1d:f9:6a:07:ce:
         a8:0e:5f:61:0d:98:ee:51:ee:2a:03:f3:18:0a:06:ae:95:f4:
         e3:7f:60:d7:c4:20:22:69:c6:38:08:10:4f:ac:62:b1:96:65:
         ac:cb:5b:85:c2:c6:95:cd:3a:c9:ff:4f:28:3a:f9:f5:2c:4f:
         9c:3d:89:2d:f0:bc:cb:cd:dd:3f:fd:0a:8e:b3:e5:c9:1f:2e:
         4c:c5:b1:2d:e4:78:53:26:f7:cf:4c:47:70:51:5f:cb:ec:4f:
         1e:5d:94:70:0c:57:6d:ab:15:71:d4:a9:47:84:f8:3a:82:ca:
         8c:b6:81:7c:24:d4:4d:2c:5c:38:2a:1b:d9:fb:71:1f:22:58:
         82:60:82:9a:05:16:48:32:23:b4:76:51:75:eb:93:32:99:75:
         25:d8:bb:15:43:95:d7:fe:0d:91:c0:62:0c:b3:59:b9:29:a9:
         27:26:cd:ef:ad:55:92:ef:2a:45:29:df:fc:fc:9c:7f:55:3d:
         c4:22:7d:cb:c1:77:29:48:8e:a4:86:cf:c8:87:fc:09:29:b2:
         fb:68:c7:18:67:72:05:b6:7f:a8:c8:08:c1:43:b3:3e:4e:10:
         ee:ef:38:9a:3a:2f:2b:1e:c0:df:05:b1:09:68:a3:4e:87:4e:
         27:f3:03:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:50:21 2026 by rpki-client