Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa
File:                     0bed0f15-568b-3236-aae8-9eed5e3340b4.roa (raw, json)
Hash identifier:          /0DAaMZr1D29hyO3KzyItkSv2FwNumh9e71F3x3AYEw=
Subject key identifier:   0A:F0:B9:0F:AF:B3:4A:80:2D:F8:2F:7D:70:FF:E0:0E:A2:1B:93:F2
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E11B432DD22A11FD8D7845D40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     274720
IP address blocks:        38.52.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:32:dd:22:a1:1f:d8:d7:84:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=743df052-d800-4059-8fb5-ddb8f6743ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:38:76:1f:49:dd:9e:64:08:15:91:7b:d1:
                    2b:ad:da:3f:91:b8:77:57:3f:3c:74:fd:9f:75:76:
                    15:a8:a8:b3:5e:4c:bc:4e:09:a8:85:03:e9:8b:e4:
                    aa:1f:c0:6f:a1:33:7e:db:8a:73:6c:bf:4c:a1:ad:
                    0b:12:46:c6:9f:b9:fe:59:ee:b8:2c:1b:54:dc:6d:
                    1e:cc:57:4e:a6:e1:5b:b8:9e:a3:73:33:fe:3f:9c:
                    40:cd:0b:29:c2:1e:57:32:7f:0d:0a:37:0e:f1:dc:
                    66:f3:4d:8e:16:17:fc:23:b3:ad:d4:ce:b8:30:2a:
                    ab:a6:54:cd:3e:ac:be:da:67:0c:9e:e5:4d:7c:b6:
                    ad:52:d2:24:fb:ff:d2:f8:e1:e9:f7:a4:16:37:5e:
                    6c:39:75:15:a1:47:41:80:7f:ad:17:c2:b7:db:f2:
                    15:e7:d1:17:72:d8:b3:e1:0e:81:f2:4b:bc:7f:2a:
                    b6:09:31:53:32:e3:d0:18:14:d5:ec:f3:f2:b1:cd:
                    6b:d4:32:e7:98:4a:e9:78:36:40:48:8b:b3:33:7c:
                    f2:8f:02:fb:b7:25:1c:06:4c:3b:28:c8:00:cd:47:
                    ff:00:33:ff:41:5f:25:6f:ff:cb:ad:e2:a7:b2:b7:
                    a7:1b:e7:24:f8:53:c9:ea:70:ee:d7:e6:45:26:78:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:B9:0F:AF:B3:4A:80:2D:F8:2F:7D:70:FF:E0:0E:A2:1B:93:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0bed0f15-568b-3236-aae8-9eed5e3340b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.52.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:21:83:6b:d3:c2:cf:bb:d0:4a:1b:8d:ab:61:14:50:20:
         b4:7e:90:4e:fc:90:39:c6:b0:a2:f4:0c:28:c1:77:09:05:31:
         7b:ec:0b:5f:c6:8a:db:e5:03:ca:c1:10:b4:03:8a:0a:ea:d8:
         16:d8:4d:73:ad:10:92:cb:0d:a1:01:40:3e:d2:8b:d0:b1:43:
         81:9c:21:84:f3:5e:49:80:cb:d1:bb:bd:8c:d6:e1:29:af:ea:
         fb:52:5c:80:14:d1:63:0e:39:0e:13:6c:75:ec:5f:e6:8a:9d:
         8c:b6:a5:45:c9:66:1a:4d:68:3c:7b:1a:9c:0d:31:23:07:55:
         12:41:a4:b3:49:e8:04:da:2e:1f:53:63:6b:18:36:bc:1a:27:
         ff:45:cc:f4:21:6a:d0:83:e3:87:28:9d:60:ac:1a:9f:37:1d:
         9d:d1:d5:4d:c9:af:b0:49:e2:c4:38:62:20:c5:a5:15:74:23:
         bb:fc:b1:73:58:e0:67:bf:2f:ac:55:03:1e:99:54:d3:75:d4:
         9b:62:5d:7b:d2:a6:0f:8a:64:12:7e:32:56:f9:38:57:d4:9c:
         0d:b0:a8:1d:73:0c:2e:e8:bd:92:50:15:6f:6d:28:28:11:84:
         b8:b4:a4:51:ed:06:f0:d8:57:8b:72:ff:63:e4:a0:a8:95:30:
         7f:5a:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:57 2026 by rpki-client