Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d1abe85-a5ef-325f-ba7f-3d23cd0589df.roa
File:                     0d1abe85-a5ef-325f-ba7f-3d23cd0589df.roa (raw, json)
Hash identifier:          yTQba6Yj1JnbhXnz711TXaQsUD6KVBmhIHmasBAcOnI=
Subject key identifier:   5E:3D:2F:40:32:37:47:71:0D:BC:72:92:E0:5D:60:04:E7:19:61:2A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F8DD8911A38649F4207697800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d1abe85-a5ef-325f-ba7f-3d23cd0589df.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     274936
IP address blocks:        38.188.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:91:1a:38:64:9f:42:07:69:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=7c0fd71a-9d30-499f-a9ad-9ed15facd976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:99:a8:04:8d:dc:d7:7b:6f:4d:3e:87:2e:
                    b5:dc:4c:17:53:6f:d5:d5:0a:01:bf:a6:22:19:39:
                    50:ea:eb:78:81:a3:1e:18:01:dd:af:f6:db:9f:0f:
                    45:d1:97:73:5f:59:3f:47:3d:79:82:61:0b:74:21:
                    f6:f5:b0:73:ae:25:20:07:54:2c:b4:ed:5d:dd:8d:
                    3e:10:53:31:e2:78:d7:49:67:09:bf:ab:9f:ac:c1:
                    0d:17:40:c3:7f:50:14:b5:bf:78:1d:7f:9f:cd:77:
                    a9:b4:2e:6a:2a:ad:84:4c:8b:17:6a:dd:53:2b:be:
                    f3:7b:e2:93:78:35:fe:69:0a:ad:83:73:ca:c9:f2:
                    5d:f8:a6:ea:19:50:f1:25:2e:95:d3:a7:2a:2f:4d:
                    fd:3c:60:d1:85:79:32:e6:b7:a0:f1:1d:20:89:69:
                    43:aa:b2:a6:7d:a8:f6:c6:c1:42:b4:81:ae:f8:95:
                    e4:c0:9b:68:c0:4c:7f:e6:fe:17:14:df:89:c3:21:
                    77:02:6e:24:5f:79:20:c7:22:a1:9c:2c:4a:a8:ea:
                    b0:44:0e:68:a6:f5:6c:63:51:6a:45:70:23:d5:4d:
                    35:a1:08:a7:3c:bb:83:c3:2d:59:06:f5:46:30:e0:
                    57:7b:12:84:3d:4e:dc:52:72:9c:82:91:58:6c:44:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3D:2F:40:32:37:47:71:0D:BC:72:92:E0:5D:60:04:E7:19:61:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0d1abe85-a5ef-325f-ba7f-3d23cd0589df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.188.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:de:46:d5:54:5c:b8:c9:2b:7a:67:e1:4f:ea:76:c5:25:dd:
         6b:f3:84:1c:84:d1:d2:8d:e0:fa:45:71:10:01:6e:92:d1:53:
         fe:a9:2a:28:08:56:92:31:01:eb:a1:ea:f2:30:02:34:56:1e:
         de:e7:a7:d4:ba:df:6b:c4:b4:fe:73:7a:ee:cd:f7:38:c5:c0:
         3d:ad:15:b4:17:dd:44:e9:35:34:57:0b:3f:75:f3:40:d9:a6:
         30:a5:31:d1:7b:27:a4:e3:7c:7c:9b:8f:29:48:1d:93:59:56:
         18:3c:28:28:cb:61:84:3e:40:54:95:d4:f2:a5:0e:35:68:74:
         bc:a6:ac:3e:f5:4e:18:bf:46:b4:ef:2a:65:c5:6f:bc:b7:49:
         36:cd:ad:89:50:9c:e4:a6:c3:e4:27:f5:fd:57:87:e8:09:3e:
         35:5e:73:72:8d:f7:61:ad:fd:aa:37:98:1a:61:bc:da:3b:6d:
         2e:b8:97:64:f1:96:d6:99:b5:66:23:4f:15:af:61:13:6f:5a:
         42:39:0d:78:1f:3a:86:6c:14:ad:8b:ad:ce:7e:0b:fb:0a:d1:
         d9:83:a3:b4:26:44:bb:12:9b:00:a0:4b:ed:89:fc:b8:1a:77:
         97:43:d6:9f:05:20:16:b7:35:7c:8d:98:77:71:19:3f:56:65:
         18:97:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:30:22 2026 by rpki-client