Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa
File:                     0fbfcbb5-a853-3343-9ef1-465735735b21.roa (raw, json)
Hash identifier:          F2zncV2wug+bi7A8eFDNuPbYBM9mS8NBglZb5KSShAg=
Subject key identifier:   A4:F8:4D:C3:53:3F:CA:68:6F:5B:F5:F1:73:37:81:09:E9:9D:30:B9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D5D2E95E60A7FD7C92D897B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa
Signing time:             Wed 01 Apr 2026 17:05:37 +0000
ROA not before:           Wed 01 Apr 2026 17:05:37 +0000
ROA not after:            Tue 30 Jun 2026 17:05:37 +0000
asID:                     29222
IP address blocks:        149.18.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:2e:95:e6:0a:7f:d7:c9:2d:89:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  1 17:05:37 2026 GMT
            Not After : Jun 30 17:05:37 2026 GMT
        Subject: CN=069fa092-81a6-4fee-bc76-7607df3123a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e3:b3:41:85:ed:94:6b:c5:05:c3:f1:89:60:
                    3d:ef:79:c4:d4:f9:37:46:f5:71:d8:2b:61:60:3d:
                    13:42:19:0d:84:15:07:98:9f:45:0c:49:5b:47:3e:
                    81:cf:3e:e1:76:a9:cc:0e:02:b5:db:77:40:90:3a:
                    67:d5:db:34:36:77:9d:f7:4e:02:7b:96:bc:84:41:
                    7d:36:78:51:ff:94:4a:50:91:ab:e1:f4:af:23:47:
                    10:34:cf:be:da:18:91:69:4f:7e:b6:50:92:4a:8d:
                    f2:3b:ec:90:b7:33:29:74:da:87:e8:73:e1:a7:f0:
                    c4:2c:91:d6:cd:4f:5e:e9:22:53:50:bf:b7:31:82:
                    a4:40:9f:5e:d1:6f:fa:18:83:23:e4:68:39:8d:b7:
                    d0:33:a6:a4:0d:86:e6:62:63:00:09:9a:47:33:52:
                    42:89:7f:40:6b:43:c6:27:9d:bc:ab:39:da:65:14:
                    8d:0c:e2:58:e8:88:6d:c9:24:a9:b0:a7:cd:8f:e6:
                    1a:89:06:f8:c5:93:6b:2b:c0:c4:db:ce:6b:73:e1:
                    0f:b1:30:d9:e5:fb:c7:1a:f4:f5:31:85:19:83:52:
                    01:e7:b7:99:73:14:0a:12:b3:0b:b3:d4:55:4d:5a:
                    6f:fe:4e:88:6c:6e:7d:bd:13:ce:1e:78:a9:1d:40:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:4D:C3:53:3F:CA:68:6F:5B:F5:F1:73:37:81:09:E9:9D:30:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/0fbfcbb5-a853-3343-9ef1-465735735b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.18.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5b:7e:de:28:13:15:0e:71:ca:9d:0d:97:91:2e:45:16:7e:
         c7:ff:77:57:c8:aa:b8:99:eb:b5:91:48:35:04:6c:bc:3a:8f:
         82:32:6f:e0:4d:c4:6b:06:31:be:2d:af:3a:de:f1:a5:af:47:
         51:c9:1b:bd:8c:91:a5:8c:cf:f7:95:10:85:bc:d5:c8:f1:c3:
         87:3b:6a:46:3b:e1:0a:3d:98:62:0e:9c:38:2e:96:16:d0:10:
         6d:43:3f:80:da:58:e8:0a:1f:d7:26:9c:31:73:03:25:cf:8b:
         7f:c7:1d:c7:9a:e0:c6:c0:ac:fe:c1:c0:1a:44:8e:2c:8b:23:
         6b:35:1d:f4:97:e8:33:32:db:2f:6a:a1:d5:92:d8:e4:b1:9a:
         6b:ef:6b:1b:d0:c8:4a:d7:e5:ce:d8:9e:f9:63:ba:9d:eb:94:
         cc:7b:89:ba:01:46:86:07:53:eb:c3:92:68:e6:18:0c:aa:3d:
         94:89:ed:14:61:9c:81:6b:7d:73:a8:8f:bd:ff:f1:09:33:45:
         37:b4:c7:a1:87:ce:b2:ce:d9:b6:78:84:2e:4f:5b:0f:c3:f2:
         1f:a5:8b:5f:9b:26:76:dc:74:7a:e9:4f:b2:b1:b7:3a:d6:52:
         40:ca:c3:d4:1d:67:6a:d8:0d:38:32:f2:90:e6:f2:c5:2d:2b:
         2e:57:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:16:30 2026 by rpki-client