Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa
File:                     11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa (raw, json)
Hash identifier:          jDV1zN82AvbZnvJQky348xyndL1sWCEuhB+1JM+auiA=
Subject key identifier:   34:CD:0B:28:36:60:0E:FC:26:61:06:75:D8:BE:2F:A6:9F:34:E7:43
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D94CBDA71171600BB3AB13580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa
Signing time:             Tue 21 Apr 2026 15:11:57 +0000
ROA not before:           Tue 21 Apr 2026 15:11:57 +0000
ROA not after:            Wed 10 Jun 2026 13:40:45 +0000
asID:                     398721
IP address blocks:        38.9.64.0/19 maxlen: 19
                          154.22.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:cb:da:71:17:16:00:bb:3a:b1:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 21 15:11:57 2026 GMT
            Not After : Jun 10 13:40:45 2026 GMT
        Subject: CN=cc262014-fc88-4792-b12a-330600c2ecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7b:e9:81:9c:60:8c:aa:89:3f:50:0a:5b:13:
                    cf:12:5a:d9:8b:8a:c2:b5:2a:04:14:1a:e3:19:15:
                    71:08:6f:40:17:dc:8e:b7:78:51:98:5d:b9:37:00:
                    09:7e:b2:be:8e:0d:83:1d:12:66:1b:75:6a:0e:79:
                    69:38:2b:0b:35:71:eb:b5:ca:d4:49:36:2b:d7:2c:
                    01:3e:39:b3:b0:93:96:a6:60:8a:61:55:fb:67:5d:
                    01:94:e5:0e:2c:00:c0:34:69:9e:e1:0d:1e:1c:bc:
                    1d:40:b0:56:7b:d1:cb:67:0d:56:51:cb:a3:7a:2f:
                    aa:bb:0c:e4:56:44:9d:87:f8:e0:b9:9a:f9:7f:41:
                    23:e2:6d:f4:0e:ea:5a:1c:50:28:f1:d8:1c:93:86:
                    61:8b:e1:dc:d0:f4:56:d7:ce:e2:55:12:83:5a:68:
                    f5:2e:d4:00:8b:21:da:92:7d:15:b4:f4:1f:3f:15:
                    98:2f:99:e9:b3:4b:e7:39:a1:ee:f2:0a:64:96:0b:
                    11:c2:29:f0:24:ad:9f:77:d0:63:e4:c8:9c:69:68:
                    ac:ed:68:a5:3a:39:6d:41:24:51:02:c8:4e:64:68:
                    db:ba:e1:37:e3:23:30:36:ca:58:96:67:49:72:a2:
                    72:d9:ff:1e:20:a7:59:3c:a1:50:b5:66:7d:92:0e:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CD:0B:28:36:60:0E:FC:26:61:06:75:D8:BE:2F:A6:9F:34:E7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/11ff6b4e-2bb6-3a58-93d4-bdb965c34c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.9.64.0/19
                  154.22.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:fe:79:96:de:26:55:f1:f4:e7:f7:b2:de:64:59:64:59:
         23:df:67:a1:78:c0:88:4e:76:5e:4d:01:2e:bd:e9:c9:f0:9c:
         1f:da:ea:e5:1d:bd:93:26:67:df:be:b6:74:46:e1:95:01:72:
         ac:5a:66:2f:22:e1:91:87:f9:97:7c:26:82:4b:d1:77:ae:17:
         d1:21:3c:1d:ed:dc:d6:1e:e9:76:3d:c8:9b:73:ef:1a:6e:cb:
         12:bc:c4:18:bf:d0:5a:4e:6f:a7:98:89:21:22:b9:75:4f:df:
         3c:42:c8:a2:b2:dd:c5:82:9b:f5:99:ff:ce:3b:7c:b0:70:85:
         da:cb:0a:67:11:58:37:ff:38:56:5e:2b:4e:3a:4e:eb:5c:dd:
         d6:88:e6:e3:6f:5d:6e:c3:b3:9d:76:f1:5b:4d:03:91:b5:08:
         a1:42:1a:9e:d8:94:a9:86:1f:8e:e9:1b:1c:7a:5b:ba:89:11:
         1c:df:bf:c9:85:24:5b:96:a3:c7:ed:91:3d:ed:46:f3:93:eb:
         0b:9b:50:b9:c8:f7:66:db:74:d9:68:55:1e:2c:42:a9:d2:fd:
         64:a7:37:e3:fa:bc:39:0c:02:10:33:cf:bc:64:1e:e2:8b:6c:
         75:94:6e:23:6b:b1:47:15:61:a0:c2:58:61:d3:de:4a:bc:1b:
         cc:15:94:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:12:20 2026 by rpki-client