Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa
File:                     1244254d-0342-3238-9dd8-69d6448ce527.roa (raw, json)
Hash identifier:          AfGvQDqZbdUQcPlV34YUaQRAO3VBcRkDr6Rno3/ggew=
Subject key identifier:   3C:D6:A1:07:23:34:A6:65:A8:3D:8D:98:B9:0B:62:D2:B2:B3:90:A8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED9C74C284846667A7F042980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     275714
IP address blocks:        38.20.0.0/23 maxlen: 24
                          38.51.134.0/23 maxlen: 24
                          38.52.128.0/23 maxlen: 24
                          38.210.208.0/22 maxlen: 24
                          38.210.212.0/23 maxlen: 24
                          38.211.128.0/22 maxlen: 24
                          38.255.122.0/23 maxlen: 24
                          204.157.108.0/22 maxlen: 24
                          209.61.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4c:28:48:46:66:7a:7f:04:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=da89369d-a728-4fdc-847b-4d916cb3b0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:36:7e:69:35:0c:7c:5b:94:8f:10:c7:48:
                    30:b2:3a:bf:81:e2:2f:22:9a:1b:17:3f:fb:50:20:
                    bd:ae:6a:a0:cc:a8:44:09:90:83:b3:4b:78:d9:6a:
                    c5:a5:e2:b8:67:e7:f1:f8:2b:0f:73:d3:ae:e3:1b:
                    e8:94:86:6d:d0:ea:3a:a3:2d:14:f3:06:9a:37:57:
                    bf:ee:e0:87:ce:07:80:ac:de:34:3f:9b:a5:ea:9a:
                    ce:4b:79:b7:5a:5a:ea:d7:68:0a:3d:66:a1:05:e1:
                    07:d2:1a:da:69:8a:ac:f8:34:fa:f0:97:5f:55:eb:
                    fe:68:26:95:13:e9:47:66:c0:09:f0:f9:80:71:f6:
                    2e:e2:c1:97:87:d2:80:27:5f:c7:38:73:a6:e8:62:
                    14:bb:1f:49:03:fd:8c:76:82:12:77:ad:54:cb:cb:
                    34:49:71:e5:d4:1d:6d:99:e0:ae:2c:b7:99:ef:16:
                    dc:ac:2c:b3:5c:39:70:30:40:e7:6a:64:d0:01:dd:
                    0b:10:08:d2:54:26:14:19:28:57:c6:f9:f5:22:61:
                    fd:2a:a4:d0:f6:bf:c4:de:30:a9:5f:0c:f3:75:54:
                    94:b3:80:fc:82:77:47:56:66:e5:5a:ca:b2:99:07:
                    12:86:2e:99:7f:fc:4d:49:7c:28:22:76:ba:cd:1b:
                    76:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D6:A1:07:23:34:A6:65:A8:3D:8D:98:B9:0B:62:D2:B2:B3:90:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1244254d-0342-3238-9dd8-69d6448ce527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.20.0.0/23
                  38.51.134.0/23
                  38.52.128.0/23
                  38.210.208.0-38.210.213.255
                  38.211.128.0/22
                  38.255.122.0/23
                  204.157.108.0/22
                  209.61.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:28:10:8f:18:8d:c7:cb:f2:43:eb:34:1f:5f:fa:61:6e:fd:
         83:76:0a:cd:0c:e9:c6:63:40:ad:22:bc:28:34:d4:00:02:18:
         68:d5:f3:24:b1:de:e2:41:1a:d3:1e:3d:7a:15:d0:81:92:e3:
         a9:8b:a0:be:81:2e:6b:fb:0f:f2:15:96:e0:76:ba:3e:6a:86:
         4d:6d:66:83:f1:1f:23:66:ba:8a:0e:6e:f3:c7:02:eb:c5:6a:
         30:da:9f:a4:5b:3d:3e:72:56:0b:28:d3:d9:23:b2:45:9d:f8:
         c9:4c:61:42:94:67:a2:bc:1f:fa:aa:4f:64:de:4d:c4:90:ad:
         dd:35:94:3a:85:58:ac:9f:8c:da:c3:35:3b:93:c7:93:64:31:
         e4:82:87:04:d8:8b:b5:f1:49:4a:5b:d0:91:ac:a6:ea:1e:b6:
         c6:eb:13:a8:6e:d6:e8:4f:8b:de:13:41:ef:d1:b9:ff:73:e1:
         73:d5:45:be:fc:95:2f:3a:9d:d4:74:3a:2e:71:16:31:58:95:
         c1:45:cf:17:72:9e:40:15:12:57:b4:d6:13:27:41:1e:b3:fc:
         67:fa:ef:1b:b1:34:ef:fc:f5:4a:0d:03:af:32:6a:44:dc:9a:
         b4:28:46:3d:7b:cb:6c:a2:71:48:30:e5:d6:50:1d:f9:d9:2a:
         16:17:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:18 2026 by rpki-client