Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13e3e1db-6e5c-3ca2-a448-0bab966e2d32.roa
File:                     13e3e1db-6e5c-3ca2-a448-0bab966e2d32.roa (raw, json)
Hash identifier:          OLxwBC+c2LKG6VXk66p24gNqs/O8NaiEtjfLO2z+Mlc=
Subject key identifier:   A0:29:D6:3A:E0:16:13:69:8B:F4:8A:ED:9A:1B:96:8D:14:B5:25:02
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED431D699DFE33610C7634980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13e3e1db-6e5c-3ca2-a448-0bab966e2d32.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     274101
IP address blocks:        38.172.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d6:99:df:e3:36:10:c7:63:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=93b65f11-f2e5-429d-8810-5bc6a7ac5e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:22:e7:82:30:4f:72:3f:da:26:cc:ba:3d:
                    71:c1:73:d7:fc:3a:6c:63:c2:73:03:3c:39:0a:24:
                    f8:23:4a:97:3c:fc:56:02:f4:8b:e9:4b:42:eb:a5:
                    44:54:de:64:8c:d9:08:36:00:ca:79:f5:f1:6f:15:
                    af:59:a6:98:26:33:fb:3e:e6:96:4e:34:2b:d5:27:
                    49:2c:81:f7:4a:40:d5:11:e1:00:68:49:9a:20:a1:
                    23:d7:a2:6c:16:6f:c8:f2:22:1a:7f:c9:1c:df:c5:
                    bc:50:d7:4a:fa:02:7d:ae:e0:cf:bf:29:31:00:8a:
                    92:b9:b8:3e:12:f0:de:9d:fd:57:59:aa:2e:51:9d:
                    4b:2d:e1:fd:56:c1:5a:26:6d:7e:d2:0a:d6:8e:42:
                    df:d5:a0:44:9c:9d:90:a7:e9:ac:11:24:0e:2c:b3:
                    ff:72:62:e6:0a:bb:bd:12:d8:c6:f0:5f:00:4f:61:
                    11:8b:66:85:b8:58:6d:28:d0:44:6f:65:c0:de:1e:
                    68:57:5e:46:38:37:5a:cf:3b:b8:d3:c7:36:40:35:
                    68:b1:9d:70:ec:c2:f4:42:cb:c4:82:ce:e1:9a:87:
                    71:e0:89:26:5b:d1:11:ae:5a:94:28:a5:de:69:03:
                    b9:53:62:a3:b0:6a:1c:16:e0:23:d8:cb:92:58:d9:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:D6:3A:E0:16:13:69:8B:F4:8A:ED:9A:1B:96:8D:14:B5:25:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/13e3e1db-6e5c-3ca2-a448-0bab966e2d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.172.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:94:be:d7:41:ef:54:ae:e1:1a:fc:67:54:ce:1b:0c:2b:
         97:ce:85:ba:23:6a:7b:f8:85:0e:4a:3b:8c:69:d6:af:85:a9:
         79:94:5b:11:96:9d:58:ec:66:18:cc:76:36:23:03:d8:d7:26:
         99:e1:14:65:8b:c3:34:4f:09:56:00:21:36:16:ae:9b:04:e5:
         09:6d:63:27:80:b0:ed:50:b1:ba:8d:16:86:5d:b4:e2:bd:1b:
         27:40:97:23:e1:f5:df:21:26:f6:c0:a8:23:34:e6:72:32:3d:
         0c:87:03:a6:29:50:22:07:0f:96:25:3a:0b:99:fc:1c:f8:8b:
         11:42:e0:64:d9:9e:31:8d:cb:a2:4b:44:46:56:0b:14:5b:e3:
         42:6d:67:39:23:75:2c:62:a1:22:99:db:a9:99:07:63:8c:b1:
         d9:7f:24:45:46:f4:84:db:80:b8:12:6e:aa:2d:9d:44:18:56:
         16:bb:bd:65:72:f3:32:0f:64:39:ed:46:dc:49:c7:2e:79:3d:
         61:e3:ac:e1:d0:6b:af:7b:f9:9e:21:bb:79:22:26:4a:af:33:
         ee:ee:a8:06:e3:af:ec:3c:66:c2:1b:e9:65:ee:9b:48:2d:38:
         75:a5:3b:4d:97:db:1d:4c:cb:6d:95:77:57:7c:32:95:5a:d9:
         5e:ff:4f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:26 2026 by rpki-client