Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa
File:                     14dcb802-9548-373d-8638-610826d9e0fe.roa (raw, json)
Hash identifier:          9C6wRBLRPoRmuLaOOxewUioUb6aSstvRMUAYE67U77w=
Subject key identifier:   7B:22:93:11:8A:5E:6A:E5:C8:39:91:05:A3:84:F0:20:B7:4B:C1:92
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E4A4526943C50E4F3E0BACA00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa
Signing time:             Thu 25 Jun 2026 15:17:40 +0000
ROA not before:           Thu 25 Jun 2026 15:17:40 +0000
ROA not after:            Wed 16 Sep 2026 15:49:02 +0000
asID:                     18859
IP address blocks:        38.67.32.0/19 maxlen: 19
                          38.128.176.0/20 maxlen: 20
                          38.175.224.0/19 maxlen: 19
                          38.248.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:45:26:94:3c:50:e4:f3:e0:ba:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 25 15:17:40 2026 GMT
            Not After : Sep 16 15:49:02 2026 GMT
        Subject: CN=891538de-d090-46eb-bccb-39c8b94aee16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:fb:a1:84:0b:f2:26:64:81:2d:6e:6e:ce:
                    a5:01:9c:52:81:09:b3:7d:82:9c:08:b2:8e:ad:bf:
                    12:7b:56:be:dc:c7:ec:67:e9:36:c3:97:90:d1:1e:
                    2f:af:78:d1:a9:e6:dd:45:66:7f:94:25:42:86:00:
                    74:58:13:be:1a:8d:48:fc:a6:cc:27:9a:27:35:de:
                    53:cd:fe:1e:b1:61:b9:c1:29:87:27:89:3b:9c:3a:
                    a8:26:d3:4e:da:a8:12:c5:01:54:36:72:dc:03:63:
                    d8:9a:98:c8:e7:6e:b4:7e:23:80:85:32:96:bd:af:
                    5e:2d:3e:f8:2d:24:b6:a9:9e:c8:a4:e4:13:ed:5e:
                    34:5d:03:cf:1e:03:4e:37:65:b9:ff:c7:d8:7a:62:
                    8a:6e:58:40:cc:70:22:89:df:19:ee:5a:a7:78:14:
                    b6:53:84:21:13:53:c8:d2:c6:c7:a0:88:34:0d:34:
                    e2:4a:e9:26:99:d3:96:63:33:7c:d1:b3:94:72:fc:
                    30:d5:11:b5:72:1c:ca:01:e2:32:38:55:d8:e2:93:
                    4e:2a:d5:38:2d:9d:15:09:de:a5:e8:51:0f:ac:70:
                    9c:6b:f2:6d:64:ba:a3:c6:40:26:fc:fc:80:6b:33:
                    e7:5d:90:eb:35:1a:31:e3:f5:9b:a8:58:dc:a8:49:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:22:93:11:8A:5E:6A:E5:C8:39:91:05:A3:84:F0:20:B7:4B:C1:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/14dcb802-9548-373d-8638-610826d9e0fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.67.32.0/19
                  38.128.176.0/20
                  38.175.224.0/19
                  38.248.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ce:4a:59:e9:ff:d1:0f:13:07:cf:01:2d:aa:19:c3:f3:96:
         14:0f:1e:0e:28:f3:7f:e3:c4:2b:31:e6:1b:a6:86:df:3e:97:
         9a:0d:94:1a:71:7c:89:7e:74:74:de:1f:15:ab:66:4d:82:97:
         11:84:a6:d7:89:4f:dd:ee:20:8d:4a:09:4f:d7:30:ce:42:79:
         dc:de:f9:fa:b8:9d:38:6c:56:b0:82:c9:3c:2d:9d:6f:ed:4b:
         f4:8e:68:72:20:c0:9b:35:75:03:64:46:0a:14:fd:6e:d7:b9:
         b9:bc:e3:d2:62:a5:97:7e:9d:c6:11:59:da:5e:ef:d8:9b:5e:
         78:e8:cf:f7:57:0b:7d:c2:e5:f0:0b:cb:1d:f6:80:e8:d4:ee:
         7d:57:4b:e6:9c:ac:0f:38:96:d9:55:e4:61:f6:93:10:5a:6e:
         9d:8c:8f:21:59:52:1c:03:7d:1e:8f:a9:c1:42:28:7b:53:74:
         2a:a2:97:ba:cc:6f:d3:6a:71:cf:2a:59:c2:27:e0:ee:74:8d:
         bd:ef:ff:b7:16:99:28:99:40:9b:2e:0d:5d:a8:a5:89:95:1a:
         4e:c9:01:a7:db:c3:65:09:b1:b5:05:14:b6:8f:54:be:4f:f7:
         c7:f2:16:f2:2d:a4:04:94:10:29:70:db:7e:16:c3:b5:9d:fa:
         db:cd:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:28:27 2026 by rpki-client