Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1619956c-dd84-3af5-af76-e3d75c4d2a49.roa
File:                     1619956c-dd84-3af5-af76-e3d75c4d2a49.roa (raw, json)
Hash identifier:          8Y6PPEJmO2ES9BmAgtV33DyMYtT3uiIWap4X30NkCjw=
Subject key identifier:   1D:40:46:A6:64:44:1F:CF:91:95:9D:FC:C2:23:50:10:3A:D1:5F:A1
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F9BCDE18FA764DC8A01ADA33A
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1619956c-dd84-3af5-af76-e3d75c4d2a49.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     268248
IP address blocks:        38.226.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:e1:8f:a7:64:dc:8a:01:ad:a3:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=e73dc0fb-ed5e-402d-b493-b0dfa523f2b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:9a:23:4b:8d:6c:58:7d:d1:6f:ea:d3:50:
                    5b:83:4c:06:54:ea:80:48:21:ee:8c:8e:2f:26:d7:
                    6c:7a:b8:d6:ae:1d:9f:e9:5c:9b:7e:1b:ac:c8:d4:
                    1c:b6:9b:14:ba:c5:64:a2:3b:5b:03:b4:98:11:38:
                    fe:a6:00:17:03:6d:f0:43:0d:17:2e:a6:55:3e:80:
                    be:42:38:26:f5:1a:13:6b:74:e1:48:6d:f2:cd:ab:
                    de:26:cf:d6:7a:86:d5:72:c1:d4:17:64:f7:9b:3c:
                    c3:2a:17:8e:4b:de:c4:c4:e0:7b:28:23:93:9e:6f:
                    24:bf:27:4e:9f:64:6f:4b:e3:8b:16:dd:b6:c1:b7:
                    c3:16:0f:36:ea:db:d3:b3:6a:5a:db:9d:11:a7:6d:
                    f1:4a:f0:12:10:89:eb:10:14:99:57:40:39:e1:1c:
                    d6:d2:b6:87:22:c6:4c:20:f3:27:84:7f:9d:de:8b:
                    af:cc:d5:4a:95:b9:a9:1c:04:ed:2a:e1:28:9e:b3:
                    be:e6:45:d5:26:08:df:66:45:89:8c:54:1b:48:ec:
                    7d:b8:03:ca:4f:69:d1:13:18:cb:a9:5f:3a:15:aa:
                    19:96:8a:f8:8d:fc:03:bc:92:82:00:8d:d3:ef:c8:
                    3d:97:30:19:62:f4:e7:69:87:b3:46:b4:5d:f3:a5:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:46:A6:64:44:1F:CF:91:95:9D:FC:C2:23:50:10:3A:D1:5F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1619956c-dd84-3af5-af76-e3d75c4d2a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:fe:ab:63:80:dd:6e:bf:f6:1e:a9:34:24:ba:4e:61:21:
         e6:77:4d:19:1a:80:b0:5d:b4:38:9e:03:4c:06:6c:2d:fc:53:
         a2:7d:9d:58:d0:4e:2c:ca:b5:34:06:08:a3:b5:ec:85:ca:10:
         ce:a0:9c:c6:42:f2:f9:91:1d:80:e3:70:81:1c:44:95:9e:8b:
         da:74:6b:51:9d:b3:16:63:f6:f1:c3:56:2b:7e:6e:76:48:96:
         ab:e0:75:9a:b6:41:1c:45:e7:b1:ef:aa:3b:53:d0:a2:e8:bc:
         b8:45:9a:4b:a9:42:0d:c0:06:13:d3:96:0c:7d:87:0e:a8:90:
         10:51:cc:29:36:93:ae:bc:f6:5c:5e:30:90:7e:87:ae:37:9f:
         1f:d2:1c:04:2a:3a:32:13:2a:d2:6f:58:64:30:06:0f:53:42:
         69:00:c2:a8:25:ee:a6:5e:2f:1f:72:b7:ec:a2:3c:06:01:77:
         95:d2:39:7a:b3:68:16:c0:28:a8:cf:d4:a3:c7:fa:9f:e6:89:
         fb:b7:7d:16:ec:9f:8a:70:41:97:db:37:f8:84:eb:0a:f8:53:
         ab:0f:e8:46:d0:e1:e0:19:d4:0f:0e:a0:96:a9:0e:8b:a8:d5:
         4c:f7:28:5d:6a:82:88:83:4e:fd:69:fb:7e:0f:c1:50:b8:62:
         3e:b8:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:22:41 2026 by rpki-client