Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16c07c7b-44f1-359f-a715-cae604282dcc.roa
File:                     16c07c7b-44f1-359f-a715-cae604282dcc.roa (raw, json)
Hash identifier:          aqD5XbHiE7pDmQKPaHZ2xtISh44QF6pJF6/z5QyMsQA=
Subject key identifier:   B8:28:97:5D:B4:63:B9:C4:83:82:B0:E6:6D:79:66:72:7C:4E:05:21
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EAEE9F0C5D56916701371D560
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16c07c7b-44f1-359f-a715-cae604282dcc.roa
Signing time:             Fri 31 Jul 2026 16:30:32 +0000
ROA not before:           Fri 31 Jul 2026 16:30:32 +0000
ROA not after:            Thu 29 Oct 2026 16:30:32 +0000
asID:                     274932
IP address blocks:        38.84.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:e9:f0:c5:d5:69:16:70:13:71:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 31 16:30:32 2026 GMT
            Not After : Oct 29 16:30:32 2026 GMT
        Subject: CN=0a8643ee-6be2-4d4c-9e84-2d61be87bee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:99:d6:78:b2:83:be:e2:e8:63:0e:2e:b1:
                    f3:a1:57:9b:fc:aa:cb:b7:34:e5:0a:dc:c5:a1:8f:
                    68:38:6d:a9:a7:fe:ac:cd:4d:a3:d2:ef:8b:d3:cc:
                    83:21:2f:16:ff:92:8b:d3:d1:f6:3b:0c:97:72:e9:
                    04:af:a3:47:2b:6d:10:e3:2b:57:a1:fc:a3:b0:a3:
                    21:88:1e:6b:ba:2b:73:a5:88:3b:7f:2f:8f:9c:13:
                    f7:d4:0c:2f:a9:f1:b1:ef:65:63:ff:6f:47:17:2d:
                    17:50:36:79:c9:8d:27:bc:13:b7:32:1a:27:8b:f6:
                    53:27:a2:88:03:d0:29:36:6e:f1:c5:3d:cc:bd:7d:
                    a0:36:15:05:1b:12:25:81:1d:f6:d0:f5:5c:78:3a:
                    fd:71:e0:e7:ba:9e:4c:af:a2:f2:d1:a6:50:72:d4:
                    a6:84:a9:1d:40:4f:16:2c:78:3e:0f:01:6c:e8:f0:
                    29:61:55:4f:a1:4c:1a:5c:ca:0e:ac:b8:d9:95:74:
                    e5:55:8c:39:7c:99:87:cf:bf:a0:f9:ea:0e:34:8e:
                    8f:b0:6f:2e:c2:7a:c6:38:12:d5:d1:0c:00:9f:f7:
                    b6:8a:e9:34:63:21:3a:e5:09:e9:1b:e2:56:73:d6:
                    d9:3b:9b:0f:02:56:6c:8a:40:12:82:e3:16:5a:82:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:97:5D:B4:63:B9:C4:83:82:B0:E6:6D:79:66:72:7C:4E:05:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/16c07c7b-44f1-359f-a715-cae604282dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.84.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:93:16:21:25:4f:39:e7:78:b9:13:bb:c3:e9:7c:7e:08:
         0c:26:0a:49:d6:c3:a8:16:6a:f7:66:00:b5:3c:35:e5:c2:e8:
         cb:30:e9:7c:63:6d:25:f2:0f:07:45:70:a8:e8:7b:e0:48:7b:
         b6:07:fa:99:37:b3:b5:7f:0d:3a:29:0f:9b:10:12:d1:9c:8b:
         b0:97:ca:d8:98:78:4d:f8:9c:34:a4:4c:a5:07:80:ac:0b:a8:
         c0:5a:01:b8:0d:59:ab:a4:6a:9a:08:3f:82:3d:dd:32:f9:f0:
         d5:61:fa:fe:6d:56:76:65:34:65:02:ee:98:c2:5d:25:5f:ec:
         f6:7a:9a:ba:cb:7a:28:85:7f:d8:ae:43:9a:77:58:2c:74:e4:
         c6:28:e0:29:24:1b:bb:0f:ba:f9:af:98:16:1d:cc:8c:d3:08:
         8b:e8:b0:88:f8:6a:7a:55:3b:87:fc:31:e4:dc:0c:54:04:23:
         5b:43:12:09:91:a4:46:ea:fb:21:f5:6a:25:21:7a:a8:aa:cc:
         16:24:47:bb:ca:18:09:74:f2:0b:8f:bd:86:a2:37:73:fa:26:
         97:05:2f:d5:3f:cd:76:70:c7:7d:3c:36:ce:06:24:d3:6f:c6:
         fa:72:2f:41:c5:5f:65:d1:84:32:fe:23:f4:42:a6:92:0e:c9:
         67:e5:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:04:38 2026 by rpki-client