Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18222815-5a07-35fc-8cb7-1405bdbf3398.roa
File:                     18222815-5a07-35fc-8cb7-1405bdbf3398.roa (raw, json)
Hash identifier:          5RWdNHxii4fWj8kQ3QcyzKyNcFmMF1q1FqBXQYwHTLs=
Subject key identifier:   6D:08:FB:39:39:8D:4B:67:C5:49:E7:68:05:7D:A9:F8:9B:0A:72:55
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EE2274F159D2CC1C22E29CFC0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18222815-5a07-35fc-8cb7-1405bdbf3398.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     273619
IP address blocks:        38.19.56.0/24 maxlen: 24
                          38.191.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4f:15:9d:2c:c1:c2:2e:29:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=96d614f8-557b-4aa9-a06e-4b1ba598afc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:a0:1b:db:77:67:e5:96:25:af:43:81:d0:
                    d6:4f:80:97:5c:17:fc:cb:09:c5:6e:c7:e4:10:53:
                    39:37:2d:e1:27:78:46:b3:79:9e:53:0d:b3:13:d4:
                    18:3e:8b:eb:25:af:a3:bc:eb:35:f4:30:6b:7d:23:
                    c8:55:61:30:34:71:1d:07:b4:29:68:1e:d6:b2:f7:
                    97:00:90:b4:f5:91:a4:d0:25:9e:58:90:13:a2:2f:
                    7c:f4:0a:cf:c4:93:fd:0b:52:31:59:cc:f2:b2:67:
                    d1:0f:a7:c8:3c:f7:d2:2e:87:f1:f6:1a:34:03:74:
                    b7:29:ed:7e:7e:0b:b6:c9:68:c8:2b:73:ae:59:30:
                    fc:dd:4a:33:3d:7a:74:e4:68:80:57:cd:f5:70:13:
                    77:e5:52:21:d6:4f:7b:38:ba:5a:5a:3e:7b:24:32:
                    92:b0:c9:7f:2f:81:ea:d7:63:2f:ab:78:3a:31:c4:
                    b7:2e:50:dd:9a:99:d1:10:bc:48:e9:00:5f:c7:9a:
                    ff:44:d4:49:b9:aa:6c:2b:03:7a:12:5e:90:31:6b:
                    82:0c:69:39:4d:78:25:4b:1d:d2:41:c9:81:f0:88:
                    01:ef:04:09:83:3c:36:92:d9:36:28:bb:97:df:45:
                    15:35:1a:01:7b:4f:39:80:c8:64:8a:29:92:85:22:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:FB:39:39:8D:4B:67:C5:49:E7:68:05:7D:A9:F8:9B:0A:72:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18222815-5a07-35fc-8cb7-1405bdbf3398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.19.56.0/24
                  38.191.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:fb:bd:63:3e:81:5f:88:51:34:e4:9f:cd:44:51:c0:dc:
         0f:d3:8e:0e:85:5b:33:89:f0:06:4a:6e:cd:15:4b:87:08:a2:
         3a:1d:1c:d6:e2:45:f1:72:4a:88:d5:fa:09:2a:fc:1d:9b:00:
         af:cc:5c:e4:a1:64:19:eb:8b:bb:7d:59:94:41:0d:da:a2:1a:
         71:fd:e8:f8:b3:63:56:2f:cc:b3:9c:bf:85:4d:55:e3:0a:aa:
         24:b0:31:7b:6c:02:a6:46:51:56:8d:73:ed:a3:c0:75:ad:b2:
         16:27:76:0f:a2:a3:84:cb:55:a9:e1:db:51:75:d3:ba:70:e8:
         cb:20:63:23:4d:5c:25:b3:21:f5:85:80:1a:e9:52:4e:6f:8e:
         4e:3a:b9:8f:e8:07:c4:c9:a6:b1:03:bc:94:54:39:39:1b:f6:
         19:a6:9c:ae:20:9b:31:cd:c1:e5:32:25:fe:92:e9:53:d5:c7:
         be:33:5c:9d:78:7c:82:cc:e9:0e:47:9a:c4:3c:8d:90:ba:b7:
         4e:da:c0:b6:63:f6:37:d5:8a:70:e7:d1:99:93:03:12:e6:0e:
         d5:01:db:78:d2:ec:77:77:22:1e:38:1c:96:52:95:f9:ff:93:
         12:b2:ef:ba:9a:4b:91:14:37:c9:60:6c:35:d5:88:62:69:2c:
         9f:c5:de:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:13:43 2026 by rpki-client