Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18f77239-a220-337c-8099-8ecb85aa94e4.roa
File:                     18f77239-a220-337c-8099-8ecb85aa94e4.roa (raw, json)
Hash identifier:          a2fcB4JhIbk+rqb4lPDd+b5AWc/6CQQI8sCelNRcLpA=
Subject key identifier:   E6:F4:E3:4B:36:E4:81:6A:9B:AC:DE:43:46:DB:62:E7:79:0F:FF:8B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC63C7B12D42102CF22D8FBA0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18f77239-a220-337c-8099-8ecb85aa94e4.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     21714
IP address blocks:        38.135.176.0/24 maxlen: 24
                          38.135.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:7b:12:d4:21:02:cf:22:d8:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=211548e0-1b54-4687-b325-979fbeb9b5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:7d:b1:2d:81:17:c1:c1:5e:40:b6:b9:38:
                    85:1e:d6:fd:58:86:16:a7:f9:6c:33:29:e3:db:64:
                    9b:77:9d:3e:4e:22:da:5a:ea:b3:a5:87:be:24:60:
                    54:14:ec:93:f6:d3:e3:be:b3:29:9f:13:e0:23:a0:
                    c2:43:9c:71:30:8f:6e:89:7c:af:93:6b:7c:9a:62:
                    7a:41:45:34:af:66:22:fa:d9:85:c2:29:fe:fd:76:
                    44:ab:96:05:67:66:d9:2e:e2:9d:02:46:9e:0a:c5:
                    2e:6c:b5:b4:b8:88:b1:36:94:a3:09:ad:46:cb:9d:
                    32:0e:22:09:c3:1a:64:a3:f9:ab:98:49:1c:77:39:
                    9d:e3:6a:e5:7b:0f:26:67:84:7d:06:b4:24:24:b1:
                    90:77:21:27:30:14:85:61:1f:ed:be:00:b6:20:52:
                    33:da:42:02:ca:80:3c:92:4e:73:eb:20:00:22:65:
                    c8:2a:ba:4d:54:90:f4:a6:17:b9:4d:2c:86:16:48:
                    bd:b1:c9:39:18:88:e0:f3:5a:b8:9a:ff:97:9e:49:
                    86:28:22:ed:52:6d:54:47:ac:eb:81:f3:62:8c:e9:
                    22:e9:ee:5f:8a:e4:de:0a:33:01:fe:86:95:d4:12:
                    5a:8b:bf:7d:58:bf:c2:52:26:02:14:73:2c:bd:d1:
                    b3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F4:E3:4B:36:E4:81:6A:9B:AC:DE:43:46:DB:62:E7:79:0F:FF:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/18f77239-a220-337c-8099-8ecb85aa94e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.135.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e1:a8:f9:a7:17:de:18:bd:3d:06:a8:a7:ab:be:e7:e5:4f:
         2a:3a:c1:77:0b:48:13:57:a6:77:96:81:39:2b:0f:bb:16:3d:
         41:7e:8f:15:d6:15:95:eb:22:12:73:60:39:3d:b4:31:5d:6d:
         79:bf:75:1f:e6:51:d5:e9:a9:82:57:5e:a9:8c:46:ff:75:48:
         e5:f5:e7:4a:a4:43:08:71:0c:c3:05:ec:58:31:d5:6d:33:6b:
         60:7d:ea:7f:7f:45:67:f2:e0:c2:61:7e:39:5a:7d:8d:a9:ba:
         3c:b8:84:4c:01:ac:bd:5d:dd:f3:d6:ed:c3:20:74:62:3e:9d:
         be:98:6f:94:92:7e:e7:d9:22:d1:91:55:f6:1d:6b:aa:da:b7:
         9f:79:72:60:06:97:13:8d:70:11:8f:f4:85:7e:bd:5c:9b:40:
         8d:dd:bd:61:11:4b:62:bc:9d:27:9b:54:aa:5e:59:01:fe:a0:
         18:ce:60:8a:be:53:6f:6c:7a:66:95:7b:4a:e6:a8:5f:df:61:
         25:46:07:88:0d:4d:c7:cd:80:1d:07:99:6b:01:0b:9e:8c:95:
         3c:23:b4:59:01:85:8e:51:65:9d:3f:67:8e:a2:c5:dc:fa:00:
         eb:b1:3d:bc:f4:01:da:d7:65:15:5c:0d:4f:01:c5:bc:1a:d3:
         b9:fc:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:11:35 2026 by rpki-client