Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa
File:                     1c61dbca-9697-3772-bedc-7110ec7888ea.roa (raw, json)
Hash identifier:          gFQA0qIkGrXkuYUW5LS6sDhO7KiuThTn0QXpMirg6Jg=
Subject key identifier:   01:B9:46:FE:67:E1:A1:F8:EB:CE:EE:54:90:64:15:5B:7A:D6:E2:1D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D2644CDAFC298DAB7E36450B0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     265622
IP address blocks:        38.158.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:cd:af:c2:98:da:b7:e3:64:50:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=a0bf84ef-bf29-4322-ad87-21f9df6f7826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:9a:04:a7:fd:39:71:f6:f5:41:97:63:d6:
                    9b:e9:49:fe:10:0b:bf:d2:a4:6e:77:0b:df:54:b4:
                    8d:af:55:5d:e8:ae:36:cb:ce:ea:1b:87:db:8a:3b:
                    5c:ff:48:b1:cb:70:7e:f9:80:8f:a4:f1:c6:33:6b:
                    1e:51:e6:b3:9a:03:83:50:24:b5:bf:3a:60:8c:2b:
                    22:fb:2e:4f:cc:b9:b4:b9:e5:51:94:a6:94:57:5b:
                    ed:a6:3a:89:b9:76:46:ba:ce:dd:86:8c:28:fd:bf:
                    3a:08:b1:17:d1:6b:b9:75:8a:16:0c:b2:90:fc:20:
                    e7:7a:d9:36:77:07:38:61:f5:3f:07:f1:ce:2e:aa:
                    ed:e1:0c:52:ea:b6:5e:59:f0:9c:29:16:75:3b:4d:
                    bb:85:87:e2:6c:07:74:d8:b3:5a:fe:c8:f7:e9:0d:
                    73:d7:75:e5:2d:33:05:dc:8a:f1:1e:c5:95:5d:95:
                    51:48:28:3d:5d:53:f4:67:bf:dc:6a:a0:7c:2e:27:
                    4a:bc:fa:af:c0:12:28:14:a3:d9:99:96:b7:ed:fd:
                    1e:50:e2:60:7e:80:94:57:3a:71:56:16:ba:87:60:
                    c7:a2:ac:a9:37:34:fb:e0:7b:b9:8f:8e:e1:13:6f:
                    db:a8:ae:b8:50:fa:ec:5c:1b:95:6a:88:c2:6e:db:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:46:FE:67:E1:A1:F8:EB:CE:EE:54:90:64:15:5B:7A:D6:E2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/1c61dbca-9697-3772-bedc-7110ec7888ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.158.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:20:ca:83:7c:43:61:fe:fa:ff:df:28:57:d2:ea:75:d4:4c:
         07:a7:9b:e2:83:76:c6:56:b7:01:7c:5c:d1:6e:06:52:37:64:
         0c:82:b4:6a:11:c8:30:fa:7c:6e:94:83:40:21:b6:65:02:49:
         d4:60:96:94:d3:7e:46:3d:cd:e0:d2:f6:31:e3:d9:52:69:ba:
         b6:48:be:4a:68:66:b5:db:9a:14:38:74:5d:b3:fe:45:03:67:
         ec:8f:87:91:68:b6:61:1e:ee:03:c1:79:c0:c9:e5:e7:9f:be:
         5b:44:b7:96:33:3e:68:b4:29:99:d0:fc:ef:c0:db:e7:b2:81:
         dc:af:8d:5b:62:f1:89:f7:fc:e3:a4:40:5f:6a:88:dc:e1:9a:
         91:72:13:69:00:c5:79:5d:2c:1b:04:6e:74:19:82:05:8f:22:
         8b:b2:39:61:26:7a:75:a0:a8:98:a2:a2:f6:d1:6c:a6:37:c5:
         4b:0e:a8:3b:0c:b0:f5:55:46:3f:f6:30:f1:0b:b5:ae:ac:ce:
         71:74:61:54:23:10:c5:8c:0d:ca:9e:5a:30:62:72:83:2a:ce:
         1f:10:43:e5:96:86:57:b7:2e:fc:e9:b3:5a:93:65:64:00:4a:
         b4:8f:87:75:1f:c0:45:81:53:7b:c6:1a:c2:da:4a:61:ac:be:
         72:80:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:25 2026 by rpki-client