Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/258397df-1698-313b-88d5-be0ce35aa8d7.roa
File:                     258397df-1698-313b-88d5-be0ce35aa8d7.roa (raw, json)
Hash identifier:          bqFcyX3OUaMaAnYBMyr9qIi8YuPZsFKrVVPuGPhLKqk=
Subject key identifier:   BB:63:44:71:8B:E3:5A:D2:06:4A:6E:C1:E0:39:0E:28:DB:6D:1B:16
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ECA8DD538991BFC3C10B4B780
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/258397df-1698-313b-88d5-be0ce35aa8d7.roa
Signing time:             Mon 10 Aug 2026 14:07:34 +0000
ROA not before:           Mon 10 Aug 2026 14:07:34 +0000
ROA not after:            Sun 08 Nov 2026 15:07:34 +0000
asID:                     214483
IP address blocks:        38.93.202.0/23 maxlen: 24
                          38.93.204.0/23 maxlen: 24
                          38.248.200.0/21 maxlen: 24
                          38.248.208.0/21 maxlen: 24
                          38.248.216.0/23 maxlen: 24
                          38.248.224.0/22 maxlen: 24
                          38.248.228.0/22 maxlen: 24
                          38.248.236.0/22 maxlen: 24
                          38.248.240.0/21 maxlen: 24
                          38.248.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:8d:d5:38:99:1b:fc:3c:10:b4:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 10 14:07:34 2026 GMT
            Not After : Nov  8 15:07:34 2026 GMT
        Subject: CN=5d0d8e91-6a5b-4f11-978a-03fbd98c8ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:18:d1:ac:14:2f:85:e5:e7:f3:b5:fb:11:
                    08:bc:cd:ac:0d:1a:58:47:cb:49:d6:ce:9b:38:c0:
                    7a:40:35:8a:bc:38:41:ab:60:9e:3d:c6:c3:94:cf:
                    22:1c:12:cb:56:dc:7c:95:66:c3:c9:48:c3:11:13:
                    45:0a:e2:9a:b4:40:d9:d7:dc:42:22:38:9a:50:c1:
                    a4:fd:53:a7:cb:f5:19:ca:b0:74:93:2b:5f:1b:3e:
                    c8:14:cd:64:7d:db:6b:e5:73:1b:b5:cb:59:ae:2f:
                    d9:0d:a9:43:52:dc:d0:27:e4:e2:a2:29:47:80:ff:
                    bb:3f:04:d1:2e:a8:9f:fe:d7:f1:07:89:c8:f2:e8:
                    4b:ea:24:a2:7f:69:c5:d0:01:04:c3:d9:b1:6b:6a:
                    79:8d:fe:78:c2:d1:d9:b2:0b:32:26:be:9b:07:70:
                    08:f1:9a:c6:73:4f:41:a5:7b:f9:28:ed:ff:a5:00:
                    9b:87:d3:13:35:2b:2f:f9:6d:60:4b:c4:4e:09:2d:
                    b4:3c:9b:76:fd:a7:7d:6f:b7:ff:fe:5e:78:90:f1:
                    ab:48:0f:43:dd:05:8d:53:b4:e6:8a:f0:1b:52:82:
                    7d:9d:5f:6b:e2:6b:4f:34:47:33:80:11:51:1e:86:
                    c0:58:c2:5f:0a:a8:66:3b:a2:bb:cb:91:07:e4:d6:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:63:44:71:8B:E3:5A:D2:06:4A:6E:C1:E0:39:0E:28:DB:6D:1B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/258397df-1698-313b-88d5-be0ce35aa8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.93.202.0-38.93.205.255
                  38.248.200.0-38.248.217.255
                  38.248.224.0/21
                  38.248.236.0-38.248.247.255
                  38.248.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:50:a4:45:aa:08:a8:37:32:09:2c:37:9e:70:0b:6f:20:
         b9:3d:07:85:fb:3b:ff:3b:0c:51:f7:48:84:e8:39:0c:a0:f5:
         a3:0f:39:6f:a1:07:ee:97:44:fb:0f:8f:7d:74:11:5d:03:a0:
         98:4f:02:27:db:e5:8c:43:ca:d0:fd:e5:06:24:bd:e1:c2:e3:
         67:c4:4f:4f:a3:04:4a:77:d0:e3:68:70:17:0c:e0:4a:c4:d0:
         a9:72:b5:16:5e:66:20:2d:fa:be:e0:f8:3f:7b:42:66:4d:6b:
         bb:8b:d6:cb:2b:ce:ef:a4:b1:b3:b0:e9:bb:f5:70:d5:4e:d2:
         44:35:6c:42:28:ca:8e:e7:3a:be:18:41:c2:d0:38:b2:1f:a3:
         ef:57:05:4d:15:79:e6:a1:15:18:26:df:48:74:f8:b9:68:85:
         e7:be:26:8b:85:9d:84:47:cd:2c:3c:58:19:8a:b2:d2:20:c7:
         54:2a:23:5a:79:6a:36:da:27:96:86:a9:78:57:2f:c3:76:df:
         bd:16:c1:d9:d1:a5:c6:71:97:0f:d0:cb:27:37:93:99:6b:8d:
         f1:93:11:25:40:95:70:1a:9e:ab:8b:57:00:94:2a:3c:04:77:
         d1:a7:f4:a4:84:7f:4d:36:66:46:52:cf:1b:fe:95:87:ba:42:
         85:7c:68:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:00 2026 by rpki-client