Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b0c6f7a-e5d1-3851-8787-573430956f6b.roa
File:                     2b0c6f7a-e5d1-3851-8787-573430956f6b.roa (raw, json)
Hash identifier:          PY9SaOG6WyHHLGMVKGHemdJLIBJ/NBYIjlKV4heZth0=
Subject key identifier:   96:FA:C8:72:4C:86:57:1E:BB:50:6C:06:13:47:80:77:33:EE:FC:B0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ECA6C6A466918B143C4A1B5B0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b0c6f7a-e5d1-3851-8787-573430956f6b.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     266853
IP address blocks:        38.210.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6a:46:69:18:b1:43:c4:a1:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=3a2b4663-fc13-4fd3-b557-417f20aaf2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:e0:3a:8a:3e:50:9d:d5:8d:f8:07:7b:ea:
                    39:59:1d:3d:e0:d5:8b:e0:5e:6d:f9:77:3c:40:b7:
                    c8:91:9f:e4:08:4b:40:19:62:a4:e8:ac:64:89:21:
                    d9:21:df:2a:9b:2a:5f:4f:9a:a7:15:8d:b3:85:85:
                    41:59:d3:c8:75:c9:15:27:66:58:60:39:fe:e6:64:
                    9f:40:54:15:a5:5f:f7:1e:c5:fb:fd:7d:58:f4:a2:
                    a7:6d:d7:00:a2:1c:11:8c:a7:e0:c5:0a:e6:dd:e5:
                    46:eb:37:ef:36:59:4f:c6:42:29:3e:e4:a4:41:e1:
                    c3:59:56:09:9a:19:de:f2:2d:00:70:1e:97:28:37:
                    49:19:2f:bb:a5:12:c6:95:05:86:23:fc:e7:ba:30:
                    2b:ac:bf:3c:f6:2e:40:96:a4:ea:f8:e6:a2:b9:32:
                    3f:da:cd:d7:1d:e2:68:89:74:c4:16:b8:c1:9c:67:
                    e7:44:26:c4:22:97:f2:69:25:c3:a5:95:95:8c:da:
                    bb:2f:6e:c8:18:98:18:a8:d0:d6:ea:25:1c:b0:d5:
                    a8:a9:52:e0:c2:6e:0a:b8:9d:27:ba:aa:0f:4c:89:
                    2b:7a:3f:f5:84:54:c1:d3:6f:10:8d:b6:66:fb:07:
                    bb:6a:f5:44:8a:53:8b:a7:c6:6c:53:71:92:4b:f4:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:C8:72:4C:86:57:1E:BB:50:6C:06:13:47:80:77:33:EE:FC:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b0c6f7a-e5d1-3851-8787-573430956f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.210.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:2b:ca:b8:76:4b:ad:41:c5:ca:01:b7:d8:e5:7d:f2:91:
         2c:ba:4b:eb:fd:72:3f:f5:7d:3b:5c:17:cf:1d:de:48:e6:88:
         e5:c1:8d:2d:34:0e:48:ee:51:92:ca:2a:f8:a1:bb:57:ea:8c:
         31:45:77:a4:3f:0c:dc:fd:a6:e8:7c:d3:c2:1c:06:80:33:c5:
         2c:c2:04:9f:cf:90:0b:f1:af:9b:95:fd:f8:b9:fe:a9:c4:26:
         60:e2:06:cf:82:47:b0:a1:10:e5:15:36:e2:db:4f:4b:b0:31:
         af:f9:43:81:61:04:f8:1a:48:8e:1a:47:cd:42:c1:33:62:eb:
         e5:e3:9b:9c:5d:02:05:d9:46:c9:bb:b0:2d:e8:d0:e4:bd:65:
         8a:e3:c1:17:bb:32:e5:60:36:a6:4f:cb:0c:d9:b5:a1:73:55:
         3d:d3:09:42:3e:98:90:a1:92:86:4f:38:3f:41:f8:b3:48:80:
         8d:5c:5c:cd:b8:49:e3:97:54:3f:32:26:a2:76:af:f1:df:a1:
         25:69:57:3e:30:5f:30:9f:c7:70:ef:9d:27:df:3a:d0:2b:99:
         7d:de:c4:f5:f6:13:09:f4:5a:76:45:a1:d3:7f:5b:94:85:04:
         92:f3:52:c0:5f:50:16:29:5b:8d:75:c1:75:c7:28:5c:0f:43:
         d2:66:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 15:58:42 2026 by rpki-client