Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
File:                     2b3d568a-37d1-3dc9-8848-b06220f406d6.roa (raw, json)
Hash identifier:          5Q+o166d6sKVbVL4dXQAZAi7rU9uS6tNswhzOKCqA1M=
Subject key identifier:   10:90:5A:10:07:FD:94:3B:FC:C5:FF:2A:73:94:56:93:E4:34:6E:BF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DE2B5F58C99C9BA6F088C7760
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     273154
IP address blocks:        38.134.172.0/24 maxlen: 24
                          154.43.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f5:8c:99:c9:ba:6f:08:8c:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=ce80bda5-0ac5-48ea-8236-ef130d74758e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:72:69:9b:82:78:fd:d6:90:d7:59:80:7d:
                    71:fe:7d:8d:11:ac:87:27:0e:51:7b:a0:75:cc:21:
                    e5:e1:80:d3:d0:54:ab:cf:99:ec:08:19:d5:ee:f0:
                    4c:1a:34:1a:89:fd:49:6c:ca:18:2a:e4:67:38:df:
                    80:a3:2c:07:26:f1:71:44:99:c4:e9:1f:cc:04:7d:
                    a0:d2:d7:4e:c9:d1:f9:54:48:02:d8:cc:7c:8c:1e:
                    e9:60:d7:aa:9e:72:52:4b:62:b8:e3:e7:97:c5:51:
                    cf:8e:b3:0f:e0:9b:a7:b6:12:c5:ad:a5:cb:7d:fa:
                    0f:6d:64:b1:11:5b:d7:82:a3:88:41:63:2d:75:60:
                    c2:a7:7f:7d:a8:fe:3a:3b:c8:77:14:55:11:05:80:
                    e2:4a:3a:38:4b:08:36:e6:63:fe:73:a3:13:cc:4b:
                    ba:3b:d3:ca:18:d6:5e:4e:04:ca:6f:d3:85:07:bb:
                    06:a9:e1:a9:86:21:ff:e9:ae:ab:5c:e0:ab:0b:cb:
                    8a:10:98:76:b2:07:72:3d:13:68:1c:bd:49:16:56:
                    db:32:03:57:59:c1:02:8a:c7:cb:ec:e3:31:d1:3b:
                    bd:76:64:0a:9f:01:74:ee:77:64:c1:ce:d9:32:c3:
                    ba:db:d2:39:f2:22:89:25:e0:dd:8e:26:36:f2:bb:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:90:5A:10:07:FD:94:3B:FC:C5:FF:2A:73:94:56:93:E4:34:6E:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b3d568a-37d1-3dc9-8848-b06220f406d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.134.172.0/24
                  154.43.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:fc:78:51:28:e9:d7:c9:45:8d:74:61:b9:b0:68:28:82:
         9c:47:18:ab:36:6b:32:96:6d:30:10:20:fe:fc:fc:96:a9:4a:
         cb:e4:63:08:be:9a:ea:fe:bf:6b:01:a7:d6:0c:87:cc:3a:7f:
         89:81:0d:0f:9e:13:95:3f:f6:f6:a9:22:5a:e7:44:3a:10:37:
         85:89:dc:61:6d:33:7a:83:ad:b7:ad:1b:04:5a:cd:59:6a:53:
         f5:2a:1a:f9:a2:21:38:2c:b0:55:8b:36:6a:8a:44:c6:95:d0:
         fb:65:88:ac:35:cf:a2:86:f2:f4:23:9b:d8:c4:bf:21:97:ae:
         2c:c6:67:77:5f:36:ce:9d:9f:ab:6c:cb:c9:d8:89:a2:c4:e4:
         c6:ca:3d:03:aa:d6:58:93:f2:c7:e3:fd:98:61:d8:93:53:97:
         ff:6d:b9:a0:9d:46:c4:e3:b0:79:2f:aa:48:1b:6d:e6:e3:16:
         b8:c6:0e:e8:de:b7:3b:41:f3:73:a4:bf:fe:47:7f:e3:a9:15:
         cf:da:82:09:7b:76:27:ea:fc:78:04:44:ba:ab:e8:46:b4:fe:
         30:00:14:7d:bc:20:c9:eb:cf:e8:9f:28:7b:d5:fb:20:b8:54:
         6b:75:8a:b0:16:72:12:d2:c9:38:c8:6c:75:34:b7:88:7b:0f:
         72:ff:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:38:59 2026 by rpki-client