Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b929e63-5511-331e-b5ff-af9f3b465e98.roa
File:                     2b929e63-5511-331e-b5ff-af9f3b465e98.roa (raw, json)
Hash identifier:          XvyX5eqPvpM+hyq8HBIv4nTYbZGSAgBI7DR+wDvesLk=
Subject key identifier:   14:78:D3:4C:19:3C:F2:28:E3:18:F8:54:27:79:60:C5:23:8E:A8:49
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5A332036DE51D789E3D76080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b929e63-5511-331e-b5ff-af9f3b465e98.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     274306
IP address blocks:        38.130.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:20:36:de:51:d7:89:e3:d7:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=c874627c-7554-4f9e-aa8c-da854cf8c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:62:25:19:83:7d:36:f8:24:cc:5b:b1:0b:
                    1d:00:db:d8:89:51:5f:35:63:ec:36:8d:30:65:54:
                    62:89:e4:ec:13:19:11:ac:cb:44:fb:76:4d:96:74:
                    79:6b:dd:1b:31:1e:5c:a3:bb:0e:d9:2b:a6:14:9d:
                    f4:58:c5:5e:67:38:c8:76:00:37:6f:0c:98:af:7b:
                    d1:b9:70:dd:6a:65:22:ec:5f:b7:6c:5c:44:3a:96:
                    b1:ba:5b:1c:31:d5:c4:ee:30:00:35:32:9e:0d:bd:
                    73:89:f9:71:b7:fb:28:5f:25:92:af:ec:ea:02:66:
                    f8:a3:d9:cf:a9:00:34:d4:a6:ec:38:24:e0:e4:00:
                    e7:5f:7b:50:3a:78:b7:9f:ad:d7:d0:6f:8a:de:d0:
                    2d:0e:17:53:51:7d:87:40:f3:e8:39:c8:81:a1:cd:
                    6f:c9:58:2a:89:27:ce:41:2d:83:0c:2f:69:71:84:
                    4c:a4:cd:0e:8e:f8:11:25:ef:ac:d0:4a:38:a7:ac:
                    38:fa:98:54:9a:3e:87:f3:a2:dd:be:60:18:35:84:
                    ba:6c:ae:64:3f:c5:ee:90:bc:c5:1c:00:18:6e:ea:
                    73:c7:fa:00:7f:b0:e2:8c:9c:fe:cb:f1:ff:af:87:
                    79:47:98:6b:2c:a1:8a:2e:b3:43:11:78:94:7e:38:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:78:D3:4C:19:3C:F2:28:E3:18:F8:54:27:79:60:C5:23:8E:A8:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2b929e63-5511-331e-b5ff-af9f3b465e98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:d1:e6:1b:d9:5c:93:a2:11:f3:cd:28:0a:0e:d2:4f:8d:
         db:a8:a6:fd:f5:08:88:c8:5b:bf:63:2f:ab:5d:53:b7:1c:1c:
         8e:bf:e2:b4:5d:55:68:62:25:b3:50:1d:03:fc:dd:ef:7b:ec:
         1f:7f:b8:8d:24:a1:64:8c:55:29:31:83:18:ac:df:fc:1e:ac:
         47:a7:3e:7f:68:eb:e6:0e:af:ac:1f:51:ab:8b:af:08:b9:82:
         83:90:97:eb:2b:65:e2:94:68:8d:d2:72:bd:e9:f4:d9:69:62:
         5d:c2:28:1d:3d:0a:e2:df:a0:56:f7:e3:79:5d:df:94:4f:d3:
         25:ab:b4:c7:0f:e9:54:fd:93:17:b3:b8:e4:b9:46:88:c6:46:
         ed:65:ff:e8:74:c3:d9:31:65:46:c7:46:43:77:69:ef:dd:95:
         35:5b:f1:f8:0e:b5:ef:d6:f2:6e:69:60:1c:c4:05:77:2f:2a:
         0b:21:ff:b5:24:a0:8b:de:32:cb:ba:a7:8e:89:45:90:c9:b1:
         85:65:1e:67:eb:1d:27:ed:f5:d3:bc:e8:49:33:d5:a4:e5:ff:
         c2:ac:85:e2:9d:1e:9a:f1:d9:85:d4:66:6d:5b:49:53:d3:7a:
         84:24:0d:f2:2a:a9:fd:2b:d9:e1:e6:05:14:ea:e5:66:da:e5:
         0a:48:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:27 2026 by rpki-client