Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bc7c375-12f1-3a91-9ac5-50ea1cf6168a.roa
File:                     2bc7c375-12f1-3a91-9ac5-50ea1cf6168a.roa (raw, json)
Hash identifier:          m2UWy0Uyyn6p61X4DfuDIMg35kdQiwHhd9Wp3G16Cag=
Subject key identifier:   A0:DB:B5:76:21:24:00:76:F3:2C:44:1A:EF:04:DB:94:E2:3C:6E:EC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F51D294056B3A359F44EE7670
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bc7c375-12f1-3a91-9ac5-50ea1cf6168a.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     275768
IP address blocks:        38.41.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:94:05:6b:3a:35:9f:44:ee:76:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=370f04c5-21f9-41d0-8c77-267a9f3969a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:81:d8:ed:aa:44:ef:03:1f:55:34:89:53:fc:
                    2b:c7:a5:9a:80:6b:fd:2d:af:9a:6a:5e:ad:44:78:
                    58:76:ab:13:9f:4f:39:1b:ac:73:06:2f:95:bb:89:
                    a4:1e:41:79:00:82:10:8e:6b:3e:4d:e4:00:4b:31:
                    f7:73:b4:7f:fe:22:93:49:f0:fe:79:aa:6f:4d:98:
                    da:8d:8b:9e:f9:73:0f:d1:0a:fa:4b:91:7b:d1:ec:
                    4b:5a:ea:c0:b0:f1:2f:d2:a3:df:88:f5:99:ba:2c:
                    23:1a:0b:9a:10:6e:33:ff:42:9c:fb:e7:cc:9d:6d:
                    73:68:33:01:82:ac:b3:17:34:b6:2d:54:26:11:0e:
                    92:e7:87:99:01:31:70:24:b0:3d:e9:80:dc:a4:ab:
                    33:13:7a:fd:68:3b:6e:ad:6f:16:f0:76:97:a6:41:
                    c8:33:08:f6:64:f1:40:09:8f:8c:53:b6:d7:b5:1b:
                    57:42:88:90:bf:3f:96:7f:11:6b:31:25:2e:9a:0c:
                    a6:21:40:ec:e7:fb:06:0c:ac:74:0b:39:03:11:93:
                    6d:75:c7:99:3d:c7:18:bd:54:1e:49:dc:d2:b4:53:
                    36:00:af:68:45:51:04:ff:c0:73:72:12:a4:55:9d:
                    0d:2e:06:3b:e6:cb:bc:86:0e:bd:ac:a9:32:c4:ce:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DB:B5:76:21:24:00:76:F3:2C:44:1A:EF:04:DB:94:E2:3C:6E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2bc7c375-12f1-3a91-9ac5-50ea1cf6168a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.41.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:73:49:ce:50:8f:a4:e9:4d:14:3f:cd:28:ab:f6:9f:d9:08:
         03:c8:7c:8a:f9:c0:fc:b1:2f:ae:96:69:d9:ad:2c:11:87:b2:
         57:2f:d8:79:03:6b:2c:9e:45:4d:8b:fe:74:e9:aa:5f:90:10:
         14:e2:6a:58:38:af:90:c8:b8:ae:bd:32:3b:9e:f2:41:d7:be:
         ab:3c:c5:d5:79:e7:90:e2:91:4c:73:f8:e4:79:0a:02:40:bf:
         0f:3b:ab:fe:f2:60:9c:68:cd:68:23:a7:95:ec:ed:02:82:7a:
         bb:7d:90:d4:45:b7:3d:ae:83:fe:79:45:25:54:38:e5:bc:f5:
         01:fa:9f:5a:20:3c:55:b9:d7:f3:01:59:8c:f5:4d:ef:45:20:
         84:e5:d6:90:3b:4a:33:4b:7a:02:21:78:46:ae:88:cd:c8:2c:
         90:0f:82:55:34:f2:a6:43:86:de:88:6f:1a:17:dd:6b:21:ca:
         6e:28:cd:a6:0e:c0:82:62:94:8d:98:ed:e7:19:7c:93:be:1f:
         08:d0:65:75:c1:2b:6a:46:d6:8b:7b:57:81:64:cf:1f:1a:ad:
         58:e8:f9:a3:d3:10:32:e5:82:73:80:c9:be:d6:ec:94:2d:0a:
         b5:bf:61:b8:05:c3:35:67:95:93:d8:b6:9a:d2:ec:6d:4c:12:
         e9:a5:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:03:38 2026 by rpki-client