Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c1a8f2e-7521-31b9-a874-95e4e7843fbd.roa
File:                     2c1a8f2e-7521-31b9-a874-95e4e7843fbd.roa (raw, json)
Hash identifier:          ghbDGqVishwaBqywG+do9B+dDzVtQchj/5LZ6yeo+No=
Subject key identifier:   87:DB:F6:8A:5D:5D:D8:3C:CE:FF:4F:40:87:31:8D:8A:AD:46:B1:F3
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1066927EF2E2016559162180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c1a8f2e-7521-31b9-a874-95e4e7843fbd.roa
Signing time:             Fri 04 Sep 2026 14:35:03 +0000
ROA not before:           Fri 04 Sep 2026 14:35:03 +0000
ROA not after:            Thu 03 Dec 2026 15:35:03 +0000
asID:                     205544
IP address blocks:        38.246.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:66:92:7e:f2:e2:01:65:59:16:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  4 14:35:03 2026 GMT
            Not After : Dec  3 15:35:03 2026 GMT
        Subject: CN=3c3664c1-0922-4a57-8c1b-5cf6ae6232fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:20:d8:35:4d:74:7f:51:b8:ca:12:bd:b7:
                    f8:28:7b:9d:ee:ee:ea:8e:46:6f:1e:00:27:be:d6:
                    64:91:69:7e:35:c3:d2:f5:7f:af:50:0e:a0:1f:4f:
                    5f:74:20:97:a0:9a:ba:85:8f:fb:29:24:16:74:a1:
                    5a:51:94:77:24:16:b9:0a:c5:d2:61:dc:c6:d1:1e:
                    63:af:f6:54:23:c4:a3:03:98:24:f3:43:94:0a:da:
                    b9:6a:bb:99:b6:32:ee:b3:82:d6:66:5c:0e:66:42:
                    a5:53:a9:f5:eb:2f:01:c8:17:25:e0:43:e3:67:4f:
                    73:b9:51:31:83:95:40:79:73:49:96:a5:9a:f9:8c:
                    5d:10:a1:aa:37:e4:48:ad:e1:e6:2e:20:8e:83:cc:
                    cd:28:54:54:09:88:61:20:b9:a9:3b:7f:9a:8d:df:
                    47:c7:bb:ca:ce:25:8d:05:9a:e9:6d:30:2c:0c:9b:
                    75:69:2b:4f:42:1d:b5:f4:9e:dc:45:e5:a6:55:83:
                    86:21:9d:7f:fe:38:22:bc:d9:90:35:aa:af:9e:12:
                    06:7d:ec:66:df:fe:57:bb:cf:f6:97:be:3f:e0:6a:
                    a0:66:f1:a7:3b:85:80:a8:78:1a:42:4f:5b:06:16:
                    62:16:8c:49:53:56:4c:e0:b4:af:62:5e:1d:a7:ad:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DB:F6:8A:5D:5D:D8:3C:CE:FF:4F:40:87:31:8D:8A:AD:46:B1:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c1a8f2e-7521-31b9-a874-95e4e7843fbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.246.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:6c:b3:ed:8d:82:cc:a8:94:c2:81:d3:d5:54:88:50:68:
         8b:28:fa:ad:6d:1a:87:f5:75:fd:dc:2e:4b:75:8f:2d:4e:fe:
         2a:bd:5b:2d:45:6d:fd:20:e8:a7:57:29:5b:fc:e5:ff:59:55:
         b2:2b:04:e3:0f:7f:18:5d:c2:70:09:cd:d9:4f:09:92:fc:6b:
         61:ec:35:b3:be:1a:1b:a2:f5:49:a1:80:24:85:b5:8e:23:fa:
         1b:90:e2:0e:25:d2:84:f5:a0:7d:c8:9a:e5:97:2a:f1:dc:0e:
         f3:6d:a0:92:88:49:39:3c:a9:6f:98:32:f8:39:f0:ab:b9:05:
         8a:a8:ef:12:4f:5c:b3:7f:8e:51:c6:31:36:34:5b:66:fa:11:
         93:74:b7:96:30:f2:22:bc:bc:6b:7a:63:8a:1c:de:35:6f:a1:
         cd:df:15:5a:e9:49:03:3b:34:80:20:7a:0b:e3:e9:9b:4b:79:
         1b:43:c9:00:80:51:e3:69:bc:e6:8e:3d:40:25:8b:b0:20:83:
         d7:46:3d:c0:e5:33:d6:95:01:6c:3d:05:b0:30:2d:81:82:32:
         35:f7:ba:64:a1:c8:6d:55:1c:5c:83:d8:66:b0:04:a5:14:8e:
         ac:38:1f:84:92:72:ee:6c:ed:6b:29:ff:cd:73:b5:d0:03:cc:
         59:79:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:28:03 2026 by rpki-client