Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa
File:                     2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa (raw, json)
Hash identifier:          Z8Cay1lLu5l+JSvm1oOEfa6nmVRDvBO6AYY4WylQdzQ=
Subject key identifier:   6B:E3:CB:03:DF:30:FE:5A:3F:2A:09:C0:B6:FA:84:AF:E6:F6:24:91
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DFC3DBC7CC28E8C16A80F5CD0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa
Signing time:             Thu 28 May 2026 16:29:40 +0000
ROA not before:           Thu 28 May 2026 16:29:40 +0000
ROA not after:            Wed 26 Aug 2026 16:29:40 +0000
asID:                     0
IP address blocks:        38.137.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:3d:bc:7c:c2:8e:8c:16:a8:0f:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 28 16:29:40 2026 GMT
            Not After : Aug 26 16:29:40 2026 GMT
        Subject: CN=a09ac315-8198-44c1-b1e9-87074a75dfe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:d1:43:c3:86:bf:48:0d:94:4a:e9:92:ed:
                    2b:95:e1:ca:97:bf:c3:d0:9f:36:39:86:b0:fd:97:
                    7e:3e:fe:2f:64:03:f8:68:fe:96:c4:5e:48:a9:f6:
                    b0:18:f0:f7:b9:78:fb:b6:18:04:2b:54:2d:60:e4:
                    2a:77:d8:27:28:15:03:89:7f:b1:8b:37:96:d8:aa:
                    e1:b4:20:b5:a1:60:18:6f:ce:95:c0:c2:eb:a1:c0:
                    99:3e:4f:46:ac:ef:d4:0b:92:63:e8:e9:92:c0:5f:
                    e6:60:47:31:55:6a:03:1e:54:d9:fe:07:7c:da:ad:
                    87:56:8f:5a:79:f7:42:d1:54:dc:a3:6f:83:c7:8d:
                    72:c1:72:fb:17:19:3f:63:8c:5c:b5:df:57:23:83:
                    30:06:36:1c:59:5e:02:3a:c0:17:ec:3d:37:16:2c:
                    10:e6:41:44:56:2e:00:43:74:6e:e4:50:f7:bd:f6:
                    62:4a:41:51:76:73:ea:e0:e4:84:0c:c1:99:73:e6:
                    38:cf:cf:70:80:3a:4d:e6:b5:ab:3e:b4:47:4a:25:
                    3c:c8:a1:37:1b:f7:35:dd:20:b5:a4:17:2b:22:0a:
                    d7:fb:11:e9:cd:45:a9:c4:d4:f6:77:e2:39:d1:54:
                    2c:9a:bb:07:08:0f:65:bf:5a:37:1d:a8:08:2f:db:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:CB:03:DF:30:FE:5A:3F:2A:09:C0:B6:FA:84:AF:E6:F6:24:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2e37763d-10a3-30be-9cdf-ec5055d05fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.137.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:cc:e6:0a:bb:f3:63:b9:77:6e:d9:c6:0f:89:e3:31:e0:a5:
         c7:fd:5c:4f:e4:00:f7:d8:2f:3b:69:1c:d7:9d:87:01:f6:75:
         c0:74:7e:1b:8d:3c:46:45:b3:a0:4c:26:fc:e3:fa:8c:df:f0:
         4c:4e:16:34:b5:1a:3e:d4:41:4a:41:1c:3f:0c:4d:d5:73:b7:
         03:04:45:03:27:f0:4b:d6:12:d8:69:ef:23:7c:81:16:dc:6b:
         97:fd:d5:c0:09:fd:4b:ef:52:36:b4:bf:f8:6c:7c:84:4b:07:
         2a:d1:1c:15:30:68:87:8a:6c:1b:b5:4d:4f:e2:bf:32:ff:ee:
         ef:b1:dc:d6:cd:c8:92:a6:31:2e:66:0a:59:95:16:0e:07:43:
         2e:bc:e4:46:04:19:1e:11:c4:4c:6f:ff:f8:28:83:00:03:7e:
         e1:5c:4b:2b:14:65:cd:92:fb:c2:9e:27:75:b5:81:e8:dd:fe:
         80:a7:de:e8:8e:60:c9:61:45:bc:99:32:ea:e3:8c:ba:96:01:
         b6:94:1b:20:87:96:62:b0:a0:aa:9a:4f:3c:a7:af:db:f5:63:
         24:61:82:07:cb:e4:19:dd:6d:2c:66:14:38:fb:0a:0a:fc:c7:
         c6:3f:f2:c1:84:f9:ed:94:9f:e6:d3:16:25:a7:85:79:3a:de:
         a2:69:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:00 2026 by rpki-client