Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e8dc12-c223-3622-be41-ad3511a25f60.roa
File:                     38e8dc12-c223-3622-be41-ad3511a25f60.roa (raw, json)
Hash identifier:          T0SwC7GOnooPcFy2IZPa/SW7N6bt7yoFI4F75FfBLJw=
Subject key identifier:   63:12:BB:9D:2F:B7:C1:37:D5:50:7F:DC:2E:CD:24:F1:7E:67:70:FA
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F1040095FD1FCF8895ABC7480
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e8dc12-c223-3622-be41-ad3511a25f60.roa
Signing time:             Fri 04 Sep 2026 13:17:25 +0000
ROA not before:           Fri 04 Sep 2026 13:17:25 +0000
ROA not after:            Mon 26 Oct 2026 14:34:48 +0000
asID:                     154123
IP address blocks:        38.130.253.0/24 maxlen: 24
                          38.131.242.0/24 maxlen: 24
                          38.190.148.0/23 maxlen: 24
                          38.246.178.0/24 maxlen: 24
                          38.246.196.0/24 maxlen: 24
                          154.51.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:40:09:5f:d1:fc:f8:89:5a:bc:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  4 13:17:25 2026 GMT
            Not After : Oct 26 14:34:48 2026 GMT
        Subject: CN=e95ca2a0-5da9-470e-9dbd-64e42258ed88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:f1:99:60:36:9a:e7:50:2a:e0:5d:b6:fc:
                    dd:06:ba:ff:34:83:e4:e7:b3:f1:72:b2:23:c0:9a:
                    d9:2f:9b:a2:ff:ba:c2:a2:17:2e:8e:97:dd:45:83:
                    af:2c:93:5c:ec:f9:5f:f1:e7:e6:9d:ea:c0:78:46:
                    8b:ce:58:08:a2:e5:79:9d:e8:ce:71:2a:d6:ea:17:
                    81:ae:73:0a:a6:5c:6e:2e:2f:9b:df:38:80:0e:32:
                    9b:91:3c:01:77:43:de:8d:6d:8b:00:fc:cc:09:87:
                    1c:34:b9:8b:1c:08:0a:18:8c:30:fa:f8:6c:28:47:
                    86:99:3e:70:e9:64:73:fd:6d:64:c7:51:e7:a7:f2:
                    ac:48:a4:86:9a:77:5f:1c:cb:ce:8e:cc:7e:6a:f0:
                    f5:75:48:cb:cb:b6:44:97:21:5f:3a:01:83:4c:d3:
                    32:84:21:9f:aa:e2:c0:a4:74:42:77:83:37:73:e2:
                    96:e9:0f:15:e3:f0:22:6f:ec:2f:77:1b:7f:a2:e9:
                    c7:d2:4c:0f:8f:87:da:3a:bf:6c:a6:6f:35:8f:27:
                    88:57:12:5e:4e:1e:3c:b9:83:92:5f:35:10:88:37:
                    46:7e:f0:a9:ac:6c:9b:0a:86:d8:c3:39:14:ab:66:
                    57:51:20:89:1a:5f:35:4d:05:43:42:27:88:a2:23:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:BB:9D:2F:B7:C1:37:D5:50:7F:DC:2E:CD:24:F1:7E:67:70:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/38e8dc12-c223-3622-be41-ad3511a25f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.130.253.0/24
                  38.131.242.0/24
                  38.190.148.0/23
                  38.246.178.0/24
                  38.246.196.0/24
                  154.51.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:9e:53:6c:db:3f:03:2b:c7:54:1d:6d:66:74:fc:3f:39:34:
         24:a2:ce:2b:e3:80:79:ec:0b:3a:29:bf:9c:5f:e4:07:1d:0d:
         0e:67:c2:e0:f1:36:e0:de:32:20:4d:37:37:21:36:da:8a:51:
         ea:4b:3f:3f:06:89:19:45:36:57:5c:05:91:42:f1:ca:d1:54:
         49:ad:6b:19:e3:f8:18:12:01:e7:3f:61:fb:d8:de:fd:b7:69:
         65:cb:63:04:3f:af:0b:09:ef:e3:21:e0:18:42:9f:fa:2f:ed:
         cf:16:54:62:1d:30:39:5f:b0:9f:4d:d8:39:00:ae:33:de:20:
         7c:f8:f2:ec:bf:dc:33:90:89:e6:d2:b8:a3:cf:3b:79:7d:7f:
         2c:09:4c:36:a6:f6:e5:af:66:1e:76:fb:8e:26:43:4e:4c:ae:
         bc:8a:8d:e6:35:96:eb:a2:a6:f7:05:0a:04:3e:96:83:3e:6d:
         e8:65:fe:90:f4:84:f4:d8:b0:0d:62:3f:17:a1:da:5e:98:d1:
         46:93:ec:d7:bf:8a:dd:ad:06:02:55:a3:79:e8:f4:ee:c5:42:
         50:91:72:20:da:88:0e:dd:92:e7:11:d1:49:e0:7b:8e:45:89:
         83:72:52:66:e2:88:cd:56:32:4c:8f:7c:36:3f:a6:a2:33:29:
         76:e9:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:19:43 2026 by rpki-client