Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa
File:                     395742fa-6d45-3bf2-83d8-276b94855dc4.roa (raw, json)
Hash identifier:          rBFjiasRd/ZXmBapMkYW7FJcYH4uAuBTIEdXm95xtas=
Subject key identifier:   74:89:BF:4D:F6:3D:A4:40:D3:C4:5B:65:D7:07:F2:9E:F4:9E:4F:66
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EEBEC9F67CEDEB9B3DD298580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     11703
IP address blocks:        38.116.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:9f:67:ce:de:b9:b3:dd:29:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=6d55214f-7277-415e-8bac-e75d6b7667eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:b5:75:3c:34:8f:da:91:45:6d:0b:62:23:
                    be:9f:31:a2:ba:6c:b7:0e:af:99:83:95:6f:40:f9:
                    00:be:c3:9b:03:18:c1:20:48:09:03:4d:d3:65:d3:
                    fd:49:57:25:2f:24:2d:4f:c5:9e:25:68:62:47:8b:
                    e8:30:15:83:0c:b5:e0:3f:b0:b4:a0:57:38:c5:1a:
                    28:ff:9f:4e:65:4a:b8:91:4b:e2:68:eb:3e:1a:d4:
                    63:f8:de:b6:bd:3e:1b:19:77:14:eb:ab:c1:a6:63:
                    21:0b:b5:00:19:e9:8f:f1:7d:3a:fe:09:f1:d0:cd:
                    21:30:5e:98:22:a2:bd:11:1c:d9:30:5f:0f:b9:fe:
                    8f:95:41:86:f2:0b:0f:f7:3b:11:02:ea:18:cd:b4:
                    d1:01:26:e6:f9:a7:ae:84:bf:f0:39:c2:59:12:8d:
                    ec:d5:d7:a9:e7:e7:f1:64:b1:ea:4f:c3:68:7d:b6:
                    c2:12:c6:53:4a:b7:f5:ea:65:4b:2f:95:50:43:45:
                    66:3a:b2:84:ce:80:8e:69:10:63:e1:a8:41:88:f0:
                    9a:72:10:52:cd:e7:03:26:37:0e:16:db:1a:3a:fe:
                    11:4f:4d:d9:24:7c:aa:d7:a7:79:95:9c:5b:35:19:
                    f6:c6:ac:1a:b5:75:89:05:3a:95:01:8e:61:e6:8e:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:89:BF:4D:F6:3D:A4:40:D3:C4:5B:65:D7:07:F2:9E:F4:9E:4F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/395742fa-6d45-3bf2-83d8-276b94855dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.116.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2c:57:f0:d0:f5:d6:da:9c:40:e0:89:72:a4:fb:b6:fc:9d:
         24:31:e1:15:a5:b9:89:2b:1f:e2:c4:69:74:74:b6:6f:d4:13:
         e1:f5:78:26:98:ed:f9:8b:b4:fe:93:2d:d7:03:30:06:03:26:
         19:36:6b:51:4f:34:2d:27:e6:40:18:a4:7b:02:a9:c3:90:8a:
         5f:4c:c1:99:9b:d4:b5:0f:04:0a:d1:59:77:59:c5:2c:5b:83:
         16:9c:5c:0b:ec:a4:65:d5:f7:bf:7a:2f:ed:a6:f0:76:8d:d0:
         86:1a:7b:33:50:39:6c:7c:f6:cc:fe:ff:1e:ce:c7:52:67:1b:
         34:97:7c:f9:e4:aa:9d:7e:31:19:ea:57:b8:37:c6:a8:1d:17:
         a2:bf:90:73:df:64:d0:3e:85:9c:44:6b:9d:ef:6e:57:64:fa:
         81:a6:4c:46:5a:bc:20:fb:ad:c2:48:66:b5:4e:65:71:17:4c:
         41:48:98:4d:42:25:e2:e4:6f:a6:8e:4e:50:f1:c9:ad:19:e3:
         fb:bc:ee:d6:16:63:3e:98:b5:40:7d:94:a0:41:c4:83:f2:c5:
         8f:d7:1b:b1:18:33:b3:e5:73:7b:04:3b:59:6f:20:f4:e2:30:
         96:4f:48:ba:08:d9:b4:26:1b:fc:53:f4:e9:4d:4a:10:88:e2:
         5f:00:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:29 2026 by rpki-client