Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa
File:                     39fb6c32-2015-31e3-872d-5ead450b9958.roa (raw, json)
Hash identifier:          jvSwhMJILaEWJ51LEdNtlZYRMzijI4QKBKgOca0fCuA=
Subject key identifier:   00:01:2C:0D:9B:B7:5F:79:0A:AD:62:90:9B:BC:0E:BA:C8:5A:6C:64
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F89A84F480226D6DCA6AF5D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     274070
IP address blocks:        38.58.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4f:48:02:26:d6:dc:a6:af:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=af1b37ab-18c6-455c-90c6-e14236031502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:cc:f0:01:ce:55:07:4f:0d:24:6c:1f:33:
                    c0:0c:f2:b5:2e:7f:71:d8:3a:1b:72:d7:af:fc:b9:
                    6c:85:4b:b5:cb:93:bb:c6:fd:18:b5:a0:36:30:a2:
                    85:00:ce:98:ce:8d:c3:a1:1f:49:ed:a1:2c:fd:14:
                    c7:6f:a4:9e:9e:e5:78:ef:ac:a5:ef:4e:bd:57:bc:
                    a0:dd:70:34:55:6c:bc:e1:cf:5e:40:5b:a6:77:58:
                    0e:f2:49:b8:13:dd:61:78:5d:3b:70:56:e8:16:5a:
                    a7:a7:cf:14:48:ba:a3:4c:8d:dd:6f:ba:fc:bc:4f:
                    d8:9d:b5:ea:53:2a:4a:a7:04:7a:94:0b:e1:a0:f9:
                    b7:33:94:10:87:3d:8b:6c:8c:2e:9b:1c:14:d3:b1:
                    1f:17:72:19:db:5b:ce:a9:af:4a:ae:1c:2f:90:e8:
                    a0:be:25:ae:34:d9:6e:66:54:fd:a0:cb:5b:25:90:
                    98:71:b6:0f:d6:37:c5:ab:18:d9:f2:d0:c2:4d:25:
                    02:8b:32:2d:4d:40:44:55:1c:75:1a:39:cd:a6:76:
                    06:b5:e4:14:72:6e:4c:fd:cb:d0:42:f7:55:a1:4b:
                    c7:ed:ba:10:ed:9b:bd:44:bc:6b:c7:77:d7:71:73:
                    a1:3c:ae:d9:3d:b4:d6:1e:73:56:4f:7b:0a:ca:07:
                    6e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:2C:0D:9B:B7:5F:79:0A:AD:62:90:9B:BC:0E:BA:C8:5A:6C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/39fb6c32-2015-31e3-872d-5ead450b9958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.58.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:00:f4:dd:4c:50:d9:d1:08:b6:59:d5:8c:bb:66:52:7f:
         9b:ad:95:a8:bb:c4:68:f0:bd:3c:f0:db:9f:72:bd:91:34:b8:
         7f:4e:fe:29:14:54:28:38:40:09:72:95:89:de:35:08:4d:e0:
         7e:dc:50:55:b5:67:a1:9d:86:1b:ce:2a:85:be:b7:d4:57:51:
         7a:f4:01:7e:ce:d6:88:8c:4c:a9:f4:99:56:00:5f:7c:30:11:
         35:0e:4a:2e:a9:2c:98:04:90:86:98:1e:7c:a5:55:36:f1:1f:
         ce:f2:4f:85:f4:a0:37:e7:d2:7e:e5:33:b2:b3:12:6e:a8:49:
         b2:10:11:44:3d:37:9f:2f:22:23:d9:bc:a6:84:56:18:a0:84:
         7e:42:c1:94:a2:ff:1b:62:3d:d5:bf:15:43:db:f6:24:bb:41:
         98:d4:39:3a:e9:f8:e6:df:2b:29:0f:ec:77:d7:d3:c8:d2:2b:
         ce:cf:1c:62:d4:62:40:49:2e:93:b2:a8:78:5f:ff:03:7e:74:
         27:50:1a:28:5d:a1:b1:1e:fb:2b:bb:3c:4f:01:62:04:04:5c:
         78:03:6d:e0:f1:38:48:b0:3f:2e:78:45:84:dc:c5:88:0c:0e:
         a8:40:10:b4:ac:3c:a4:65:f0:dd:15:43:fa:4d:18:66:f5:5b:
         f9:16:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:03 2026 by rpki-client