Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b326b6c-1415-35c0-8749-a08d5b944edb.roa
File:                     3b326b6c-1415-35c0-8749-a08d5b944edb.roa (raw, json)
Hash identifier:          DKIHYvW1Ni32sZ9+abEdcCcKvIarNJjN1iXfOxfCA1s=
Subject key identifier:   54:9E:90:2D:84:69:C7:AE:59:5D:43:AF:2A:C6:A8:FA:5A:E3:57:3B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E2E5540D3AE8814DC27792A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b326b6c-1415-35c0-8749-a08d5b944edb.roa
Signing time:             Mon 15 Jun 2026 15:07:28 +0000
ROA not before:           Mon 15 Jun 2026 15:07:28 +0000
ROA not after:            Sun 13 Sep 2026 15:06:46 +0000
asID:                     37575
IP address blocks:        38.41.80.0/21 maxlen: 22
                          38.71.124.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2e:55:40:d3:ae:88:14:dc:27:79:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 15 15:07:28 2026 GMT
            Not After : Sep 13 15:06:46 2026 GMT
        Subject: CN=667e95f9-041d-4a59-ac50-57a3e21de7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:c0:83:06:42:71:ca:ef:53:66:63:f7:58:
                    69:97:90:bf:06:28:88:02:c5:50:ff:14:0d:b8:09:
                    6a:f4:85:c7:29:8e:72:d6:1e:13:c5:f9:93:35:1a:
                    11:ca:98:7c:df:38:02:f9:7c:28:0a:a7:84:e1:ec:
                    ed:40:87:79:29:70:83:fb:05:05:2e:eb:d3:8d:47:
                    41:c2:9a:df:45:ca:0d:6d:6d:14:b5:8b:ce:5f:37:
                    2f:e4:9e:ce:f1:90:95:f5:38:1a:32:07:7b:31:3d:
                    01:ac:7f:fa:64:a7:7c:30:59:fd:84:59:6b:37:b6:
                    da:09:19:1f:38:7e:7b:33:c3:2c:5a:05:9c:00:67:
                    2a:d9:5c:80:90:fb:2a:6c:d7:88:75:ed:2c:c8:df:
                    97:fd:71:24:1c:a9:70:18:47:cc:30:72:b0:13:19:
                    da:fe:4f:97:a0:9c:bc:17:f5:66:b7:9a:3b:a8:60:
                    9c:e2:be:17:2b:3a:a4:f4:10:6c:90:1a:40:b4:ae:
                    88:b6:c1:70:a5:66:26:b0:09:ff:97:71:73:7a:26:
                    3f:34:42:c8:90:f6:7e:e4:ec:63:f3:df:c5:f0:ff:
                    c6:bd:98:ca:14:79:b5:e9:69:ec:e4:71:c1:8b:7e:
                    d6:6f:0b:d7:cb:83:f7:3f:b1:a8:8c:a5:74:d8:60:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:90:2D:84:69:C7:AE:59:5D:43:AF:2A:C6:A8:FA:5A:E3:57:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b326b6c-1415-35c0-8749-a08d5b944edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.41.80.0/21
                  38.71.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2f:b6:b9:a5:07:a2:e8:61:a1:3d:b7:bc:2e:0d:03:aa:59:
         b5:c7:5e:34:42:33:a9:fd:0c:ba:98:23:84:87:f0:55:c5:c6:
         d9:87:f9:4d:27:49:94:3b:6f:5a:e5:41:4a:7a:02:10:5f:8e:
         5e:6a:4e:6f:e8:59:9f:54:09:ae:e5:a8:b2:fc:08:26:92:d9:
         f5:88:09:b1:3c:59:6a:82:ab:17:cc:4f:f7:72:7f:cb:f3:83:
         ed:7b:da:47:04:7b:39:68:0d:88:0f:14:0e:8d:cb:ce:ce:a0:
         b6:ad:98:85:aa:a7:73:8c:fe:18:77:ba:d3:9a:dc:a7:07:1a:
         90:92:8c:38:6c:d6:e7:66:55:2a:b8:33:22:12:45:76:2b:e7:
         c8:7f:90:ec:51:ce:72:f6:f7:0a:47:68:39:17:7f:7b:2a:ec:
         0d:c1:c8:3b:60:5d:ca:c2:07:7b:ed:a1:27:67:14:1b:0b:98:
         d3:e9:15:de:2a:cf:bb:f4:30:cc:83:e6:4e:01:02:8c:b1:d5:
         03:ce:77:8e:97:58:8e:c4:59:94:36:e9:d0:78:94:8a:21:78:
         5c:94:2e:af:f1:a3:26:a1:fc:c6:7f:b3:48:d8:fe:c7:bf:b8:
         13:f7:83:4f:72:bf:f4:d3:37:dc:78:60:9b:bd:2f:52:44:8f:
         cf:95:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 02:40:05 2026 by rpki-client