Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa
File:                     3b5dea06-2052-30b0-9c33-31fdaef347fb.roa (raw, json)
Hash identifier:          IKHGbTs2jBZ7/6ogWWAiMhSKNX7Y1yncIo97h6NAGqo=
Subject key identifier:   9B:C7:00:10:C8:B2:A3:11:B4:21:07:95:60:87:5B:78:3D:70:00:58
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F15CD04B72D75E76926120C60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     400164
IP address blocks:        38.212.196.0/22 maxlen: 24
                          38.212.200.0/22 maxlen: 24
                          38.212.204.0/22 maxlen: 24
                          38.212.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:04:b7:2d:75:e7:69:26:12:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=5f8bedb0-247b-4b1d-bb38-cd1f6647ed8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:4d:8f:4c:3b:11:4b:7b:03:2e:73:48:3b:
                    fa:7e:65:99:42:6f:3d:13:ee:27:60:11:5d:d6:aa:
                    71:07:7b:f3:68:0f:61:33:07:b0:37:f0:e8:cf:b3:
                    f0:f5:f5:48:d1:91:b5:0c:69:28:11:4f:16:e7:63:
                    cc:0b:a4:03:1c:ec:01:15:4e:b9:9a:9a:5c:9f:b0:
                    8c:c5:04:86:62:98:1a:bb:f2:82:00:45:90:57:ea:
                    03:b4:d0:ad:d8:94:ee:2a:88:eb:e4:9c:f7:0f:39:
                    ab:55:55:e8:38:8a:70:33:fc:84:a4:8c:fe:44:03:
                    88:36:65:52:76:8c:19:2d:27:61:e6:58:48:7e:a2:
                    e3:76:50:fa:07:82:66:dd:74:b1:72:dc:06:ab:fe:
                    1c:3d:1e:8d:c7:a2:26:f1:e3:55:0b:93:a3:f4:1d:
                    74:80:a4:ad:32:97:f5:4e:95:29:04:0d:cd:cc:31:
                    70:b4:46:56:72:40:d4:bf:9b:df:e0:ef:f2:eb:76:
                    d5:01:db:06:8c:59:47:1e:ea:2c:8d:f8:f8:69:f2:
                    4e:a2:e6:c8:a0:5e:9d:3e:3c:ae:60:b7:97:a3:01:
                    ab:c3:6c:f7:08:90:f2:81:1b:00:f8:fb:4b:ce:f9:
                    54:cf:c7:52:53:ea:63:aa:0a:f2:c3:0c:82:60:7d:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C7:00:10:C8:B2:A3:11:B4:21:07:95:60:87:5B:78:3D:70:00:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3b5dea06-2052-30b0-9c33-31fdaef347fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.212.196.0-38.212.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:97:c9:2b:7b:2a:b1:03:e3:d2:30:03:29:d2:88:0e:ef:b6:
         b4:78:3b:db:28:8a:a2:f3:d1:2e:43:58:26:da:d0:00:61:d7:
         e0:0e:1f:b2:e4:5d:3a:50:76:88:23:42:a9:53:b1:16:53:83:
         89:4e:72:95:ff:4e:b5:67:03:71:a5:ac:01:23:3d:ea:3d:ca:
         c0:8f:84:7e:55:db:cc:51:5c:8b:c9:b8:f3:fb:7b:c2:70:3d:
         b2:f5:f9:fb:5d:64:3d:96:1d:f9:cd:e0:28:87:c1:8d:8e:ba:
         3d:c9:90:90:f4:e4:56:dd:58:a0:7d:92:0b:0f:f3:2f:b1:c7:
         b2:ab:ed:bf:08:f3:27:35:a0:57:08:f3:05:ab:b9:58:bb:7b:
         68:05:5b:97:25:b4:9a:86:ff:e7:f4:d2:bc:89:84:3f:37:62:
         98:5a:49:cb:a9:ae:28:9f:3b:0b:75:8d:95:01:0c:52:8f:78:
         b1:44:87:05:da:59:06:d8:f4:9c:f7:20:8a:a6:eb:49:56:e7:
         c1:1b:0c:1e:d0:58:10:65:71:ae:47:7c:75:01:24:26:4c:f1:
         f1:cb:69:c7:bf:8a:b3:72:ba:a0:94:1c:c7:43:d8:69:7c:98:
         86:61:3f:d5:4c:85:ca:3e:82:ee:b5:bb:ab:9d:bd:1f:5b:bf:
         b8:4a:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:36 2026 by rpki-client