Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa
File:                     3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa (raw, json)
Hash identifier:          8vgWmyQAZxhxBCLrh2ZoBfD7vIWFdpfxRdIKbZaytYE=
Subject key identifier:   03:79:2D:4B:41:AE:B9:14:31:E9:E1:1D:4F:37:F2:95:28:72:27:FE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC7A1E984C6A79F56B27F92A0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     211908
IP address blocks:        38.3.184.0/24 maxlen: 24
                          38.3.228.0/22 maxlen: 24
                          38.3.232.0/21 maxlen: 24
                          38.51.140.0/22 maxlen: 24
                          38.199.252.0/22 maxlen: 24
                          154.43.166.0/24 maxlen: 24
                          154.43.176.0/22 maxlen: 24
                          204.157.176.0/22 maxlen: 24
                          204.157.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e9:84:c6:a7:9f:56:b2:7f:92:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=c68e1ed7-63c3-4733-9439-72487c883d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:82:d9:a7:e2:c1:98:37:69:1d:ec:9a:5a:
                    b5:df:da:f5:84:5d:7e:57:ee:42:8b:42:7b:0b:1b:
                    d2:d5:31:00:27:00:ee:ae:56:9f:a4:a2:36:0d:0d:
                    62:7d:88:00:6f:62:58:da:f3:4d:63:b0:05:1b:cd:
                    62:c7:8e:4e:ea:4a:38:d1:7a:5d:bf:d0:54:fe:0c:
                    3b:50:b9:ca:6b:d0:0b:cc:5b:8b:2b:56:2b:2d:f6:
                    18:b3:07:d6:86:b2:46:3f:72:08:9f:46:4c:66:0c:
                    a1:62:7c:0e:a5:85:4c:8f:8c:db:17:a3:b9:81:07:
                    29:c8:bf:e8:b6:b2:7f:23:b4:c2:c2:ca:e3:04:5a:
                    5c:56:0e:30:eb:9a:ba:94:d1:f4:27:be:ec:94:d1:
                    55:a2:b0:ce:07:53:7c:5f:4d:90:e4:12:3d:f9:a2:
                    ae:2a:cd:4f:11:42:b5:11:25:94:7e:90:dd:95:d3:
                    1b:c3:db:74:a4:d5:fa:f9:1d:7d:00:d7:11:0b:e9:
                    8b:b9:94:42:0d:c0:39:6d:92:73:87:a5:ad:1d:80:
                    d4:88:8a:71:58:e3:ba:43:7b:9f:a2:fd:54:99:40:
                    ab:b3:0d:3b:9a:52:02:12:1e:85:21:f7:d9:e3:4e:
                    15:0f:d1:03:a1:ce:a6:f1:31:4d:d8:6b:ba:a7:7b:
                    01:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:2D:4B:41:AE:B9:14:31:E9:E1:1D:4F:37:F2:95:28:72:27:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3ba769d8-da2e-3f9d-9338-c5230bf9f571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.184.0/24
                  38.3.228.0-38.3.239.255
                  38.51.140.0/22
                  38.199.252.0/22
                  154.43.166.0/24
                  154.43.176.0/22
                  204.157.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:a8:3d:4c:b1:08:dc:64:57:f7:ca:26:a6:72:0e:71:4c:
         19:bc:c2:04:f5:64:ef:c5:81:42:57:77:e0:44:6a:5f:8c:86:
         5a:d4:19:79:ff:95:5b:93:9f:e7:4c:0f:fa:4e:69:16:a0:69:
         e5:21:8d:f0:d0:35:a9:a5:9e:60:f0:86:aa:a3:79:be:3d:65:
         33:85:b4:17:f5:41:19:97:30:3f:b9:58:35:a4:6f:8b:95:0b:
         80:16:07:be:63:a9:81:ca:b8:c1:7d:a6:c6:39:e1:a4:9e:c0:
         6e:17:59:f4:b4:53:94:72:02:d7:39:38:87:6a:be:fc:97:27:
         bf:da:3a:92:a0:a0:1d:4e:e4:e8:13:de:79:6b:7d:d3:9f:91:
         70:85:f0:ac:43:44:f0:04:1a:9a:9c:96:e6:9f:62:46:6e:16:
         cc:19:32:47:98:c6:a2:cd:5f:74:9e:6c:6d:bb:c0:40:8d:c1:
         c5:00:d2:e2:8b:07:32:91:62:d6:1d:ac:ad:12:ea:fc:9e:3c:
         b2:f6:0d:75:1e:e2:8b:fb:6c:f8:91:1e:bb:ae:d9:5c:21:89:
         e9:df:1f:a7:20:af:6e:18:3d:21:86:ec:9d:c3:83:f2:6c:da:
         82:4d:2f:70:4d:5e:96:86:3f:d2:dd:c7:f1:b7:5e:62:1f:48:
         e8:57:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:27:58 2026 by rpki-client