Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/411029cd-a928-3c66-8861-63fefb55e9db.roa
File:                     411029cd-a928-3c66-8861-63fefb55e9db.roa (raw, json)
Hash identifier:          y8lh7vD3BwZnJRxm0WIzFlXJlX4MDEruzH9lnqRilSA=
Subject key identifier:   2D:22:EE:CF:69:5B:5D:74:2A:7E:01:43:8D:CF:FF:E8:1A:43:C0:DD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DFCCC2F22E0F23861131B36C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/411029cd-a928-3c66-8861-63fefb55e9db.roa
Signing time:             Thu 28 May 2026 21:16:41 +0000
ROA not before:           Thu 28 May 2026 21:16:41 +0000
ROA not after:            Wed 26 Aug 2026 21:16:41 +0000
asID:                     395719
IP address blocks:        38.77.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:cc:2f:22:e0:f2:38:61:13:1b:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 28 21:16:41 2026 GMT
            Not After : Aug 26 21:16:41 2026 GMT
        Subject: CN=6d2466c8-8883-456a-b5e5-2f894dd0583d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:08:58:1b:d5:7c:19:1a:24:a0:7b:51:7f:
                    67:7d:54:db:cd:53:0b:70:73:b3:e0:c3:cb:71:54:
                    0f:85:d8:04:90:b8:e3:45:06:10:62:23:fe:9c:d7:
                    3a:f8:9d:0d:34:72:22:a1:63:52:26:68:68:68:d2:
                    02:ea:d0:98:07:a9:77:27:88:a1:46:3b:51:e0:54:
                    ae:af:ec:de:14:4f:ae:b9:0c:15:12:0c:16:72:af:
                    6e:4d:34:77:ed:1c:8a:8b:cc:b8:bb:26:c0:e8:a8:
                    96:8b:79:b5:87:98:89:67:f6:e5:86:c4:a0:17:b5:
                    69:2e:6d:91:45:fa:df:95:d3:a9:01:d0:85:ce:b8:
                    75:26:8d:23:1f:fe:a9:8f:d4:e4:1d:a0:19:43:25:
                    92:af:2c:a8:74:aa:31:07:de:4d:88:c9:83:c7:f3:
                    9e:a3:cc:51:53:c8:ec:0c:3f:5b:fd:dd:2d:2b:37:
                    41:b0:ca:ff:49:38:b0:25:a7:aa:34:51:32:de:48:
                    4a:8e:3c:af:35:28:0a:bb:8f:83:54:11:05:3a:e1:
                    1c:34:68:55:15:6d:a0:25:43:30:a4:31:f6:5f:f7:
                    58:fc:0a:5e:40:83:e7:64:2e:b1:e2:d1:2d:32:93:
                    df:82:7d:cc:b0:e1:a8:bd:cd:93:50:a4:31:35:4d:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:22:EE:CF:69:5B:5D:74:2A:7E:01:43:8D:CF:FF:E8:1A:43:C0:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/411029cd-a928-3c66-8861-63fefb55e9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:96:fa:ad:53:42:bd:da:99:09:24:87:61:42:e5:04:ad:8d:
         4b:ef:5c:ae:71:71:9d:cd:29:6a:e1:e4:27:22:17:7e:9a:5e:
         23:47:9b:e2:ed:7a:17:f9:5f:b5:5f:65:7b:ba:78:09:c9:05:
         7c:b6:ad:ef:f5:61:fe:b5:85:9c:e9:ed:b9:96:39:09:99:07:
         ad:3a:ac:9f:1b:bc:43:85:87:a7:a4:84:33:e8:74:69:77:96:
         20:e2:d3:3a:53:e8:f3:20:a2:c6:15:29:c8:07:c4:1e:06:26:
         42:c0:91:35:18:23:86:09:54:ff:d1:96:e3:b8:c2:f8:c4:f5:
         93:50:1e:99:02:9c:2f:67:45:2b:56:aa:0c:d5:f1:f5:7a:b4:
         74:6d:d2:cc:7d:a8:15:18:e8:6b:ff:47:9a:80:90:f9:fc:2b:
         be:04:ac:a0:cb:40:02:1a:3c:88:7c:f0:d2:c8:96:cf:64:c4:
         37:35:dd:dc:ec:07:64:6f:d6:aa:ef:15:06:8a:d8:cb:a3:1a:
         7e:fe:00:ad:21:77:e8:1f:04:93:96:00:9b:b6:ef:83:3f:f0:
         fe:ae:38:02:85:cb:1e:bb:12:f8:c9:29:05:d8:42:59:c8:b6:
         f5:a3:12:d0:8a:04:e1:3f:c0:83:c1:68:fd:d3:bf:78:9e:8b:
         11:26:d7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:50 2026 by rpki-client