Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/416f304b-9c78-37b6-acf0-12e2b114dcdb.roa
File:                     416f304b-9c78-37b6-acf0-12e2b114dcdb.roa (raw, json)
Hash identifier:          Gonb+Q7z8VGiPTfGZGgrC2OnA0o3R1uuda0TUqE3rjk=
Subject key identifier:   09:9A:B9:7B:E5:F3:00:90:10:54:6D:66:77:7E:7C:0D:FB:6A:3D:0C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED9C72D9A56A16EA0F7687800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/416f304b-9c78-37b6-acf0-12e2b114dcdb.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     1299
IP address blocks:        38.67.32.0/19 maxlen: 24
                          38.128.176.0/20 maxlen: 24
                          38.175.224.0/19 maxlen: 24
                          38.248.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:2d:9a:56:a1:6e:a0:f7:68:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=c371e8d5-f359-4618-8daa-2e4377ffca64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:0a:b1:b6:61:c7:15:50:f5:1c:8c:18:7b:
                    75:96:ac:b9:92:f0:fb:d6:57:83:c7:1d:a5:04:f4:
                    44:91:e0:42:36:d0:59:79:94:f0:65:71:88:ab:2e:
                    5f:ce:a7:84:b2:ff:3d:d7:e3:b8:05:f8:d7:02:29:
                    d5:2f:19:58:b1:cb:79:5a:39:72:a8:9d:9c:0f:85:
                    94:03:6f:c8:81:16:58:89:78:63:31:a2:85:26:7b:
                    ea:6d:a7:60:f6:c1:37:94:d6:b8:59:f5:51:8e:be:
                    5b:6d:e5:2f:50:80:c7:30:da:ea:ba:1d:74:8e:ac:
                    12:f1:9b:e0:73:fc:ac:cc:63:f3:ee:a3:b7:57:d2:
                    eb:eb:f8:cf:44:4d:61:09:6b:05:b5:42:ce:aa:f3:
                    ac:6d:30:a9:e2:bb:77:8d:f5:b0:08:b9:25:c9:ca:
                    60:f2:c3:58:8c:33:74:98:e1:83:09:be:a7:b0:0a:
                    51:44:cb:d9:ed:59:92:c1:50:e3:d6:8f:9c:b5:a7:
                    3e:f1:43:11:c2:a7:b4:bc:90:98:93:76:e0:08:37:
                    2e:82:bd:d6:0f:de:e0:c4:c7:e9:80:43:57:0b:ae:
                    09:16:84:af:2e:8f:d8:18:08:99:52:c7:36:5a:0b:
                    70:d3:47:72:0d:e5:65:35:fb:b8:5c:d9:e6:e8:06:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9A:B9:7B:E5:F3:00:90:10:54:6D:66:77:7E:7C:0D:FB:6A:3D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/416f304b-9c78-37b6-acf0-12e2b114dcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.67.32.0/19
                  38.128.176.0/20
                  38.175.224.0/19
                  38.248.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:de:0a:20:59:4f:58:f5:a7:04:9d:c8:f7:53:54:b9:49:c3:
         52:09:0f:89:64:da:e7:50:b1:9d:4d:e4:2e:f4:76:7e:62:2b:
         f0:30:38:53:96:08:fc:af:85:2a:85:02:22:99:6f:22:ee:3f:
         a7:13:e7:20:4e:b2:48:ff:33:82:20:fc:c2:12:15:16:f1:68:
         5e:37:4b:cc:8a:2d:09:ed:51:d7:10:85:d8:12:61:07:59:92:
         5e:18:a1:fd:6a:41:8b:f4:75:c6:cd:2b:ea:08:e9:3a:40:3d:
         36:ee:20:7b:38:be:96:a6:a2:e2:6b:e2:76:12:25:67:79:7c:
         7e:fb:1b:5b:2a:d9:ef:46:b1:80:f5:bf:3b:11:c0:51:90:f1:
         05:4b:3b:73:1d:07:e1:a7:e6:82:56:f1:dc:be:78:a7:88:1f:
         2c:b0:1c:86:08:62:c4:ac:6f:4d:5c:9f:8b:a1:1e:d3:e2:a0:
         6a:93:41:26:8b:5b:4d:0e:8e:7f:ad:d6:04:71:d5:48:3a:ca:
         05:74:07:3b:fa:bf:8c:6f:30:af:b7:3b:29:a5:26:5f:7a:37:
         c9:88:1d:11:1a:90:b5:a1:85:4f:4e:3e:fa:01:65:3c:a0:ae:
         9e:a4:8e:c5:4d:e5:37:11:f8:e9:d4:49:10:e4:fa:58:40:64:
         74:2e:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:19:12 2026 by rpki-client