Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa
File:                     43a83080-2b0c-303e-91ee-7bf37143a860.roa (raw, json)
Hash identifier:          6+BWTVnzFhzFKwvorevYOE+cLSnXbWUqmcMlGfJ8RG0=
Subject key identifier:   ED:32:FD:46:A6:CA:BB:0F:9C:D8:5C:4E:35:F4:3E:83:1F:9A:39:C9
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DF681C96ED3182EC63D70F880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa
Signing time:             Tue 26 May 2026 15:11:56 +0000
ROA not before:           Tue 26 May 2026 15:11:56 +0000
ROA not after:            Mon 24 Aug 2026 15:11:56 +0000
asID:                     273139
IP address blocks:        38.196.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:81:c9:6e:d3:18:2e:c6:3d:70:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 26 15:11:56 2026 GMT
            Not After : Aug 24 15:11:56 2026 GMT
        Subject: CN=158ca43c-8988-46ed-9876-a17ee94924eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:24:d8:5e:5d:ca:f8:40:4b:81:d5:c8:ac:
                    7f:16:71:e8:a9:9e:d6:3b:bc:9e:90:6a:45:49:9c:
                    8e:7c:89:b7:9f:10:09:98:62:de:89:fc:ce:28:24:
                    55:55:24:79:7c:c2:9f:e3:8c:c2:14:ee:78:23:5d:
                    a1:b6:3d:d7:96:75:23:47:f4:14:da:d4:5b:21:06:
                    08:b8:db:f6:22:02:6e:85:e0:f0:56:61:db:59:5b:
                    c3:9a:94:78:8a:3f:5f:c1:ab:26:b5:70:d1:18:38:
                    a6:0b:09:c2:9b:5c:36:02:b5:96:8b:8f:fd:91:15:
                    07:93:05:24:9f:31:17:d4:93:9c:95:dd:bd:fb:cd:
                    18:e1:04:45:25:ed:0f:d9:3c:2e:a0:9f:71:33:29:
                    56:c2:27:ce:3b:a8:3e:bd:54:86:40:34:b7:78:18:
                    37:a0:df:dd:34:2a:aa:b0:02:87:e5:d2:01:ad:42:
                    ec:03:52:23:f8:19:9a:b4:a0:4a:65:7f:f2:0d:22:
                    b5:9b:8f:b3:52:31:6b:97:b0:02:9d:fe:2a:3a:56:
                    c4:57:31:aa:4c:8a:47:f2:e9:89:b7:e4:5b:84:34:
                    ce:df:41:2c:6e:47:06:fe:28:6c:fc:55:8a:bf:55:
                    88:c9:c8:e6:58:16:04:4e:ac:c7:36:52:16:36:c5:
                    56:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:32:FD:46:A6:CA:BB:0F:9C:D8:5C:4E:35:F4:3E:83:1F:9A:39:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/43a83080-2b0c-303e-91ee-7bf37143a860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.196.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:b3:c0:5d:20:51:78:b9:d6:a0:b7:9f:79:b2:e9:0c:21:ba:
         aa:fd:08:a5:23:b3:f5:93:6a:16:f8:71:33:89:12:1f:b8:c0:
         e3:4a:b6:a6:02:c2:77:1e:9b:67:d0:93:a5:62:15:cb:31:35:
         05:f8:87:92:fb:8e:76:34:d9:3f:3b:7f:be:3e:d8:5d:e2:cf:
         d9:4d:95:24:1a:08:13:07:25:86:32:c1:59:f4:88:f5:cd:1d:
         96:87:b8:53:4e:0c:38:41:5f:34:a5:78:e8:ee:bf:cd:83:15:
         0c:d0:a2:40:99:63:3e:4d:fa:b7:90:58:66:4f:43:12:58:63:
         ae:09:ff:15:d2:02:e6:6e:e7:f6:30:54:01:9a:f5:d2:c4:4b:
         e7:85:28:0f:0a:93:f3:95:30:68:69:ad:ee:53:8a:af:bf:6d:
         7e:0f:d7:d7:6f:5b:22:bb:62:db:a7:30:a0:a6:9a:3f:38:de:
         e6:e6:79:bc:2e:06:91:2a:14:e9:22:72:2f:47:08:f0:e8:48:
         c5:cf:67:5c:3a:d0:7c:d7:95:0d:66:be:ca:06:00:98:a4:07:
         42:d4:cd:33:57:6f:8b:59:13:32:7c:50:52:f8:f6:5b:4e:71:
         49:7c:5d:14:8d:a7:f4:b2:00:53:a0:4b:22:d4:7b:60:44:a9:
         cb:9f:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:33:52 2026 by rpki-client