Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46ad291f-b598-331d-9762-ccb7b90e8508.roa
File:                     46ad291f-b598-331d-9762-ccb7b90e8508.roa (raw, json)
Hash identifier:          5EKqcSa6I/6XtJbjquIZXCRuNzMdyC67W6wN0UFnoFA=
Subject key identifier:   68:5A:F8:71:67:50:BF:87:54:A9:02:28:90:C3:05:EB:12:F0:A9:21
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F594F5F337FE05ECD97B83300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46ad291f-b598-331d-9762-ccb7b90e8508.roa
Signing time:             Wed 30 Sep 2026 17:22:19 +0000
ROA not before:           Wed 30 Sep 2026 17:22:19 +0000
ROA not after:            Tue 29 Dec 2026 18:22:19 +0000
asID:                     396997
IP address blocks:        38.129.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:59:4f:5f:33:7f:e0:5e:cd:97:b8:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 30 17:22:19 2026 GMT
            Not After : Dec 29 18:22:19 2026 GMT
        Subject: CN=23584cf9-546f-4dc5-bbfe-e4d3ede81bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:cc:b8:98:dd:41:db:38:35:17:10:66:3f:
                    2d:3d:8b:41:51:c0:ab:34:31:25:33:ec:d5:4e:4f:
                    3b:37:4e:a4:f9:00:45:c1:9e:e9:1f:5c:ba:66:6c:
                    73:0f:35:e3:46:5d:e7:f3:81:40:d2:d3:d7:05:cc:
                    1f:33:6f:39:94:48:ac:4c:79:0b:1d:4a:e0:1b:48:
                    37:fb:df:64:5c:90:83:9f:83:e3:e2:60:75:d3:ee:
                    aa:5c:ca:b5:1f:7e:b2:51:f2:f0:db:c2:c0:49:99:
                    a8:04:18:e2:97:0f:82:3c:6c:75:bd:b4:3a:d5:fc:
                    60:ed:a2:3a:79:74:39:75:ed:d4:2c:f9:ee:57:bb:
                    a7:39:59:6f:f1:97:09:f7:18:03:62:48:8a:8f:13:
                    00:c5:68:5f:9c:71:8b:23:03:9b:86:70:0b:a3:7a:
                    18:62:9d:ce:1d:a3:9c:df:cf:d4:18:45:85:14:89:
                    0e:cd:6f:fd:57:56:5c:ad:28:ca:d5:95:69:70:51:
                    47:a6:96:0a:24:f0:36:59:f0:7b:d3:74:c2:22:8c:
                    6a:2d:2b:ed:4e:4c:33:21:03:28:06:e5:4c:6f:3c:
                    01:ad:ef:48:a2:39:e1:5a:26:72:f1:3a:a0:4c:e7:
                    2d:6e:f4:ee:b0:75:37:18:a4:67:5c:f4:2f:08:97:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5A:F8:71:67:50:BF:87:54:A9:02:28:90:C3:05:EB:12:F0:A9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46ad291f-b598-331d-9762-ccb7b90e8508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.129.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f9:d2:9e:76:51:c6:95:c3:ed:1c:f8:83:ac:55:0c:b4:4f:
         58:90:16:a5:a2:6f:81:9c:44:bc:8c:b6:78:ee:d2:84:f1:de:
         e0:25:ca:4d:5d:f8:84:23:ad:1d:68:b8:dd:2e:4e:e2:a1:88:
         d3:3d:45:86:a9:db:71:be:b2:89:d0:95:ea:44:8c:b2:70:40:
         1f:55:af:31:ed:5c:48:fa:68:05:09:31:a3:12:88:ed:3d:ad:
         cf:77:06:d1:bc:c5:55:50:3f:53:0a:ca:e5:00:84:44:44:ae:
         0f:24:8f:ef:9b:93:d7:70:df:36:99:a1:80:8e:80:27:c5:6f:
         51:3b:2b:94:1b:28:17:93:2e:6a:35:60:53:e7:57:08:01:62:
         43:5f:41:6b:4f:5d:ea:17:62:e3:48:d4:44:8d:cb:29:0b:e6:
         1a:0b:e0:09:0a:cd:f2:3f:7b:89:0a:03:fa:2c:87:6a:75:d4:
         de:6b:2d:b4:8f:f4:c9:8c:b4:f0:c4:8f:b7:44:29:49:a6:0b:
         fc:d2:25:94:2c:5f:49:77:d9:c4:6b:9a:11:f8:75:07:dd:0f:
         21:f3:2a:f3:44:fc:9a:b8:6e:14:3c:26:36:ed:35:ef:a1:79:
         80:00:cf:bb:0e:a6:1c:97:a8:61:87:36:26:57:46:b5:e6:10:
         0a:64:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:26 2026 by rpki-client