Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46e2f3a0-6af7-3541-9ddb-9e0d2809c897.roa
File:                     46e2f3a0-6af7-3541-9ddb-9e0d2809c897.roa (raw, json)
Hash identifier:          m2YCpbbif9RYwS3os522dnmJ7oNnJ97owIiX/nGCpxg=
Subject key identifier:   6D:DC:F8:C6:33:B6:46:54:84:FE:93:06:60:5C:2E:94:34:13:15:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F53F9A108D0A2A538C18D6470
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46e2f3a0-6af7-3541-9ddb-9e0d2809c897.roa
Signing time:             Mon 28 Sep 2026 19:30:31 +0000
ROA not before:           Mon 28 Sep 2026 19:30:31 +0000
ROA not after:            Sun 27 Dec 2026 20:30:31 +0000
asID:                     270580
IP address blocks:        38.226.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:f9:a1:08:d0:a2:a5:38:c1:8d:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 28 19:30:31 2026 GMT
            Not After : Dec 27 20:30:31 2026 GMT
        Subject: CN=b6d4cb54-e3ea-4d5c-81d9-cf3b3e5269bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:00:27:4f:e7:6c:a5:e1:7d:ec:09:4a:e1:
                    ab:12:3a:d1:de:af:8c:18:29:26:c9:17:93:56:fd:
                    71:01:ae:d7:cc:6b:f8:aa:5e:fb:af:e6:44:2f:2b:
                    d4:31:9e:6d:4e:fd:e2:b6:ed:45:d5:76:36:06:f9:
                    7f:b8:87:b5:27:97:9d:c6:71:f7:24:db:00:ff:bf:
                    52:6a:ff:06:7f:48:cd:b6:d3:5a:4b:14:0a:32:ac:
                    6a:c4:52:66:34:cb:7d:22:80:fa:01:0d:e9:63:5a:
                    20:2f:e8:1c:9e:ee:c5:b7:d4:1a:b4:70:fd:fa:ff:
                    8e:a6:37:c1:ad:fa:fa:3c:11:01:16:18:74:e3:92:
                    ad:6e:3c:56:2b:83:d2:12:64:1a:a1:59:89:18:7c:
                    e1:8b:a9:48:e4:9d:b1:f3:f5:89:01:46:70:1a:49:
                    18:67:d8:18:6c:8a:9e:a0:59:74:da:92:de:b8:c4:
                    95:88:cd:50:94:01:14:13:6d:a0:0b:b4:f1:e6:6a:
                    d5:df:5e:85:c2:c5:d1:58:07:e4:00:63:76:73:8d:
                    2c:62:b8:42:55:6d:3c:55:18:25:b7:e0:45:2a:5d:
                    19:44:ae:d9:1f:c5:08:f8:72:63:22:86:c1:06:65:
                    e0:9d:3c:b8:c6:43:9f:b8:b9:1e:4e:f6:2e:44:5e:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DC:F8:C6:33:B6:46:54:84:FE:93:06:60:5C:2E:94:34:13:15:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/46e2f3a0-6af7-3541-9ddb-9e0d2809c897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:9d:06:40:a1:bc:da:32:39:29:35:db:f9:62:91:0f:cc:
         e2:7e:bf:cd:1a:cf:41:78:6c:d3:df:a2:d4:e1:b1:4b:9c:66:
         16:2e:90:ee:15:a7:78:6d:46:ba:01:88:52:e7:60:ce:ed:42:
         39:eb:02:62:96:cc:be:eb:a5:4e:57:e1:36:8d:2f:0e:e8:db:
         2e:7e:c1:5b:be:17:ad:09:e6:42:d4:38:93:6c:45:18:d8:91:
         67:92:98:7e:20:1b:22:bb:7a:da:a5:89:03:98:ad:6c:b9:ff:
         bf:37:cc:1a:61:c6:22:5b:c5:ec:01:3b:f8:d4:71:75:cb:ae:
         0c:59:26:9a:02:78:91:87:1a:bf:ee:b8:b6:35:70:ae:15:3f:
         e4:b6:75:c9:6c:48:90:6f:e2:1a:65:a0:7c:21:54:8a:4c:6d:
         2a:cf:18:07:b4:ce:9a:b0:ea:fa:e4:91:d4:e5:4d:6c:8a:a3:
         7a:75:d9:2b:d3:43:2c:75:ef:d1:17:67:93:9b:cf:98:bc:84:
         1c:b3:94:24:1d:77:19:13:df:32:97:c4:ef:e4:19:31:66:1a:
         fa:e8:c4:78:fd:c4:a2:7c:57:e7:e4:eb:ad:58:d6:4e:9f:5d:
         ba:d0:25:79:52:1c:bc:a3:58:3f:19:11:75:95:59:98:b7:24:
         63:dc:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:51 2026 by rpki-client