Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4bf15ba5-aa15-3076-ad68-85b0345c02ff.roa
File:                     4bf15ba5-aa15-3076-ad68-85b0345c02ff.roa (raw, json)
Hash identifier:          5qFdd+G5dE3Rf0jeV3GUh/mMGatU7CSY6Xk4yFHfY4o=
Subject key identifier:   43:6D:00:53:3B:C5:C5:34:E3:4A:E9:AE:F4:FD:06:60:8C:C9:E4:79
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F9940A8EECCBB63E2419598A8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4bf15ba5-aa15-3076-ad68-85b0345c02ff.roa
Signing time:             Fri 23 Oct 2026 15:04:25 +0000
ROA not before:           Fri 23 Oct 2026 15:04:25 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     267708
IP address blocks:        38.51.232.0/22 maxlen: 24
                          38.159.184.0/22 maxlen: 24
                          38.226.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:40:a8:ee:cc:bb:63:e2:41:95:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 23 15:04:25 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=443f022e-ade8-4812-8165-b8916a25288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2e:0c:b6:63:68:69:41:d0:7d:ca:41:f3:ea:
                    3a:98:a1:73:08:9b:97:0e:a9:4a:36:73:83:bf:bc:
                    3d:d1:f5:95:e3:fc:79:0c:8e:25:96:c3:94:45:09:
                    95:52:bf:cb:9c:ca:68:2b:88:77:a5:22:d4:b8:9b:
                    e1:f1:be:3e:07:58:ff:5e:ae:79:e2:7c:64:e2:60:
                    ef:a9:e4:c0:e5:30:c0:b8:5d:3d:b4:95:c7:59:4c:
                    d0:ad:8f:31:a4:63:eb:8f:dd:da:c2:5f:61:26:d4:
                    67:c4:83:ce:dd:f7:24:9b:20:3d:8b:8c:de:f8:19:
                    00:67:dd:f7:87:d4:c2:38:97:88:0d:11:6f:f3:e2:
                    9e:34:42:b0:23:78:4d:f9:f1:19:6b:4c:9b:20:33:
                    f9:b2:22:5f:df:9e:9d:7e:57:5f:8e:b3:5f:3e:95:
                    b4:03:f0:c9:bf:80:5b:9a:c8:96:ef:de:59:1e:f3:
                    f1:c3:8a:1f:d9:71:84:68:ef:2f:e0:98:65:12:de:
                    3d:86:bd:0d:8e:b6:05:71:2e:ae:0d:c9:08:2a:a2:
                    ca:ec:fa:e0:01:0f:df:e6:2a:c2:65:b5:ba:f9:f3:
                    75:f6:d9:f1:e2:5d:6a:56:40:77:87:59:26:8f:e6:
                    3f:bf:c8:a6:29:80:5e:11:72:6f:26:99:88:15:64:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:00:53:3B:C5:C5:34:E3:4A:E9:AE:F4:FD:06:60:8C:C9:E4:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4bf15ba5-aa15-3076-ad68-85b0345c02ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.232.0/22
                  38.159.184.0/22
                  38.226.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4a:d5:e1:7f:df:f2:5f:93:46:19:13:fd:db:4f:f5:d5:bd:
         6c:12:1d:60:8e:fb:e4:f5:f7:ff:53:e8:31:36:18:c2:a0:84:
         8c:5f:03:44:5e:a4:23:57:de:0d:d4:24:a5:b4:17:6b:eb:33:
         8f:e2:1f:d7:26:a4:d6:c9:6f:6c:61:cc:ca:d4:fe:ac:02:5f:
         b2:e7:a4:d6:08:9a:11:39:6b:12:f4:71:c7:12:50:02:93:33:
         eb:5e:50:d9:5f:f2:33:88:3e:bd:ea:8e:46:58:77:00:f4:1a:
         7a:98:1d:11:b8:20:c9:c3:bb:de:93:20:a3:a4:9d:3c:11:8a:
         1e:a7:4c:ce:41:c2:26:82:97:f8:c8:da:2d:02:29:fb:a9:1a:
         af:88:a9:96:1b:8e:52:1c:28:1c:03:1c:ce:78:b0:00:15:21:
         96:70:1e:c6:f1:07:c6:61:e4:b4:4e:a9:dc:ee:66:95:a6:e5:
         df:0b:5c:37:94:0b:f5:fa:43:96:18:17:a4:8b:b9:72:99:c7:
         ec:6c:7a:13:73:8e:a4:05:4f:ed:55:44:b0:95:0a:a0:3c:64:
         fb:a1:96:35:92:34:f5:a5:24:6f:7c:13:79:dd:5b:5c:d5:40:
         9d:1e:42:d6:bf:6d:e7:69:69:82:52:b8:ea:b4:48:e0:8c:1f:
         63:8a:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:16 2026 by rpki-client