Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d3e70e0-d1f7-37e5-b8e7-a41842ba3691.roa
File:                     4d3e70e0-d1f7-37e5-b8e7-a41842ba3691.roa (raw, json)
Hash identifier:          jF4fckYtFfekzjusNhneWhoYDYp26hm4ZW1FrWXjV9A=
Subject key identifier:   A8:06:FB:09:80:EC:2E:52:6C:A0:27:1C:0C:78:BC:26:10:D2:74:06
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F86DDB012F9684FFE727D6980
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d3e70e0-d1f7-37e5-b8e7-a41842ba3691.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     273187
IP address blocks:        38.226.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:b0:12:f9:68:4f:fe:72:7d:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=059c64ba-4102-4a0c-94b5-1c39aa1f4da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:4e:27:18:dc:58:f6:b6:0a:d4:1b:7e:8b:
                    38:5a:01:e1:ae:08:4b:7e:08:1a:bf:ad:99:56:99:
                    b1:53:af:41:8e:4f:80:5f:80:5c:fb:fa:50:b1:48:
                    e7:b8:d6:14:22:62:9f:c9:08:11:80:b9:9a:5d:df:
                    84:56:fd:ea:8e:66:43:18:d9:82:ec:f1:70:ec:f9:
                    88:8e:14:24:84:3e:96:65:6d:64:77:81:10:6c:28:
                    21:b8:05:5e:91:47:da:fd:19:f6:7c:c4:ed:6c:83:
                    f5:ac:e3:3e:35:44:95:64:0f:d5:dd:69:63:3c:65:
                    6d:9e:53:84:5c:49:44:56:12:8a:c0:b3:62:6b:40:
                    54:f0:8c:50:18:79:07:e6:27:96:04:d2:c4:5d:92:
                    c4:b5:83:e9:6d:03:fd:95:43:6e:35:85:e1:00:eb:
                    bb:42:40:92:9f:9b:c1:e2:94:0f:f4:c7:24:c9:c5:
                    79:75:54:ee:4f:dc:37:4d:41:e2:99:21:0b:9f:f1:
                    a7:d2:f2:fb:af:b4:1f:aa:0e:01:6a:0e:59:51:76:
                    d8:31:77:9b:08:fd:45:d6:65:62:87:66:6e:f6:27:
                    87:b0:64:37:08:f6:97:cc:93:68:73:d8:80:1e:33:
                    e5:30:b8:5f:71:4a:d0:c9:93:ba:e6:00:4e:94:ef:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:FB:09:80:EC:2E:52:6C:A0:27:1C:0C:78:BC:26:10:D2:74:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4d3e70e0-d1f7-37e5-b8e7-a41842ba3691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:c5:60:ad:d1:be:ce:5e:dd:f8:73:ee:1d:cf:a7:3d:aa:
         47:b7:79:35:34:30:1e:ed:90:0f:b9:17:f8:cb:74:0e:18:89:
         b5:72:d9:e2:4c:62:99:f9:d1:be:32:45:33:2d:c6:68:f8:c5:
         75:54:9a:d4:40:9a:2e:84:03:4f:01:f0:8c:f4:92:70:13:3e:
         f4:9c:33:07:09:31:73:51:21:36:c0:ba:3b:be:f3:71:75:85:
         ee:40:19:78:0b:c5:c6:a5:28:d2:42:e2:d6:92:90:e4:e8:dc:
         3a:93:9c:5e:f4:32:a6:0b:d6:08:e6:f3:25:61:f0:87:cc:fa:
         4d:af:8d:26:9e:8f:b9:a2:1e:a0:8c:de:71:bb:da:98:2f:31:
         0e:ac:20:a4:b3:91:dd:8c:84:17:95:e7:21:50:0c:5d:7c:1d:
         12:d0:af:c9:67:71:f8:ed:c6:66:b3:de:1d:4b:8e:ab:db:20:
         84:05:e8:01:27:d1:a0:d8:34:e7:09:11:19:96:fe:47:30:42:
         0b:27:5a:e4:92:83:79:e5:39:f4:b9:5a:c9:0f:3e:d3:29:6c:
         b1:41:90:c2:23:d5:d2:97:9a:26:61:62:f7:59:c7:97:b7:cc:
         bb:77:e9:01:7c:43:fc:d2:eb:8b:dd:b2:c8:91:fb:86:b3:3e:
         94:b4:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:36:50 2026 by rpki-client