Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53d5172e-9f79-30fb-9f3b-d210e067ee17.roa
File:                     53d5172e-9f79-30fb-9f3b-d210e067ee17.roa (raw, json)
Hash identifier:          /WxStS4rl5lreXcQz02jK/60xi5XjHuRWuQPGYLdpKo=
Subject key identifier:   81:76:49:63:36:61:1C:8F:91:5A:90:8F:C7:95:5E:A4:D8:57:0A:98
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7E7D9FAA9DAC9A66B0A61280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53d5172e-9f79-30fb-9f3b-d210e067ee17.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     273203
IP address blocks:        38.224.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:9f:aa:9d:ac:9a:66:b0:a6:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=634b58c6-16ed-4e47-9a30-1e5940a75944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:fe:5c:1a:93:7b:7f:56:cc:d8:98:9f:cb:
                    6b:f7:ad:cd:01:a8:7e:8f:2e:84:29:bd:88:55:6a:
                    e8:28:9b:81:be:8e:98:52:1f:c4:76:19:b4:09:69:
                    ef:01:3f:43:65:18:57:2c:e1:87:db:04:14:69:25:
                    2c:f1:e3:13:f7:aa:d1:6d:ad:50:60:5d:a5:35:4b:
                    30:c0:dc:43:65:38:d4:30:e8:1b:ab:69:ad:27:69:
                    02:1b:5b:08:07:cc:a9:16:91:27:67:e6:d4:92:19:
                    2b:91:75:6b:32:fa:2f:99:8d:fd:52:62:a8:3c:1c:
                    fd:76:c9:6d:80:dc:32:1c:fe:97:a0:e6:1a:17:dd:
                    f0:bf:4a:50:58:86:39:8f:04:9d:8e:57:6e:ee:51:
                    c9:98:24:48:73:1a:b5:39:52:94:8b:5d:a5:ac:62:
                    72:2a:9a:30:f1:19:2e:51:c3:82:3b:45:34:5c:48:
                    fd:67:6d:0c:3c:37:86:12:ad:bb:b5:2f:54:d3:38:
                    c1:78:d0:6d:a4:cb:58:4c:0f:3a:8b:d9:64:cb:50:
                    f7:a7:74:23:4e:92:aa:80:42:2a:d8:20:29:42:61:
                    f4:d3:b0:68:4d:10:af:b8:44:54:d7:64:5b:d7:f7:
                    dd:28:1e:80:ae:39:f3:ce:2c:c2:c6:03:70:4d:9f:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:49:63:36:61:1C:8F:91:5A:90:8F:C7:95:5E:A4:D8:57:0A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/53d5172e-9f79-30fb-9f3b-d210e067ee17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.224.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:10:7e:31:48:2e:03:85:00:03:7a:44:34:51:bb:5a:3b:86:
         07:b5:27:87:36:b6:eb:90:59:85:b8:28:67:08:35:77:9a:45:
         0c:b1:ef:eb:2b:99:5d:23:48:b2:b4:8e:a8:4c:10:b6:0a:a1:
         bc:1e:96:55:08:80:d9:b0:12:c0:e3:a5:ce:66:3e:e3:d7:f0:
         0a:a4:da:60:d0:31:a8:98:a4:3e:fe:70:19:fd:92:4c:e6:f3:
         a9:01:2c:9d:c9:f5:cd:79:99:0f:44:8e:1e:89:17:ab:e2:4b:
         8a:b1:4c:fc:ac:fd:6b:22:79:3b:2c:0b:6e:ce:81:05:e7:9e:
         ff:9d:66:54:19:7a:1a:ed:7d:9c:b7:31:09:00:d5:73:e1:67:
         b2:d8:42:3e:7e:8a:72:44:a2:12:98:6e:9a:74:0e:e6:18:21:
         a2:ce:39:47:9d:39:8d:8d:6b:42:54:08:ee:30:c6:16:5e:14:
         bd:9f:bc:c8:26:cd:dd:ca:96:19:2d:22:c4:aa:fe:c3:c3:49:
         85:b1:05:64:47:37:fe:f0:e5:d4:40:d4:a9:c9:c1:8f:0c:22:
         01:60:2d:3d:7c:15:a4:1c:97:80:6d:28:4b:8d:b1:75:3c:1b:
         2e:a8:06:61:b5:81:9d:9e:66:33:1e:a9:34:f8:ea:e5:aa:d8:
         55:38:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:31 2026 by rpki-client