Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa
File:                     56426d99-ca86-333a-bb8c-b3e52c87ace9.roa (raw, json)
Hash identifier:          OMp7Gq/udqrVhcmR0HGpo0KhIhhLc3o/0ZJoI7lqrTg=
Subject key identifier:   39:54:2F:9A:49:56:CE:15:8B:8D:30:B4:E5:F0:01:93:B6:4C:BA:36
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB2B19E774BC8B475BD6AEB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     400337
IP address blocks:        38.110.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:9e:77:4b:c8:b4:75:bd:6a:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f060003b-8230-474f-8d7f-686a2dd3b4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:3a:52:f9:87:49:56:d1:77:cb:42:37:cf:
                    77:b4:72:5d:8c:97:78:d0:5b:d6:74:db:5d:51:92:
                    4f:dd:dc:b5:4b:31:b4:30:88:9b:77:cc:6f:a8:cf:
                    ec:21:bc:fd:33:7c:14:1d:e0:f3:1a:88:67:6f:ec:
                    6c:ca:36:00:70:4b:e5:80:16:98:1a:eb:74:79:d7:
                    c3:b0:59:4e:0a:4a:71:09:94:0b:d5:ec:93:e0:cd:
                    bf:56:6d:56:d8:d4:02:b4:dd:d7:5a:32:a7:06:ea:
                    58:7f:fd:94:90:6d:1a:8b:e2:a5:07:19:40:75:e8:
                    25:4a:4a:fa:00:27:3b:5d:05:4b:8c:a0:8b:df:12:
                    f9:3e:ec:33:5a:c0:db:b0:81:b8:3e:9b:06:60:42:
                    5f:d2:22:cd:9b:33:46:a2:30:dd:f5:e2:40:40:69:
                    c0:0c:90:58:7d:ce:00:17:47:1a:68:69:58:d2:33:
                    d6:f0:4c:30:c0:67:24:41:9f:8c:d3:6d:0e:1a:73:
                    f0:7d:ee:92:27:6f:89:64:1d:07:1d:20:7f:10:f2:
                    e7:32:18:8d:53:24:92:5f:bd:15:64:4d:c4:ff:9b:
                    01:5e:32:b8:79:a9:be:a7:13:69:9c:b0:70:3e:4f:
                    85:75:d6:d0:8c:09:8a:09:a6:5e:c5:e6:6d:3f:d1:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:2F:9A:49:56:CE:15:8B:8D:30:B4:E5:F0:01:93:B6:4C:BA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/56426d99-ca86-333a-bb8c-b3e52c87ace9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.110.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:19:e8:5a:72:60:03:e6:4f:0f:ec:82:7b:35:a5:2e:e2:17:
         a2:56:c5:07:ef:97:8f:96:2d:30:26:6f:51:cd:91:49:b7:56:
         4a:d1:3c:98:68:5c:35:51:8a:e2:65:20:7c:15:3a:30:a2:73:
         a5:11:42:d5:8e:71:01:73:ba:80:66:48:ad:4e:c6:1a:b2:00:
         8d:4d:f4:7a:0e:11:3c:9b:3e:db:5e:8a:0a:f1:9d:08:3d:d0:
         1a:7e:d2:19:58:0d:d5:dd:7c:f8:42:d1:50:da:38:fc:8d:00:
         49:31:b9:c4:e1:8b:1a:da:c4:40:2b:dc:a7:d5:7b:a7:4c:b2:
         62:99:e3:5b:61:a2:25:f6:ce:e9:99:c5:f8:a7:e2:fa:e7:77:
         60:52:69:6c:42:08:7b:22:cc:dc:74:a2:6d:3b:5c:52:cf:d7:
         15:a6:43:bd:89:5c:ae:7f:30:f0:97:b2:c3:d2:ef:1e:03:ba:
         76:02:d2:d2:c5:b8:a0:d9:de:fb:6c:bb:b4:0e:f4:ed:b5:bc:
         01:9b:7b:51:df:7d:2b:95:47:10:6a:17:19:42:43:8c:8f:67:
         ee:74:61:53:4e:06:df:2f:98:74:46:4b:b5:21:a7:6e:9c:2c:
         25:f6:04:c2:22:e3:88:18:d4:ff:d2:3c:34:38:59:68:ef:ad:
         09:8d:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:12:36 2026 by rpki-client