Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5b6e55fc-2d46-3b9b-bd0f-901ec3e62da3.roa
File:                     5b6e55fc-2d46-3b9b-bd0f-901ec3e62da3.roa (raw, json)
Hash identifier:          bRAzwZxhqLfC2o86tdB9ovpkIvwPMaGcSlJM4ekzZXU=
Subject key identifier:   16:FC:B9:06:4C:B5:90:5B:30:46:60:DF:B3:59:34:A5:BE:71:44:0B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F6F22F2D9C7AB933EC7836B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5b6e55fc-2d46-3b9b-bd0f-901ec3e62da3.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     274280
IP address blocks:        38.76.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:f2:d9:c7:ab:93:3e:c7:83:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=5cdafa82-4781-4446-8463-8e62f7262146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:ba:3d:27:fd:25:a2:5f:03:08:0e:46:9f:
                    29:d7:a9:79:d5:8c:69:40:0c:b6:45:f0:43:ec:3e:
                    15:60:81:e6:97:0b:1d:14:da:80:6a:40:49:bb:e1:
                    95:10:32:49:b9:1a:2b:c3:53:81:dc:1b:64:ff:50:
                    5a:ed:a7:b9:ec:8f:d6:e8:f1:78:6c:15:c3:ae:45:
                    e0:4f:52:0c:57:89:3c:c2:8a:5d:09:7a:3d:4b:d7:
                    fd:bd:d7:a1:44:2b:32:8b:03:aa:da:fe:fb:1a:1a:
                    5b:fa:af:ce:f8:b0:ea:29:06:ea:5b:06:6e:bc:19:
                    67:ae:3f:e2:78:cf:32:55:d0:98:3d:93:e9:22:cc:
                    90:3c:26:8d:a0:cb:48:7b:3e:67:e6:f5:56:d3:83:
                    0f:49:bc:64:9b:dc:cc:a7:88:5b:b8:88:cd:f0:b8:
                    69:0a:a7:00:21:35:c3:76:7b:f0:4e:2d:ba:2c:a7:
                    96:ac:b3:a1:9c:69:62:cb:c2:67:7c:bc:20:1d:96:
                    0a:5e:bc:b1:e2:23:bf:2a:9d:83:73:60:9a:d9:8e:
                    f3:fa:86:be:49:aa:9d:4a:a1:c8:5d:6b:99:ad:ec:
                    cb:4c:c2:bf:2f:26:0e:82:9b:04:b4:0e:87:ed:4b:
                    06:af:e4:14:09:80:15:e8:5d:c6:b2:af:d2:7e:24:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:B9:06:4C:B5:90:5B:30:46:60:DF:B3:59:34:A5:BE:71:44:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5b6e55fc-2d46-3b9b-bd0f-901ec3e62da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.76.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:95:2b:51:5f:43:00:dc:74:3d:7d:43:3e:c4:3f:15:6f:
         b4:10:71:50:72:b4:92:88:21:6b:83:6e:38:6e:0e:48:e4:7a:
         da:61:03:f3:50:8a:e6:f2:63:1a:53:79:93:d1:38:49:30:67:
         e2:ab:88:39:be:a7:f0:ed:c8:d3:7b:b5:dd:0b:15:da:c8:22:
         7a:ed:2b:a3:f3:ef:e4:84:85:a9:d3:a8:ef:08:03:92:61:eb:
         99:d6:51:0e:fb:ab:76:37:a3:f5:eb:5a:e5:29:92:be:d8:4b:
         e9:66:1b:5a:6e:04:7b:6b:92:25:8f:e4:4e:bf:39:43:32:d8:
         19:a9:9f:b9:8b:c5:16:e6:b3:03:3e:09:a9:33:f5:70:a0:56:
         18:73:b5:30:8f:ba:c2:80:ce:07:0b:39:6f:62:7b:58:81:4f:
         46:ab:b4:9f:37:e7:1a:f2:95:7e:f6:0b:bc:12:25:70:fe:fb:
         08:02:ac:fb:2d:34:03:cc:7d:fc:61:a1:66:1a:64:06:0a:39:
         60:a4:53:82:a4:fd:6c:4d:c6:f8:2c:a6:1b:91:61:1c:4d:ea:
         53:ef:a8:a8:74:c8:12:df:ba:ea:38:62:8f:6b:17:0c:c4:c5:
         f5:56:b0:a0:f4:c6:4d:6e:fb:21:58:b3:a5:59:bf:ba:f3:82:
         d2:27:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:38:54 2026 by rpki-client