Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
File:                     5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa (raw, json)
Hash identifier:          SISc3EZ1s0/CfPwFK3Ii/B6DD1KPets1URIrraJQMRU=
Subject key identifier:   54:2D:39:FD:3A:18:5C:7E:FB:02:31:E5:2B:4E:F5:7E:F9:BE:2E:2C
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB9AC4CC1C27C7035BD62A4C8
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     133585
IP address blocks:        38.226.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4c:c1:c2:7c:70:35:bd:62:a4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=78636a4c-0737-4077-957a-a220c9a2592e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:ea:24:98:97:26:c6:97:d3:a7:c1:8a:3d:
                    48:20:a3:d9:8c:03:87:65:61:b4:43:53:83:ff:4b:
                    98:18:c9:93:9b:10:eb:26:4f:0e:5a:ec:3c:79:53:
                    67:1f:24:c1:84:41:f5:05:4c:6b:e8:a3:64:9e:9d:
                    7b:cb:fd:6d:a6:9c:9c:00:aa:e5:3b:52:85:19:37:
                    de:65:a4:d9:80:24:35:81:df:26:6f:ed:28:85:d1:
                    81:56:16:b0:ab:f4:8c:ef:6e:95:a9:f6:1e:24:d8:
                    58:8c:5a:14:28:9b:06:b3:db:d5:ce:b9:0c:8a:55:
                    6b:ce:68:3e:b2:4b:f3:42:95:c1:52:5d:19:54:aa:
                    88:dd:93:6b:44:3f:02:3e:7a:a2:d4:ff:e7:96:a2:
                    a7:f7:1f:d8:5b:9c:58:fb:4b:c7:63:99:d5:1f:fb:
                    15:93:ad:42:87:c9:d5:5e:19:67:2d:d6:5a:53:84:
                    2d:93:9a:0c:9c:16:38:a6:23:cd:f9:ce:51:b8:12:
                    8d:75:90:ff:b5:ef:fd:1e:8f:76:42:1d:e6:92:d9:
                    dd:b2:ac:5a:59:52:a2:e0:08:c8:1b:72:89:6d:ff:
                    31:f1:ff:ca:00:6d:1a:e6:a5:02:98:01:cb:df:7a:
                    5e:5d:79:0c:7c:2f:3a:24:89:7c:72:8c:22:3f:8f:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2D:39:FD:3A:18:5C:7E:FB:02:31:E5:2B:4E:F5:7E:F9:BE:2E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:82:42:c6:12:24:3c:48:18:30:42:ff:02:79:ac:64:07:
         b0:94:60:11:23:59:88:43:79:5a:2f:1c:c6:18:20:d7:e8:91:
         d6:e4:82:97:46:63:8d:8a:eb:d2:c1:7e:90:a8:25:cc:37:4d:
         3c:ea:ab:dd:ed:18:23:3c:91:68:15:96:85:39:a5:d5:02:59:
         55:fb:3a:7d:1d:e2:09:98:ab:a7:f3:c0:83:43:27:68:1c:97:
         5c:c2:0b:bb:3a:38:32:58:62:0d:8a:71:e8:bc:e5:2e:8d:68:
         e9:b4:c2:0f:2b:cd:1f:8e:7b:74:49:45:30:ae:0b:5d:ec:e1:
         6e:8e:86:ba:e4:bc:39:7b:ca:fe:0b:03:89:a4:0a:d9:36:35:
         1c:0e:35:f2:0c:b9:b0:cb:f7:8e:d1:69:ba:5e:74:6f:13:dc:
         74:e8:21:b0:dd:1d:ef:4a:e3:70:7b:42:ee:c9:f6:df:9d:07:
         af:e5:28:6a:b7:21:bf:80:c8:ec:3b:a1:22:1a:f8:cf:d8:20:
         82:2c:82:9e:e0:b3:71:09:6c:3d:b8:f7:36:99:13:d2:c6:1f:
         13:7c:01:4f:b4:36:d5:a1:0d:11:f9:06:fb:6d:76:9e:63:73:
         cd:5c:dd:36:6d:ae:3a:22:d8:15:e5:42:d8:5f:f6:98:7b:a4:
         b3:21:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:41 2026 by rpki-client