Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
File:                     5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa (raw, json)
Hash identifier:          6FYDo681+ZKrw2GfJno6MlU/6Vwqgu6AOk5muxZBem0=
Subject key identifier:   89:14:3D:89:A3:29:F9:1C:99:E7:0E:24:45:7A:0B:7E:48:56:BD:17
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E174986DB3F38154888AF5CE0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa
Signing time:             Sun 07 Jun 2026 09:00:13 +0000
ROA not before:           Sun 07 Jun 2026 09:00:13 +0000
ROA not after:            Sat 05 Sep 2026 09:00:13 +0000
asID:                     133585
IP address blocks:        38.226.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:49:86:db:3f:38:15:48:88:af:5c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  7 09:00:13 2026 GMT
            Not After : Sep  5 09:00:13 2026 GMT
        Subject: CN=b9dcdaa2-bf6b-4d55-9222-12adab064dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:94:47:65:7c:dd:de:2e:82:08:0c:52:08:
                    2b:04:87:2f:34:5d:2d:cd:ce:0e:c5:a7:b9:29:d3:
                    57:8e:9c:b0:14:af:a3:3f:03:00:f9:1a:c2:c2:8b:
                    5d:5b:2e:07:14:3f:c9:f7:c1:c1:f9:22:f9:f6:e1:
                    81:ab:05:ed:22:f3:b6:4e:f5:0c:d9:27:78:ff:3c:
                    3c:6f:b0:b9:4f:49:c2:8f:4b:b8:97:52:96:6c:88:
                    86:3a:30:45:9d:cf:85:d2:91:cc:8c:d3:12:11:45:
                    fb:05:a8:74:20:73:7f:17:1d:0e:eb:59:bc:a2:8e:
                    95:83:cc:f6:bb:4f:8f:83:a1:ae:71:01:cf:03:35:
                    2d:f1:b3:d8:97:58:16:a4:c5:02:98:26:4a:3e:a3:
                    05:d4:74:e5:77:ed:9b:5a:cd:0f:a8:43:50:72:93:
                    62:02:8e:83:fc:c2:4b:02:ac:26:2c:7e:9e:6c:12:
                    f5:bb:7b:33:f8:5d:e4:ca:b8:10:20:50:a6:d0:de:
                    40:80:29:ce:f4:f5:e9:7c:f1:91:4c:3a:bc:e8:ba:
                    c3:25:d0:52:f9:a0:77:76:15:bb:14:67:d4:9c:a9:
                    77:b4:48:40:e2:6a:fd:a0:2c:81:64:d1:b8:2c:5d:
                    3a:40:66:b7:c0:6a:e0:1b:f8:7e:b0:e4:f8:62:90:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:3D:89:A3:29:F9:1C:99:E7:0E:24:45:7A:0B:7E:48:56:BD:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5c476cda-4d82-3cbb-83ad-f5c7b29cbcc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.226.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:0b:03:79:f6:68:97:b6:49:5b:37:4b:bc:b8:ba:13:9e:
         bc:45:56:2e:bf:6a:f1:21:c8:fa:eb:36:0d:b9:c0:12:3e:a1:
         12:ea:0d:9b:b0:e3:93:bb:80:b8:3b:24:0d:09:91:76:ea:30:
         b3:98:db:02:17:9c:fe:0c:0e:9c:c3:d1:48:e0:78:fb:d1:fc:
         cd:e0:63:66:a2:be:a5:26:ba:02:cf:2a:73:71:69:3f:30:ce:
         64:1f:39:59:e1:c7:38:58:a3:cc:fc:ca:3c:99:35:30:34:5d:
         8e:04:01:ca:c9:8a:0a:07:a1:40:00:16:39:df:a7:c1:3c:94:
         67:25:38:51:ab:5c:fd:6f:ed:e0:bd:91:e3:11:91:cc:5b:6d:
         8c:78:da:ee:f1:a1:1c:47:5f:29:4b:de:47:f9:94:ec:8f:25:
         62:63:71:c8:4b:a4:f4:1f:63:1e:27:f5:8f:4a:47:3e:1d:89:
         20:13:1a:47:fe:21:dd:e7:7e:09:b6:99:9c:ed:81:5d:1b:0f:
         0b:c3:b8:ce:93:00:83:2b:84:60:64:1b:4d:b4:4d:e9:52:64:
         e5:0b:9d:ac:4f:6c:50:33:bc:fe:d3:b9:8d:d0:a3:14:d2:51:
         b1:e9:1c:4e:0a:f2:53:60:50:8d:23:c5:75:ea:2c:df:52:e7:
         d4:c9:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:39:28 2026 by rpki-client