Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dbe6ba7-c4df-3429-ac7f-d579bee27543.roa
File:                     5dbe6ba7-c4df-3429-ac7f-d579bee27543.roa (raw, json)
Hash identifier:          D0S8XR0w/opAeSnis8NWszHpdKz6HGs+U9JPfgFHAeE=
Subject key identifier:   85:0B:85:1E:1A:9F:AC:57:6D:85:3D:F5:96:08:CC:EB:6F:EB:F7:9F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC9072434BB968369CE815600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dbe6ba7-c4df-3429-ac7f-d579bee27543.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     134044
IP address blocks:        38.65.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:24:34:bb:96:83:69:ce:81:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=3cca11c3-68d2-48f6-b1eb-e78c87e17f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:f6:c3:8b:b4:21:c5:68:ff:2e:61:07:9e:
                    06:dc:23:95:47:ee:6e:80:ea:ec:d7:a6:a5:67:ae:
                    10:bd:f7:cf:0f:4d:73:01:10:ee:a4:81:3d:68:d9:
                    9a:7c:1f:bb:47:83:f7:9e:1c:ae:91:4f:d0:3d:fa:
                    63:b7:d5:75:2e:52:b7:21:91:bd:65:e2:e7:b4:f5:
                    20:7b:aa:39:f8:6c:df:ce:b1:c9:82:09:ce:a3:71:
                    df:1f:fe:98:04:78:d2:37:9c:52:2d:53:c9:88:5a:
                    f8:a4:84:ee:be:6e:45:3b:6e:27:fb:d8:cc:2a:40:
                    bd:e4:b8:83:8f:4f:66:47:30:c5:2e:82:2b:04:7c:
                    b9:aa:76:27:9b:7d:58:48:aa:30:e0:8d:5f:f6:82:
                    49:a8:2a:d5:7a:bc:c8:a4:24:df:e6:d4:f8:3f:f0:
                    c5:11:7e:6e:ae:bc:f2:50:f9:80:a2:9d:3f:b1:43:
                    0e:40:e0:be:a7:85:36:81:05:27:fa:e9:5e:40:b0:
                    6e:68:7f:77:81:2b:0b:bf:a9:c5:2c:ad:b3:a3:9a:
                    e2:b1:c3:d6:17:d2:2a:68:06:b3:65:47:31:dc:01:
                    ea:ca:f2:cb:f6:ee:0b:72:bb:71:66:03:c4:93:13:
                    d8:58:b5:b2:6d:04:f2:98:02:4d:6f:7c:6a:d4:44:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:85:1E:1A:9F:AC:57:6D:85:3D:F5:96:08:CC:EB:6F:EB:F7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5dbe6ba7-c4df-3429-ac7f-d579bee27543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.65.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ba:7d:e3:ff:c7:99:80:03:e7:47:7a:b8:a4:44:0d:73:5f:
         45:1d:8c:e0:70:57:b3:66:2f:f5:38:a6:1f:bc:6b:8f:9b:c0:
         bd:d7:00:6e:1e:ad:86:5c:26:cb:64:4b:4f:76:b8:84:ae:b5:
         10:56:88:77:e3:53:b1:66:89:91:bf:27:7f:72:f1:23:73:08:
         c2:e7:15:ec:82:cc:2d:62:65:3a:12:4f:fe:f1:e1:4d:3a:7f:
         82:d8:a2:e5:af:f1:fe:b5:74:bf:37:7b:e3:a6:4e:8c:ef:55:
         cb:68:af:1b:45:94:60:1c:ee:05:a0:8d:cb:e5:c5:d0:3f:ec:
         0a:c1:84:30:38:56:3d:65:be:60:17:71:c8:2e:96:31:89:65:
         42:f8:f8:5a:d5:28:f1:bd:53:63:ca:88:dc:4d:9a:53:f6:8c:
         0e:b6:26:19:96:61:26:51:e8:b3:ca:12:9c:d5:50:dc:1b:d3:
         66:1b:8e:31:34:ee:b7:e4:3e:d3:a6:7e:95:51:c6:bb:f1:65:
         92:c4:3e:39:f2:8d:29:17:47:bb:e7:4d:30:01:68:c4:a4:10:
         a9:7f:11:09:56:2f:5d:fa:6c:6a:23:5e:83:13:ce:3f:26:50:
         a8:c6:c8:e9:17:cc:49:16:15:c6:a4:72:97:6e:da:94:42:8b:
         7f:59:65:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:21:27 2026 by rpki-client