Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/620ff479-9fdd-360a-b95b-518d744cb361.roa
File:                     620ff479-9fdd-360a-b95b-518d744cb361.roa (raw, json)
Hash identifier:          zElTGWqd4cMvNDVsQj1GgM74PAByERp+h0a3roc03qk=
Subject key identifier:   02:9D:21:E7:A0:DF:44:34:28:37:BC:54:1D:5C:08:EE:85:96:C8:29
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F5CFD55BD3B0AE9A0D50C36C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/620ff479-9fdd-360a-b95b-518d744cb361.roa
Signing time:             Fri 02 Oct 2026 01:00:12 +0000
ROA not before:           Fri 02 Oct 2026 01:00:12 +0000
ROA not after:            Thu 31 Dec 2026 02:00:12 +0000
asID:                     23954
IP address blocks:        38.100.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:fd:55:bd:3b:0a:e9:a0:d5:0c:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  2 01:00:12 2026 GMT
            Not After : Dec 31 02:00:12 2026 GMT
        Subject: CN=66d610ce-3a17-4cdf-9f61-088be4b99575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0a:a8:d5:e9:86:73:17:63:5f:90:13:ca:40:
                    e9:01:18:a1:f2:9e:df:fc:68:2d:f0:c3:d1:2c:07:
                    81:59:7c:36:9e:6e:b3:5c:e5:9c:e6:ef:16:25:c6:
                    65:a6:df:f5:34:73:7e:49:cf:49:98:73:62:48:21:
                    13:96:fd:de:f0:82:00:4e:96:c1:16:1f:17:1a:f6:
                    f2:ca:f8:39:07:d3:59:bf:c3:01:8c:5f:07:86:dc:
                    ae:fc:4f:f8:96:e7:14:88:9f:4c:97:5a:c9:ef:64:
                    36:cb:a7:fe:83:45:e9:e9:81:d4:c2:f9:a5:6b:90:
                    e5:d8:5d:74:a6:a6:a5:d0:13:e4:09:16:97:bb:a5:
                    1d:10:90:0e:30:a2:9c:74:51:95:4d:a3:a0:87:48:
                    36:48:5a:39:ec:01:54:1f:c8:83:aa:7b:c6:90:5c:
                    a3:8e:83:b0:7a:6a:17:08:8e:33:22:a1:5f:46:85:
                    2b:1c:01:64:00:9e:a4:ee:4b:e4:9f:6b:e0:db:33:
                    93:2c:83:ad:19:91:89:6d:29:89:09:3f:b5:f2:19:
                    47:75:e2:41:c9:8b:e0:8d:89:ed:0a:7c:99:1f:86:
                    cb:d0:49:7d:b5:3f:a1:3d:88:e6:c3:63:df:20:a0:
                    8a:4d:ce:2b:58:dc:16:de:6d:55:67:ba:be:d7:62:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:21:E7:A0:DF:44:34:28:37:BC:54:1D:5C:08:EE:85:96:C8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/620ff479-9fdd-360a-b95b-518d744cb361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.100.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:33:b6:d8:73:93:18:e0:12:46:a0:ad:87:88:75:4b:0f:b2:
         d4:2d:08:0c:31:e6:9c:09:da:63:83:79:26:a1:49:d9:fa:b7:
         f0:2e:69:b5:7b:1a:81:be:4d:6d:3d:0d:15:e3:cb:b5:21:51:
         7e:e7:c5:b7:c7:a8:62:2e:f2:a4:38:47:25:7e:dd:dd:55:82:
         5d:c2:ea:b7:5b:a1:6a:76:d2:49:bf:b4:f0:44:d3:61:f1:8b:
         e8:9b:c1:99:af:fe:3f:6d:2e:7d:7b:55:b6:d9:d8:ef:90:74:
         da:db:0d:93:57:84:83:5e:37:7b:9e:85:2e:8f:30:36:7e:a4:
         cc:d8:ca:7d:11:58:1a:87:10:85:e2:43:23:ff:33:19:2e:15:
         db:d1:34:b5:36:51:45:e2:72:10:d9:a0:ef:8c:7e:6a:e8:83:
         13:eb:c3:62:49:b2:3b:dc:43:c7:61:da:30:48:16:d7:fa:5d:
         46:20:ae:be:3c:95:87:0a:75:1e:a4:54:1f:ac:1b:7b:cd:11:
         bc:a0:fe:e4:1f:26:50:ad:79:74:fb:f4:86:ed:e0:73:36:bc:
         ce:91:6b:8f:50:56:01:e1:15:01:5f:75:85:6d:40:eb:65:df:
         6e:83:ff:16:98:b0:3f:39:f6:a8:c7:1e:1f:b7:0f:80:c7:ac:
         4b:77:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:33:15 2026 by rpki-client