Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65308d37-7b25-3e89-8b7d-450e9ecf1cc0.roa
File:                     65308d37-7b25-3e89-8b7d-450e9ecf1cc0.roa (raw, json)
Hash identifier:          ZNFc0iADVOvM/rT4eFl0/4kgXSMHAojyxK0atWqbbLk=
Subject key identifier:   8E:CE:8C:B7:DF:23:D1:11:2C:91:28:EF:C4:21:F1:7B:26:12:49:D8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E36970C3FB825ADDA7AA11F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65308d37-7b25-3e89-8b7d-450e9ecf1cc0.roa
Signing time:             Thu 18 Jun 2026 14:06:30 +0000
ROA not before:           Thu 18 Jun 2026 14:06:30 +0000
ROA not after:            Wed 16 Sep 2026 14:06:30 +0000
asID:                     215595
IP address blocks:        38.15.17.0/24 maxlen: 24
                          38.15.18.0/24 maxlen: 24
                          38.15.19.0/24 maxlen: 24
                          38.15.20.0/24 maxlen: 24
                          38.15.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:97:0c:3f:b8:25:ad:da:7a:a1:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 14:06:30 2026 GMT
            Not After : Sep 16 14:06:30 2026 GMT
        Subject: CN=acee96b6-3189-40b6-b617-ac529ed99ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:95:be:46:6d:61:ea:9e:c3:aa:f5:37:08:af:
                    ea:ea:b8:73:ce:92:6e:58:fa:b0:fc:c6:0f:79:3a:
                    ff:fa:1c:12:c2:f8:be:53:46:f9:01:00:a2:60:ef:
                    17:dd:4a:38:d3:aa:8c:cc:86:ce:6c:c4:1d:dc:71:
                    b2:81:3a:e6:91:60:50:03:da:81:f4:ff:0b:bf:41:
                    00:d1:43:c3:8c:60:df:c7:f0:b3:4d:e4:fd:23:d6:
                    02:14:00:7b:6c:ad:99:b0:51:fd:55:de:c7:98:f5:
                    d0:ac:bd:5b:19:50:98:9d:db:b2:30:1b:28:02:67:
                    de:5c:02:b0:67:e4:34:b6:09:1b:92:e0:ac:44:49:
                    e8:91:9c:56:eb:55:d1:08:e9:66:f2:74:c9:6f:f1:
                    78:2e:5e:77:91:c0:44:0f:37:a1:04:cb:b7:ff:22:
                    46:73:78:ea:37:a3:58:18:40:05:e2:8e:0c:ba:b1:
                    ef:2a:af:14:91:0d:b9:61:5a:4c:b9:f2:e1:01:d3:
                    8d:75:9d:1f:1a:dd:e6:11:b7:82:42:2a:92:4a:78:
                    57:a4:25:7c:46:c3:dd:21:8a:89:fb:05:97:08:71:
                    4e:7e:a0:02:8d:36:d7:8d:35:f6:6c:b2:64:28:99:
                    3e:bf:3c:6a:d8:dc:82:0c:73:21:2b:66:74:5a:96:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CE:8C:B7:DF:23:D1:11:2C:91:28:EF:C4:21:F1:7B:26:12:49:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/65308d37-7b25-3e89-8b7d-450e9ecf1cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.15.17.0-38.15.21.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:46:70:7a:1f:6e:8b:f9:64:69:30:a8:e8:b7:d0:b7:49:f1:
         8d:41:84:6a:de:55:f0:ac:d3:49:07:8b:4a:87:be:a4:ef:c0:
         5f:b3:39:f2:18:5f:fa:96:6c:62:84:b7:4d:76:7a:97:f8:2b:
         67:1c:58:0f:45:7e:2e:1f:b7:26:56:b9:8b:fc:0f:1d:af:08:
         d4:b1:96:f9:79:dc:43:4d:f7:dd:3d:1b:78:91:60:a0:b8:d8:
         94:f1:9d:be:e5:fe:40:ca:46:b6:e5:28:b8:e0:51:51:98:0f:
         78:bb:ff:22:83:7c:91:fb:e0:1b:68:f0:ca:5f:38:26:a7:44:
         ae:f8:0d:b1:ae:16:af:f0:ab:0f:bb:e6:e6:d7:25:d0:7c:fb:
         7a:7f:b6:48:c2:2b:ac:27:0a:12:f4:0c:ef:76:2a:ae:7f:8d:
         3a:5b:cf:2a:08:4b:45:31:c7:4c:08:22:08:46:1f:da:dc:7a:
         70:2a:1c:73:7a:e3:a2:06:c3:84:bf:1e:e6:7a:4e:bc:29:a4:
         53:4e:b6:14:6e:29:ba:84:a9:b4:ed:dc:a1:3f:30:85:48:c9:
         8e:10:c6:c9:9f:d4:45:59:79:f9:70:73:97:e7:f8:69:b7:88:
         2a:39:a0:5b:19:f2:b4:28:0f:fc:de:48:22:09:de:e9:0f:83:
         c9:5a:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 17:08:54 2026 by rpki-client