Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6b04b399-664a-386d-ac9c-43aa3d4971ed.roa
File:                     6b04b399-664a-386d-ac9c-43aa3d4971ed.roa (raw, json)
Hash identifier:          XCJIHWqYdvldCyrbwmT11Za9q1ZJ22G5NhjuJ6A5Jjg=
Subject key identifier:   47:5D:BA:27:03:25:46:CF:CF:3D:65:E9:FC:0F:AE:A4:C8:16:E3:C6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F9FFDBF87A533AD62F80C2900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6b04b399-664a-386d-ac9c-43aa3d4971ed.roa
Signing time:             Mon 26 Oct 2026 01:00:13 +0000
ROA not before:           Mon 26 Oct 2026 01:00:13 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     0
IP address blocks:        38.78.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:fd:bf:87:a5:33:ad:62:f8:0c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 26 01:00:13 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=01c4ff24-73a7-4901-acd4-a7efd0ee169b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:40:a2:f4:16:99:47:dd:17:ec:d6:e2:7d:
                    3f:3a:44:82:cd:12:b6:7d:83:da:8a:49:0b:41:15:
                    5d:d6:5b:7a:e6:0c:ff:89:1a:2b:6f:d6:9b:e0:3f:
                    c2:77:51:25:b3:70:a0:bc:95:76:c2:b5:fb:87:d5:
                    58:5c:fa:b8:e5:3a:e9:71:14:c0:da:96:39:b1:1e:
                    b5:38:65:2b:4e:fa:0c:a7:ab:27:68:7e:72:bc:b6:
                    f1:f8:db:28:0f:1f:51:20:80:86:14:a4:54:94:c7:
                    c9:55:33:47:d4:1e:16:d7:92:01:a4:a0:6f:6e:ea:
                    d4:4d:90:f1:f1:51:78:84:66:04:52:41:44:3f:9f:
                    a1:0a:b1:9d:08:ea:50:47:01:62:19:b2:4c:95:fe:
                    8d:1c:fd:fd:a1:40:b5:31:37:36:55:38:9d:b5:a2:
                    9a:53:e1:4b:dc:f1:21:4b:d6:a9:99:92:78:60:94:
                    4f:a7:84:37:1f:ae:2c:56:ca:0e:41:96:62:57:76:
                    3a:bb:62:25:10:9d:0a:18:e7:61:80:2f:3a:3f:62:
                    43:da:ca:42:c4:85:3c:78:7f:a0:88:b6:4d:7a:48:
                    8f:f5:fa:1a:43:e5:f0:e3:47:7c:7d:35:c5:53:f6:
                    58:a5:43:f2:d6:76:29:1e:6a:fd:22:6b:af:02:c7:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5D:BA:27:03:25:46:CF:CF:3D:65:E9:FC:0F:AE:A4:C8:16:E3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6b04b399-664a-386d-ac9c-43aa3d4971ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.78.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:6c:ab:46:39:20:cd:b4:15:2a:e1:20:dd:d2:9e:62:f0:
         d9:89:63:97:2f:d1:04:83:39:1a:82:13:50:87:90:4e:48:af:
         1e:ae:63:e8:b5:4d:1a:7d:e0:2f:7e:fe:44:01:f5:40:21:a3:
         5c:d0:c2:7d:e8:fc:37:7a:8e:e9:cd:52:84:02:a4:d9:17:9c:
         9e:69:8a:57:ea:25:c2:11:fb:e1:a4:c3:a0:ab:53:98:77:b0:
         a9:87:69:27:72:b2:d4:13:20:72:7c:8f:2e:39:2e:a8:c2:ec:
         c1:e3:9e:db:44:09:5c:d1:35:d9:68:e8:74:c3:af:bc:43:ba:
         be:f4:61:ad:61:ca:51:77:f7:8c:d0:64:c0:81:66:f0:dc:d3:
         19:70:f2:ce:51:d9:c7:d6:f4:f7:5b:87:7a:6a:87:0c:b4:06:
         7e:3b:f5:f5:b9:63:c8:2a:41:de:5d:4c:33:7f:a1:d7:98:d9:
         fd:d5:99:4c:b4:92:79:b2:5e:42:e2:ce:65:7d:d5:8b:52:2e:
         51:d0:86:09:bd:81:2e:47:ce:c6:5f:8d:6b:62:6c:f5:f0:1d:
         57:c0:e3:ff:15:02:81:94:b1:3e:40:ea:d4:9d:f1:da:84:cc:
         cb:82:1c:59:50:b4:a7:19:aa:f4:3d:37:9c:60:7d:b1:dc:e5:
         03:51:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:16:00 2026 by rpki-client