Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa
File:                     6d341148-1697-3ccd-917e-03a6d8534e41.roa (raw, json)
Hash identifier:          iascYo73lqF0RSrEPk5668G5Fn4uojy4beUM9THiQGE=
Subject key identifier:   25:C3:7F:9C:C0:90:A7:3C:EA:0F:34:2A:DB:05:CD:C4:32:F6:CB:6F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F0B5DF53B0FD36C13573B3A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa
Signing time:             Wed 02 Sep 2026 19:18:39 +0000
ROA not before:           Wed 02 Sep 2026 19:18:39 +0000
ROA not after:            Tue 01 Dec 2026 20:18:39 +0000
asID:                     0
IP address blocks:        38.183.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0b:5d:f5:3b:0f:d3:6c:13:57:3b:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  2 19:18:39 2026 GMT
            Not After : Dec  1 20:18:39 2026 GMT
        Subject: CN=673de9ac-695d-479c-9175-322bf2302931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:7e:82:54:0f:af:d9:e0:f1:54:cc:e9:e5:
                    aa:cd:99:00:64:b9:7f:ee:79:ca:92:62:7c:4d:b8:
                    a6:87:c4:b5:90:db:06:eb:b7:b6:45:0b:fb:c3:24:
                    70:7a:ec:ea:16:55:9d:c3:95:a4:ae:f3:d3:3d:c2:
                    36:68:9c:08:9e:08:7f:b7:40:cf:36:ff:d3:56:07:
                    64:11:61:6b:52:35:28:4f:fa:1a:12:5e:a5:c7:b7:
                    b4:34:ed:66:14:64:c5:1e:e5:6e:1b:66:0d:a4:2b:
                    c0:bb:9c:96:77:04:38:a9:6b:68:46:0d:65:ca:b2:
                    c6:15:2b:bb:23:d6:24:f8:3b:0a:1f:92:ab:d0:89:
                    34:2e:17:85:03:dc:92:2c:95:0a:db:d7:4d:82:c0:
                    3c:9c:ad:e2:a8:2d:bc:cf:e3:f8:f2:a5:01:5f:87:
                    1f:76:3c:30:c0:99:2e:3d:5b:43:48:83:c8:25:93:
                    05:48:dd:47:3d:ab:b9:d0:8d:a9:a7:a3:aa:8a:68:
                    65:df:f5:50:79:87:00:41:92:5d:67:4f:99:12:38:
                    85:a1:b6:64:89:17:39:fb:4a:1f:81:17:db:44:a5:
                    5c:4f:e6:80:94:3e:f2:75:06:75:75:4c:8e:37:01:
                    0c:23:d3:87:03:24:aa:c0:b8:4d:f8:15:b5:a5:b6:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C3:7F:9C:C0:90:A7:3C:EA:0F:34:2A:DB:05:CD:C4:32:F6:CB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6d341148-1697-3ccd-917e-03a6d8534e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.183.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:93:bd:86:fe:52:a0:d0:44:77:33:ea:37:53:52:f1:fa:a7:
         19:18:7f:8d:68:d1:7b:ae:63:db:5f:35:03:77:28:3a:65:01:
         3a:5c:b1:32:ff:14:9f:1a:03:f9:77:d9:b2:18:1c:f1:1c:28:
         63:e6:36:e1:a4:e4:e6:f9:87:47:db:a4:28:9e:41:90:fc:ed:
         f1:37:11:90:3f:bf:13:d8:b2:ba:72:bf:72:ed:a2:e2:7c:e1:
         13:2e:7a:17:3a:bd:6f:1d:1b:5b:b1:8f:e7:a4:18:e2:35:a9:
         9d:62:4c:fa:11:0a:d8:b4:bc:20:df:ec:1c:b7:0c:f7:d7:a4:
         2a:cc:0b:95:31:bc:c8:c1:8e:47:b7:57:be:95:63:75:a3:ef:
         8c:c6:4a:08:2b:6c:eb:ca:3f:44:fa:15:41:bc:9e:35:5d:df:
         33:a8:a6:8f:74:b9:01:c5:1a:d1:65:a6:c2:e2:ef:8f:59:77:
         b2:fd:fa:e9:e5:e5:b4:68:71:94:41:40:f7:c2:0a:75:bf:81:
         9b:6c:c7:b4:77:e0:be:60:6e:0c:b7:92:6e:37:57:35:c9:e0:
         3b:f8:79:82:d0:b3:18:90:b4:85:a0:5d:71:0c:3b:78:a4:17:
         f3:80:93:6f:bc:e6:34:2e:11:93:6a:be:bc:a5:a1:31:d1:71:
         0a:08:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:47:07 2026 by rpki-client