Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa
File:                     6e64de75-625f-33df-9cb2-c04d2570367c.roa (raw, json)
Hash identifier:          4SnoTIPvRZt0T7al+IxaBKdYEq0IgRx2YwF0qdmhzNI=
Subject key identifier:   38:21:E2:9F:8C:AB:83:E2:C2:72:1D:BA:61:87:A4:F8:F1:9C:A2:53
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA797CEC1DD3A5C3801FD9600
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     60594
IP address blocks:        38.56.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:ce:c1:dd:3a:5c:38:01:fd:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=50757d4e-96f9-49bf-a0c3-c21bbf40cb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:94:a8:a7:76:b4:99:f1:ee:e2:da:34:db:56:
                    3f:81:d0:84:af:4a:bd:30:15:0c:9e:04:07:ef:e3:
                    13:20:6e:37:f9:e9:4c:0b:77:ec:f7:90:31:f2:96:
                    1d:fe:10:29:28:57:2a:6d:73:ca:97:1e:73:ea:0d:
                    35:3e:85:33:86:87:3e:b5:c8:c9:83:44:ec:e1:7b:
                    74:32:16:30:c9:18:e0:22:e8:87:7d:26:fc:e9:5e:
                    4d:55:2a:09:37:8e:17:9a:ad:4f:2e:d4:9a:8b:c2:
                    bb:98:5c:ef:c2:11:ac:09:43:d2:b5:35:23:a2:e4:
                    4e:a2:3d:b4:cd:ab:97:8c:37:81:97:53:06:db:bc:
                    03:e4:f2:fd:ed:ce:81:a3:57:11:b2:2e:15:b0:11:
                    ae:6a:c7:43:d5:d5:ba:23:07:57:f5:93:46:a9:19:
                    e3:73:ca:ab:e6:8a:0f:b8:e7:47:02:01:e9:12:fb:
                    47:ac:9e:6e:90:b6:33:35:ee:b8:4a:67:0d:a6:b0:
                    73:26:2d:ac:14:94:a2:01:86:5e:63:3b:65:3d:bb:
                    e5:d0:90:e6:9c:46:fd:20:11:d5:69:81:d5:75:8d:
                    32:49:3b:9a:80:b2:82:55:e0:8a:e0:67:ab:4e:11:
                    ad:08:49:b2:55:a3:5f:4a:ff:2e:a5:59:8d:76:d8:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:E2:9F:8C:AB:83:E2:C2:72:1D:BA:61:87:A4:F8:F1:9C:A2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/6e64de75-625f-33df-9cb2-c04d2570367c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.56.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:10:03:69:40:19:aa:8a:a3:8b:04:30:2f:51:cf:e7:17:7b:
         7f:cf:1e:40:36:f6:30:50:0e:f3:6c:2e:56:a3:fd:60:45:06:
         b1:61:95:d8:77:0f:b9:40:69:f7:7b:5d:f8:fe:be:e8:85:07:
         cd:c8:42:9b:2c:d3:5c:06:d5:5a:1b:58:e3:bd:97:66:01:74:
         23:8e:6d:43:fc:78:a7:43:f7:c3:93:a9:bc:07:86:9a:09:53:
         25:5d:e2:ed:a6:a3:d6:4c:33:3b:34:bf:d3:b2:82:d7:05:a8:
         34:bf:a9:bb:76:c3:f2:80:fb:62:f8:50:8e:f9:cb:d8:e0:b7:
         f5:e1:ae:50:21:57:22:27:56:87:33:93:4c:b2:b2:9c:60:55:
         96:b1:5f:12:74:ba:57:61:04:39:05:c8:5b:81:bc:94:c1:8c:
         30:d2:14:d8:2b:2a:fd:60:36:fa:41:21:6c:40:b9:62:a4:b6:
         1f:8a:46:59:4f:df:d3:d8:2e:94:c2:24:1e:ba:0c:c7:f8:6c:
         99:6e:5e:98:48:f7:1c:a4:1f:cc:95:ee:0c:73:c4:ce:5c:c1:
         2a:a5:54:83:4a:6c:62:c4:8f:ff:06:0d:3e:de:88:bd:65:c3:
         b9:e0:21:f7:da:b0:3d:77:1f:10:08:75:d7:64:30:9e:95:72:
         0b:da:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:48 2026 by rpki-client