Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa
File:                     701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa (raw, json)
Hash identifier:          mzO50G0HadFQo4SA8rh70BHyf6QZ8Rd8cSfPpI9XhyA=
Subject key identifier:   BD:34:93:6F:2E:82:15:AE:71:CF:F0:26:7B:DD:ED:6F:F5:A5:CB:51
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC7A1C07F31D084E5D1D33D20
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     203217
IP address blocks:        38.3.184.0/24 maxlen: 24
                          38.3.228.0/22 maxlen: 24
                          38.3.232.0/21 maxlen: 24
                          38.51.140.0/22 maxlen: 24
                          38.199.252.0/22 maxlen: 24
                          154.43.166.0/24 maxlen: 24
                          154.43.176.0/22 maxlen: 24
                          204.157.176.0/22 maxlen: 24
                          204.157.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c0:7f:31:d0:84:e5:d1:d3:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=66c6e365-95ae-440e-b22d-6ec566a26052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:e9:a0:d7:47:42:26:90:99:4e:d5:b3:37:
                    7e:fc:af:df:eb:e0:f1:05:8a:da:44:54:42:70:76:
                    73:2a:7e:f9:0b:4b:48:80:b9:c1:57:70:80:24:fb:
                    8f:ed:71:30:95:6b:57:08:44:2f:d0:51:bb:73:33:
                    4b:c4:8c:36:ad:08:fe:df:d0:09:44:13:65:2b:bb:
                    2e:77:28:fc:a4:fb:a6:52:00:f8:00:53:b7:69:87:
                    d0:98:68:47:77:5d:6f:69:03:af:8e:a6:8c:a3:85:
                    0d:a9:6f:ef:dc:a4:57:aa:de:61:93:4b:0b:33:8b:
                    84:d2:97:07:77:39:fd:9c:f7:71:af:63:ba:e2:d5:
                    9d:26:48:b4:c0:d7:18:12:57:5d:18:a5:d2:c4:1d:
                    b6:11:66:1d:d9:f1:a1:b6:ea:a3:dc:67:b5:0d:a7:
                    f1:9d:5b:4e:74:02:07:d0:d7:a4:f7:02:71:b5:b1:
                    ba:1d:66:68:15:fb:da:96:30:3b:f2:86:52:f6:ce:
                    66:7a:0d:d8:9b:c1:e0:6c:cb:9c:e5:40:ce:e5:74:
                    31:f1:d2:22:a6:fc:a5:e0:d5:90:f2:c9:43:9a:0f:
                    04:99:75:a9:72:69:8e:84:c4:5a:36:34:72:14:66:
                    e2:0c:fc:bc:28:02:ff:1c:29:f8:21:15:3f:01:78:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:93:6F:2E:82:15:AE:71:CF:F0:26:7B:DD:ED:6F:F5:A5:CB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/701027ec-c46d-339f-8ff6-fbfc2ff16c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.3.184.0/24
                  38.3.228.0-38.3.239.255
                  38.51.140.0/22
                  38.199.252.0/22
                  154.43.166.0/24
                  154.43.176.0/22
                  204.157.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:8f:09:4a:29:e2:1f:f3:ff:6a:b7:b1:77:3e:86:4f:98:
         8c:ef:d3:74:41:f3:9e:01:13:4b:23:16:47:8f:97:73:6e:a9:
         1b:ba:34:13:cf:fe:d2:d6:94:7a:63:44:2b:0e:2d:0b:cc:33:
         57:d3:29:f1:d9:56:32:bc:d7:3c:85:36:c3:f9:29:f9:23:70:
         d3:26:6b:c8:a5:25:ae:57:cf:5b:2a:5b:b5:0d:50:7c:da:cf:
         bb:a3:9a:5c:cd:c9:1e:7d:df:79:4a:8b:05:b2:83:06:82:23:
         15:86:2a:64:ac:4c:f9:25:b8:31:23:e6:f3:c6:03:0b:83:1b:
         c4:80:5d:ad:58:98:d4:01:87:2c:74:bd:2c:3c:6d:60:f7:06:
         50:2c:63:a6:6f:54:63:8b:1e:80:ca:d1:aa:a9:2c:6f:bd:c3:
         12:cf:36:1e:bc:32:08:a8:10:39:61:45:1a:fb:8c:6f:03:42:
         72:fe:37:29:2f:1c:ca:29:45:54:1c:88:cd:49:90:2c:75:a3:
         bb:66:19:2f:c3:fb:f5:00:cb:39:4b:58:af:ec:51:cc:de:d7:
         27:76:8e:0c:2b:99:98:53:64:52:55:9c:4f:38:45:d0:15:5d:
         da:27:87:2e:e9:74:ec:dd:00:2c:ee:9f:98:08:ec:19:ed:5d:
         fe:48:d4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:14 2026 by rpki-client