Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708063f0-f192-36c4-806b-3985604d1288.roa
File:                     708063f0-f192-36c4-806b-3985604d1288.roa (raw, json)
Hash identifier:          PTWyOIYXgU4eCVNErDlQFoRQERfVGTCcLTGqOUdCcZI=
Subject key identifier:   A7:34:45:08:94:8F:DF:6D:62:EF:90:AA:18:30:76:87:59:19:8E:BC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F7E7E0C829828AD02B2E6C300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708063f0-f192-36c4-806b-3985604d1288.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     273930
IP address blocks:        38.156.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:0c:82:98:28:ad:02:b2:e6:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=63bb3617-e02c-4f60-99ac-34b5fc2c826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:eb:ac:5b:cb:27:d4:40:fa:e0:d6:72:55:b6:
                    39:05:83:d9:07:53:6b:d6:49:10:eb:26:c5:1b:8d:
                    8b:0b:b0:34:63:ca:11:c1:ad:17:00:7d:50:64:8c:
                    36:5b:d1:aa:89:b0:5a:4e:38:c2:f4:c4:d4:f6:6a:
                    b6:b7:ed:16:5e:b6:77:03:c5:a3:3a:d4:35:2d:42:
                    ca:23:33:c6:e3:55:01:14:10:67:59:dc:f7:e7:aa:
                    c4:c6:56:52:72:27:7f:07:67:a2:be:94:22:13:a7:
                    bb:55:c9:a7:ba:36:eb:f6:36:86:08:9a:f4:bd:9a:
                    7c:07:6b:69:f5:bc:56:c7:a9:55:b3:d6:03:6d:d0:
                    d4:8f:16:6c:7e:4d:1e:6b:3c:ff:29:8b:1d:01:15:
                    6a:09:2f:d7:4e:29:d2:1e:f1:c7:85:8e:dc:f0:96:
                    e1:52:79:ff:9c:2e:a6:10:47:d6:8c:1c:8b:9b:85:
                    ff:cb:39:a0:02:f1:89:e1:66:18:f7:f5:00:36:cb:
                    14:66:92:b7:b8:81:95:a6:0e:04:6e:f0:b9:fd:5c:
                    b8:68:34:7c:a6:9a:48:ff:ed:25:52:99:c2:ed:23:
                    5f:32:a6:d1:d0:72:17:b1:46:48:99:8f:38:bc:82:
                    d1:d6:76:3d:1d:21:bd:b1:3d:ea:83:e0:b6:72:64:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:34:45:08:94:8F:DF:6D:62:EF:90:AA:18:30:76:87:59:19:8E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/708063f0-f192-36c4-806b-3985604d1288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.156.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:09:94:5a:53:56:47:22:36:9e:17:5b:75:02:9f:e1:06:d2:
         71:f7:d5:33:d5:ee:7b:93:72:c0:df:f9:a8:22:2c:fb:11:b6:
         67:7e:b8:c5:cc:7d:73:dd:b2:b4:60:c6:c4:2e:33:e2:e6:dc:
         a5:5d:8e:7b:aa:c9:b2:aa:56:24:81:7f:55:4c:e9:39:e4:b8:
         e3:36:27:f6:e1:79:15:64:5a:0c:9c:6e:f6:d8:db:41:26:9f:
         6c:87:a3:de:1e:d2:61:d5:c9:70:87:52:5c:9a:30:17:b3:7f:
         79:59:24:a7:7a:ad:e5:04:b6:ee:9c:e0:00:60:d0:a3:7c:70:
         7f:4b:49:9e:ae:e9:4e:9e:51:51:c2:c1:87:d2:2b:3c:d5:92:
         4c:04:c6:e5:d5:44:c2:e2:fe:b7:07:65:5c:03:53:08:33:41:
         f8:e1:9f:cd:83:a6:1a:59:58:a9:e0:6a:3d:d7:f5:d8:cf:f3:
         f7:e7:ca:77:54:45:91:19:64:f9:c8:87:8a:ed:7d:f0:a6:94:
         0f:e2:3b:9e:8d:40:cd:ba:9e:76:3d:34:93:02:6a:f8:6b:7b:
         72:8b:6c:b4:7c:ac:43:4d:73:67:ee:d3:b6:47:a7:af:46:cd:
         25:a3:df:e2:60:94:c3:14:7d:0a:45:46:44:31:5b:0a:de:ac:
         7d:72:74:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:31:21 2026 by rpki-client