Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71f7d526-864c-344b-83ef-58a57f77948c.roa
File:                     71f7d526-864c-344b-83ef-58a57f77948c.roa (raw, json)
Hash identifier:          jLI8slyv6MHXiUazmFSSylk62ysFApyLCGcZgw2zS+8=
Subject key identifier:   F3:76:1E:2E:C2:EF:BD:0E:64:96:EC:9F:86:C1:A1:AF:95:11:2E:E8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F20F7B555892B334643497BA0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71f7d526-864c-344b-83ef-58a57f77948c.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     4581
IP address blocks:        38.2.232.0/23 maxlen: 24
                          38.2.234.0/23 maxlen: 24
                          38.2.238.0/24 maxlen: 24
                          38.45.192.0/21 maxlen: 24
                          38.69.28.0/23 maxlen: 24
                          38.110.178.0/23 maxlen: 24
                          38.110.180.0/24 maxlen: 24
                          38.110.181.0/24 maxlen: 24
                          38.212.0.0/18 maxlen: 24
                          38.255.128.0/18 maxlen: 24
                          154.36.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b5:55:89:2b:33:46:43:49:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=ee97d2b6-4d2c-4e70-87fc-da6d36da7be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:ee:b0:de:d3:0b:09:6d:d2:ab:51:fb:4c:
                    12:2f:66:18:d9:a6:bc:bb:c7:c2:4a:d3:0f:40:f5:
                    64:0c:e1:5c:29:43:d4:35:7d:d8:0a:f9:47:45:4b:
                    ce:44:8e:2a:fd:05:0c:b4:47:27:2e:08:d3:dc:3f:
                    61:28:24:c1:f8:21:d1:da:a8:a5:6a:b7:a0:04:56:
                    48:4d:19:66:5b:d1:54:42:bc:ca:d7:2f:64:2c:04:
                    c4:b2:e3:0f:da:47:fa:66:d6:b6:57:5b:53:3c:e5:
                    4d:27:5f:14:e8:ce:ba:ba:38:00:08:d6:03:c1:ab:
                    02:15:fe:ac:b7:64:c0:e4:07:70:9d:14:6e:96:9d:
                    4b:85:f9:ae:b6:a9:b1:65:da:84:0f:77:78:0f:a8:
                    02:f7:17:81:06:a5:9c:2c:d4:45:04:c4:4e:7b:a2:
                    b4:58:49:74:da:98:70:58:78:f5:99:19:05:ac:fe:
                    60:99:24:3c:f6:ad:ee:69:a5:e9:5b:24:27:ba:50:
                    d0:54:9b:b5:02:8b:9e:a4:25:4d:d9:12:ce:55:35:
                    f3:41:35:5b:21:3b:7c:aa:a1:67:28:d3:ef:bb:39:
                    5b:7c:d9:85:78:ed:de:9c:fa:0c:0a:80:ce:21:f3:
                    ac:7e:9a:bf:79:f1:46:19:4e:35:02:4c:3c:5d:24:
                    a2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:1E:2E:C2:EF:BD:0E:64:96:EC:9F:86:C1:A1:AF:95:11:2E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/71f7d526-864c-344b-83ef-58a57f77948c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.2.232.0/22
                  38.2.238.0/24
                  38.45.192.0/21
                  38.69.28.0/23
                  38.110.178.0-38.110.181.255
                  38.212.0.0/18
                  38.255.128.0/18
                  154.36.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:16:b8:92:94:1f:19:ce:de:76:e5:ff:62:0a:3a:53:68:78:
         1f:1a:f2:2e:81:ac:d6:94:f8:5f:c2:1a:31:fa:b5:c5:ff:35:
         d3:0d:c3:4f:f6:2f:3a:f9:1f:cf:a4:68:dd:08:14:b0:d9:ab:
         c3:73:51:21:06:e0:6d:7a:4c:7a:2d:08:47:33:22:d3:8d:4f:
         a5:0f:e4:22:66:fa:71:5e:c9:5b:50:57:75:fa:91:4a:0a:ab:
         f7:3a:87:71:37:80:bc:07:cc:b3:9f:a1:da:b4:9e:78:15:ed:
         1d:fb:e6:a8:78:2c:c9:75:6d:f7:d3:09:f0:a1:0b:de:34:fa:
         cc:4b:60:b9:3e:94:c3:ed:1e:cf:e2:b9:7a:cc:dd:03:a4:82:
         46:50:b8:2f:c1:2e:79:23:db:59:18:15:3d:7b:d8:2c:a8:23:
         70:f2:60:34:3d:63:df:96:90:47:78:0d:df:39:e0:d7:e5:f2:
         34:7b:9a:e1:37:04:02:64:33:e4:7b:42:63:b9:53:dc:3f:70:
         1a:4c:be:e7:98:86:b5:dd:44:a1:63:e9:95:8f:88:68:ea:2a:
         67:a4:a5:9b:0f:b9:a9:fb:96:ee:e5:00:4f:a2:ef:a9:6b:20:
         53:62:8b:99:bd:f4:d2:27:85:fa:55:58:c4:ba:6b:d5:c6:64:
         e8:68:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:52 2026 by rpki-client