Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73274868-0d85-31cc-a495-9ffd40f096af.roa
File:                     73274868-0d85-31cc-a495-9ffd40f096af.roa (raw, json)
Hash identifier:          fJ66593PEU5qdrN7gvlDs30Ej6cul8StF0090z2i1TQ=
Subject key identifier:   61:C4:D1:5A:94:E1:3C:DA:AC:57:D0:8A:E0:8F:3D:33:2E:2E:92:5D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FA27F79F6BCA0C4D01D358D60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73274868-0d85-31cc-a495-9ffd40f096af.roa
Signing time:             Mon 26 Oct 2026 22:33:15 +0000
ROA not before:           Mon 26 Oct 2026 22:33:15 +0000
ROA not after:            Sun 24 Jan 2027 23:33:15 +0000
asID:                     273263
IP address blocks:        38.77.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:7f:79:f6:bc:a0:c4:d0:1d:35:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 26 22:33:15 2026 GMT
            Not After : Jan 24 23:33:15 2027 GMT
        Subject: CN=ac42d6d6-04db-4e20-ba32-bdcf881fb4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:79:cc:56:42:d7:87:c9:9f:4c:0e:b6:4e:
                    6d:c1:49:37:ec:8f:dd:3f:49:34:63:8b:cb:05:35:
                    76:ad:ba:3b:81:ab:ae:8d:ec:96:ef:82:f2:6b:10:
                    96:14:d0:2c:7b:cf:a2:92:0a:60:6b:62:cf:e9:91:
                    af:26:72:06:75:c1:47:4f:77:8e:e7:aa:4a:92:41:
                    2d:21:42:c2:f6:97:f7:64:ef:12:af:ad:51:c9:fd:
                    9b:54:14:e2:61:02:89:3e:5b:47:9c:97:15:48:b2:
                    a3:d8:0b:9e:9d:4b:35:e4:39:71:b7:45:bb:7f:d2:
                    4d:ba:ec:82:f9:b7:7d:de:fa:f6:c1:ca:12:2b:e7:
                    4a:1e:4f:09:1e:5c:f3:48:03:ca:21:68:f3:37:0d:
                    ad:f0:56:c9:71:05:dc:2c:83:50:07:79:6e:4d:cf:
                    f1:e7:69:4d:32:b5:e4:1b:58:05:5b:6b:1d:71:03:
                    86:ed:8f:d2:8c:15:e4:22:cb:1a:80:df:1f:ac:4b:
                    23:4f:c1:30:f0:56:86:aa:d5:54:be:00:f5:2f:0e:
                    d2:59:8b:f7:b3:b7:d8:f1:38:cf:f7:cc:3a:9e:0d:
                    6d:2d:1b:8f:0b:48:b5:ab:a9:bb:49:0c:7f:7e:81:
                    db:52:10:af:b0:21:26:85:17:9e:8d:58:e5:86:80:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:D1:5A:94:E1:3C:DA:AC:57:D0:8A:E0:8F:3D:33:2E:2E:92:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/73274868-0d85-31cc-a495-9ffd40f096af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.77.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2c:31:07:61:dd:2a:16:f3:b2:9f:db:84:43:8f:b4:ce:a5:
         cf:90:65:0d:30:f2:2c:64:b2:8f:9c:2c:52:1e:d4:38:9f:22:
         d6:21:73:44:0e:57:65:04:2b:59:ca:40:c3:34:06:ef:7b:41:
         d1:97:48:e6:e2:70:60:90:e3:51:29:0a:4d:67:52:d4:7b:08:
         32:97:69:5f:71:70:d6:51:cc:8f:5f:de:6b:89:89:d6:0c:15:
         c2:2c:e8:7e:4c:31:4b:63:99:31:bb:8a:15:a4:48:5b:11:5b:
         fe:88:48:e6:21:70:38:b3:89:84:86:e9:34:b4:bd:aa:83:02:
         50:31:ac:b9:64:b8:01:f3:b1:e6:bb:d7:a2:6f:8a:58:fb:b6:
         d1:93:c9:1d:b2:9d:a9:16:e7:21:14:6d:db:4f:57:1e:b6:49:
         cd:6f:3e:1b:fd:4c:c9:f1:8c:b7:dd:f7:9d:ef:b6:8a:a1:e4:
         48:4c:68:e3:5e:05:b6:be:51:13:33:d1:3c:87:e9:8c:94:4c:
         de:ef:2e:ae:f1:bb:70:38:d5:1f:76:c8:be:b5:48:c2:63:c8:
         34:3c:1f:25:1b:fc:47:7c:8e:32:73:0b:ed:85:18:b1:9e:6c:
         f7:a9:ad:15:eb:ac:9b:ca:b8:94:51:1c:ef:db:df:dd:e5:35:
         8e:9a:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:09 2026 by rpki-client