Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77effaf1-f0c7-3144-bbc9-4b7da26dd56f.roa
File:                     77effaf1-f0c7-3144-bbc9-4b7da26dd56f.roa (raw, json)
Hash identifier:          8DXrOKd+2smZt/+9GK4SeD2U+tq+Z/c9RexclhK9430=
Subject key identifier:   88:D3:74:A0:F9:5A:C4:D6:F2:AA:9B:59:C6:C4:65:79:34:8B:A4:B8
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D11A7CF9E32E58EBAB4A39200
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77effaf1-f0c7-3144-bbc9-4b7da26dd56f.roa
Signing time:             Fri 06 Feb 2026 02:00:30 +0000
ROA not before:           Fri 06 Feb 2026 02:00:30 +0000
ROA not after:            Thu 07 May 2026 01:00:30 +0000
asID:                     18801
IP address blocks:        38.102.120.0/24 maxlen: 24
                          38.102.121.0/24 maxlen: 24
                          38.102.122.0/24 maxlen: 24
                          38.102.123.0/24 maxlen: 24
                          38.108.64.0/24 maxlen: 24
                          38.113.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:a7:cf:9e:32:e5:8e:ba:b4:a3:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb  6 02:00:30 2026 GMT
            Not After : May  7 01:00:30 2026 GMT
        Subject: CN=8f880a16-7303-4631-9f6c-e17119ea3299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:30:5e:1b:e7:7a:8c:20:85:e7:85:d9:bc:
                    46:81:d6:16:dd:c1:0d:12:91:f0:87:2f:0a:3c:75:
                    ad:08:1a:b2:9d:75:35:4b:64:05:4d:40:44:e8:19:
                    e3:a1:f1:1c:d7:7a:e6:67:67:70:e0:3d:3d:c9:e8:
                    0d:9a:5a:1c:e9:bc:19:93:f2:9f:94:bd:e0:91:8b:
                    5e:d4:bc:7e:4e:c7:68:ab:b5:26:d5:86:02:48:ae:
                    e6:a1:ae:7d:fb:93:ba:49:d8:35:cc:af:58:e7:fb:
                    91:b6:69:38:e5:67:38:b7:9e:e9:19:14:16:24:23:
                    df:36:27:c7:eb:09:36:74:fe:02:92:aa:52:ed:9c:
                    09:e7:0b:58:4d:6a:80:83:db:7e:59:19:36:08:46:
                    aa:5a:af:33:6a:f0:8e:59:26:f7:88:df:ff:b1:55:
                    f3:21:12:9d:5d:f9:08:5c:52:b6:81:29:de:8d:a7:
                    df:16:ce:94:f4:19:3d:09:e5:59:9c:b8:d3:88:55:
                    7c:15:2f:7c:e7:48:9e:37:c1:ac:20:f5:87:0e:94:
                    2f:f0:60:67:d7:38:41:2c:f5:c8:d5:e4:c8:48:5b:
                    e8:ec:9f:d1:d8:7a:65:51:82:b9:6d:55:be:1b:ca:
                    74:9a:1a:ec:32:91:19:0a:a1:77:60:2f:b7:e7:0f:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:74:A0:F9:5A:C4:D6:F2:AA:9B:59:C6:C4:65:79:34:8B:A4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/77effaf1-f0c7-3144-bbc9-4b7da26dd56f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.102.120.0/22
                  38.108.64.0/24
                  38.113.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:e3:a1:05:5b:e7:e3:e9:8c:33:87:3d:35:6c:d5:d8:f6:26:
         05:ba:e7:c7:d4:30:2d:e6:6a:a1:9c:5e:e6:4e:fb:b9:55:a1:
         7a:30:6c:3b:5f:fa:22:56:a9:9b:36:dc:6d:68:7c:d0:d2:9c:
         12:e3:c6:f9:40:65:fe:b0:87:4e:b0:f3:a6:45:51:ff:dc:d7:
         35:5c:78:1d:76:66:8e:84:4e:0d:13:a5:74:1b:0f:fb:92:e4:
         5a:be:bd:e2:59:93:c0:fc:3f:5e:c5:46:32:7c:6d:e0:2d:25:
         32:a2:2c:b4:84:13:6c:34:d3:49:05:81:de:c4:2a:83:d5:f6:
         fe:d6:47:39:07:77:6b:49:31:5b:b8:a2:99:ef:bb:48:2f:22:
         b0:47:d3:a0:7b:54:6e:73:f4:14:13:c5:5f:3b:01:ad:80:16:
         eb:6d:40:fc:2c:49:ba:e7:be:30:43:60:eb:c3:b7:9b:b5:33:
         4c:d3:78:35:4c:b1:ee:d4:26:89:90:4e:f5:3e:12:91:ae:a9:
         c2:ff:36:f5:be:ab:65:42:05:9b:66:52:67:4e:9f:f5:43:0b:
         9e:42:38:38:74:4b:f5:69:94:72:9f:8b:b5:e0:c4:ec:45:f0:
         56:85:06:1e:21:40:2e:45:a2:9a:b2:5b:97:24:c1:55:e1:1c:
         92:5b:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:25:23 2026 by rpki-client