Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78d4486f-7f7c-3d0d-9069-32b012a70513.roa
File:                     78d4486f-7f7c-3d0d-9069-32b012a70513.roa (raw, json)
Hash identifier:          KPpmNQm30zNQ9CgMmlcq5iJOeHkhROpeMDTJb3kNAvo=
Subject key identifier:   8D:B6:7B:DB:38:3D:01:E8:82:B6:C0:C3:66:78:B0:56:A4:3D:EF:AD
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED9C7673A84DBE1B3A8DD6A00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78d4486f-7f7c-3d0d-9069-32b012a70513.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     213285
IP address blocks:        38.199.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:67:3a:84:db:e1:b3:a8:dd:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=0d70af7f-e442-483f-af47-f25977d311a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ad:8a:c6:32:9a:d7:6e:61:9e:7e:c0:af:bf:
                    28:d9:9e:4e:d8:13:95:e0:f0:78:c5:d1:2e:d1:a2:
                    9d:e2:fa:2c:cd:9e:84:9f:c0:d9:e2:03:9e:6f:44:
                    49:38:14:e2:f0:62:7c:d5:14:02:60:2b:a3:7b:b9:
                    c0:b9:b6:34:83:ee:2d:13:5e:60:a7:52:d9:27:c9:
                    e5:10:77:88:55:fe:39:43:0b:1e:cc:b5:be:9e:d6:
                    e5:b8:34:ee:d5:8f:ee:e1:cc:19:43:b4:d4:cd:9d:
                    bf:db:69:0a:4b:c9:d5:d2:95:4a:35:0d:78:d8:91:
                    90:0c:a2:4f:42:6d:8b:8b:c9:11:d9:a2:0a:cd:3c:
                    ba:90:6f:c3:1e:0d:10:ba:57:0a:57:10:22:f7:ff:
                    ce:89:9f:ed:ff:a6:a1:17:f7:c8:5e:ab:f7:f1:c1:
                    2f:06:a4:58:6e:81:82:e3:74:56:3d:d4:e3:ef:ca:
                    85:52:7c:e5:bd:3b:f0:1b:48:3e:bc:9c:e1:3f:2a:
                    c0:24:49:58:25:c8:7a:a8:d2:da:10:ad:09:49:0f:
                    10:be:21:75:b6:e4:4d:d0:3c:0d:2e:2e:96:62:61:
                    6d:48:78:78:72:e6:b7:5a:52:d4:0d:d2:4e:cc:ee:
                    aa:9a:e6:8a:5b:50:f5:53:f0:e6:5e:2b:f0:af:51:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B6:7B:DB:38:3D:01:E8:82:B6:C0:C3:66:78:B0:56:A4:3D:EF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78d4486f-7f7c-3d0d-9069-32b012a70513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:7a:44:47:fc:48:6f:05:27:43:93:71:9c:91:99:34:76:
         84:5d:6b:1d:40:f5:03:f5:b1:45:d0:fe:8e:18:5c:28:63:e3:
         06:f0:bd:45:8c:77:a6:53:ac:15:e4:51:4a:48:f2:95:d3:13:
         2c:f9:e1:c4:81:21:37:02:5a:6c:12:4f:05:e6:bc:7f:a5:51:
         02:6d:c0:5f:50:f4:a4:3f:ad:de:6d:b7:dd:d0:51:d7:ca:1a:
         df:9b:28:1d:14:8e:6a:da:56:c3:f7:4a:9c:20:be:4e:c8:b4:
         e3:2c:38:80:39:cb:b2:89:1d:57:19:c5:a3:7f:ca:1e:a7:86:
         c9:cf:d5:6d:bc:14:09:bf:0d:3d:81:38:60:64:24:85:cc:05:
         14:79:55:72:e7:bb:2d:8b:7e:19:4c:db:65:95:11:56:2b:3a:
         85:51:31:20:3b:d0:0e:9c:02:cc:2e:bf:17:a5:86:5e:28:89:
         af:e8:4d:e9:19:1f:3a:68:5c:c9:f2:d2:f0:c0:75:5b:7a:dd:
         51:f8:ae:d0:2c:e7:d7:e1:2b:c0:3b:52:bf:e7:9f:56:85:e3:
         95:d5:dd:ec:47:c2:e9:bf:f5:d5:f2:8d:07:b3:0c:bf:6f:84:
         70:84:f7:7a:63:6c:2c:29:eb:3c:7b:d8:e1:4f:8a:84:de:81:
         8c:c7:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:34 2026 by rpki-client