Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80823d63-9a51-3e1c-8c97-1d74be9a716f.roa
File:                     80823d63-9a51-3e1c-8c97-1d74be9a716f.roa (raw, json)
Hash identifier:          ul75XcnqNFoJKqGSuYgGaRy1sn5Jm9jI3MsL8RkaF5c=
Subject key identifier:   02:C9:17:9C:37:81:43:9A:91:6B:AC:57:3B:35:BB:A0:B6:16:EA:42
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F10379BD317CDE81280A3C620
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80823d63-9a51-3e1c-8c97-1d74be9a716f.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     46477
IP address blocks:        38.64.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:9b:d3:17:cd:e8:12:80:a3:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=e6a11f21-bf2f-48d8-b417-0bf575df2e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:b4:fa:e5:2b:cd:d9:05:f1:75:94:e1:22:
                    cb:67:4e:92:5e:8b:4c:b8:5e:03:5c:9d:d2:86:5b:
                    62:78:78:da:aa:e9:12:8e:0d:fd:9e:aa:59:70:02:
                    45:4f:af:87:ee:6e:60:c6:7a:83:8d:0c:40:85:bc:
                    8b:ea:c1:33:e8:79:64:d6:66:f3:e2:67:32:d7:c6:
                    7e:5e:03:50:c6:2c:9a:61:0a:c2:30:78:92:2f:a2:
                    5b:16:61:89:43:14:20:9a:f2:f3:49:4c:a3:89:bf:
                    0c:a7:6b:d8:e2:75:1b:9a:51:7c:a9:2c:40:fc:54:
                    0d:0c:06:fd:cf:1c:63:19:35:86:d3:7b:11:71:6d:
                    38:dc:b6:e6:9b:58:bc:0e:b6:06:99:80:0c:68:4c:
                    6a:e4:5b:44:83:39:77:34:c7:56:a2:83:7b:8b:10:
                    f5:da:c0:40:21:cd:39:e1:77:d8:52:08:50:40:50:
                    82:fc:08:04:25:16:0a:35:21:f1:da:a4:97:c7:e8:
                    3e:1e:37:ef:ff:15:04:55:76:13:38:d5:28:ff:0a:
                    51:5c:f9:ec:a3:72:56:87:23:09:cf:40:36:63:2e:
                    41:02:4a:7c:af:48:0c:d8:29:a2:5e:31:de:34:32:
                    56:35:5b:c6:3e:ef:46:1f:7d:6f:04:51:a1:ae:3a:
                    a5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C9:17:9C:37:81:43:9A:91:6B:AC:57:3B:35:BB:A0:B6:16:EA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80823d63-9a51-3e1c-8c97-1d74be9a716f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.64.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:3a:1e:b3:b5:d9:4f:ce:61:5d:91:55:07:6d:a3:3c:fb:
         b4:5f:c5:38:bf:e4:0f:7d:d3:b6:35:3a:06:76:b3:3b:7a:98:
         99:0d:94:6d:0a:97:80:5c:b9:82:89:c5:75:52:9f:59:57:8d:
         95:5c:da:ca:32:3a:21:8c:92:6c:85:0f:3e:28:13:95:36:0e:
         ba:91:c4:26:7b:c3:48:12:7a:73:5b:0b:04:76:e9:1e:a2:bb:
         8d:4f:11:46:b3:74:e8:e9:d8:e1:9d:80:be:9b:29:ab:89:10:
         ed:97:fd:11:d5:87:1c:05:36:02:30:b0:74:0c:69:db:25:a7:
         ec:d6:b3:44:6e:f5:e6:6f:2e:7a:b3:b1:5b:2f:b0:67:2f:0e:
         d7:8a:9f:86:a7:92:59:f5:95:21:d1:85:ca:7b:4c:08:4a:f0:
         6b:6e:12:27:16:85:28:dd:ce:34:f4:10:a5:79:48:a4:3d:19:
         59:47:36:e2:93:7d:65:a7:7d:4f:00:c6:bc:b9:b2:b2:46:1b:
         d0:72:d5:82:8f:93:da:dc:d5:49:21:e7:cd:06:f2:f1:e6:d5:
         fa:aa:10:97:f0:40:ac:fa:02:6d:54:5e:c0:72:d4:1d:bf:6b:
         3b:fe:97:e2:f0:38:da:13:bf:b8:24:94:d1:ab:56:f2:57:56:
         ef:f4:bb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:32:45 2026 by rpki-client