Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a7998a-3f05-307f-900b-98448172dc55.roa
File:                     80a7998a-3f05-307f-900b-98448172dc55.roa (raw, json)
Hash identifier:          CSyuEzlj9Y2cVaG9XyRKWpndVS1dUpm3/Vl3jf5Pip0=
Subject key identifier:   A5:92:89:62:47:B4:02:32:CB:B5:21:71:74:F7:9F:54:01:2F:3B:B7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DA54AC19731CA8F50A478A380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a7998a-3f05-307f-900b-98448172dc55.roa
Signing time:             Mon 27 Apr 2026 13:00:30 +0000
ROA not before:           Mon 27 Apr 2026 13:00:30 +0000
ROA not after:            Sun 26 Jul 2026 13:00:30 +0000
asID:                     272345
IP address blocks:        38.51.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:4a:c1:97:31:ca:8f:50:a4:78:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 27 13:00:30 2026 GMT
            Not After : Jul 26 13:00:30 2026 GMT
        Subject: CN=b2922166-aac0-4331-bdf4-b0cfb3e4fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:63:60:5b:10:31:c2:d8:b0:6b:83:fd:b0:
                    98:c9:f6:67:e7:08:e8:25:aa:5b:3f:5c:e9:90:b5:
                    c7:dd:02:c6:ec:19:58:8a:3a:0e:9d:04:4d:88:14:
                    94:83:59:aa:48:2a:cf:97:c2:8b:d1:24:4b:31:8c:
                    18:0d:3f:7a:ae:f3:7b:6f:d5:6f:fa:a9:96:47:92:
                    9f:45:aa:1d:ac:ee:6e:b5:7e:f3:78:1f:f4:b6:d7:
                    c0:3e:b6:3b:46:49:8c:af:90:8a:5c:bd:5d:67:f4:
                    48:72:47:8c:ac:e8:09:83:55:02:a9:2c:1a:f3:d7:
                    53:8b:9f:d8:e7:8c:eb:15:b9:9f:32:ed:99:7f:a1:
                    88:31:b5:5a:05:e7:fb:f4:69:25:2b:52:ea:f8:72:
                    9b:25:a3:b5:db:0c:e4:f2:3e:3b:4f:2b:85:a1:c2:
                    f7:37:24:44:4d:97:4c:2b:c9:13:f4:5a:a6:ef:79:
                    c7:87:69:3e:0d:35:02:8f:43:e3:ce:80:6f:82:12:
                    68:04:16:1e:2e:f6:9f:b4:bd:a5:d7:4f:2f:35:93:
                    4f:f6:31:09:43:11:29:8c:59:a0:7d:7a:65:75:57:
                    dd:16:68:bb:48:9d:1f:f3:02:c6:a5:2e:68:f5:bd:
                    51:aa:d6:0f:a1:3f:0a:f4:94:4d:7f:2d:6a:e6:f7:
                    b2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:89:62:47:B4:02:32:CB:B5:21:71:74:F7:9F:54:01:2F:3B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80a7998a-3f05-307f-900b-98448172dc55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.51.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:08:9c:66:32:0b:0a:0f:3d:e6:8f:43:47:e9:cf:c5:20:78:
         8d:0d:da:ff:8f:f5:c3:16:00:b0:15:ea:6f:c3:30:0b:27:52:
         93:0d:aa:69:d5:6a:22:a9:e4:6e:d2:f6:66:10:cd:57:2d:2d:
         a8:6f:28:e1:b3:05:48:cc:32:1e:a9:67:0c:c7:b9:6d:fe:45:
         2b:9b:bb:76:76:b4:2e:ba:a5:8b:21:f9:52:bd:3f:24:f0:0f:
         82:29:24:f6:95:f3:3e:ea:b4:5e:77:03:5b:55:1c:99:86:ec:
         7c:36:85:e0:93:ff:00:b9:5d:27:9b:71:60:45:fa:bf:77:dd:
         4d:76:7b:6d:dd:8e:f3:d7:24:61:a1:ee:a0:5b:ba:a3:c4:06:
         cb:c3:c4:0a:5b:f3:c3:26:c5:eb:1a:6a:42:6a:f9:a8:1d:42:
         26:36:6d:05:7e:23:4e:66:06:df:42:70:fc:ec:1e:74:9c:67:
         f3:ce:44:b0:6a:6a:12:a7:62:b8:fe:8b:0d:ed:63:80:56:75:
         88:ff:a7:81:49:33:be:99:8c:e9:6b:4e:ee:88:d1:bf:e4:cd:
         ab:95:8b:d5:09:f7:0f:72:27:13:c2:4a:29:c1:97:d8:e3:19:
         f4:14:f1:ad:53:e5:c5:ce:88:5a:79:1a:a1:4a:bf:00:63:5f:
         ea:88:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:14:55 2026 by rpki-client