Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa
File:                     84840b0a-e228-38dd-87c4-2a9194fb0372.roa (raw, json)
Hash identifier:          44Hhu7Ui+H7jeOg07z60MsqUmKs0D3kQs2NTr+CmT24=
Subject key identifier:   DD:67:1F:7D:B9:50:12:B7:62:29:E1:07:75:12:1D:19:7C:82:7D:C5
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F8DD897480DB04B676F920D80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     262231
IP address blocks:        38.21.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:97:48:0d:b0:4b:67:6f:92:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=ccb2cf4b-d1dd-4c7e-88f0-7d957ab8d4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:44:fd:f6:42:29:d6:29:6b:8a:17:5a:fd:
                    fc:ad:80:89:f3:68:e1:aa:e2:48:dd:96:d2:d7:11:
                    47:6f:c9:6c:f9:f7:f1:ca:c7:83:46:c6:5b:40:ce:
                    13:49:f1:f6:a8:e9:92:48:e7:df:8d:b7:3a:cb:f4:
                    c2:1c:77:6c:5c:3f:ed:e6:23:85:96:35:0c:d6:1a:
                    c7:b2:76:48:28:2c:80:d0:e7:d7:9b:6a:1a:08:a6:
                    00:73:5b:a7:ef:ab:0e:65:c9:c7:2d:e1:a2:ab:1a:
                    c3:42:83:fc:78:ed:31:bd:5f:51:59:dd:fc:44:7f:
                    34:3f:72:81:8c:df:a5:f6:e4:a4:90:22:5d:85:22:
                    4c:33:26:76:54:89:09:11:2c:b0:a5:65:c4:4a:6e:
                    da:9c:ce:e1:ec:b0:c4:0b:f8:3f:21:24:80:03:0f:
                    45:8f:e4:87:36:67:af:93:3a:a0:4e:b5:1b:b4:5f:
                    79:10:4e:1a:02:34:89:17:1c:a5:f6:63:77:a8:32:
                    0b:1f:f5:64:53:4f:a5:6c:24:49:86:e1:67:05:56:
                    de:fd:88:46:80:1e:1f:6b:f9:ee:33:b8:85:11:cc:
                    74:e6:98:b2:9c:f3:9f:97:69:c4:aa:f6:a8:19:c0:
                    ac:fe:7c:8c:ee:80:fb:90:cd:9a:ca:5b:05:ca:78:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:67:1F:7D:B9:50:12:B7:62:29:E1:07:75:12:1D:19:7C:82:7D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84840b0a-e228-38dd-87c4-2a9194fb0372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.21.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:68:39:2c:da:1d:5f:9c:42:6c:7e:67:6e:41:c4:1b:6d:
         36:29:09:5b:8e:c1:d8:6a:b3:18:75:a3:a5:88:41:d3:65:f2:
         3e:1a:f6:b8:9e:d5:65:14:49:17:f2:85:35:0c:16:41:60:f7:
         42:42:f5:4c:9f:29:77:00:ce:f0:62:5c:76:e1:25:56:e4:77:
         ae:bf:4a:d6:60:31:e0:c8:ce:1b:0c:99:cb:12:0c:b7:5b:12:
         d9:0e:4c:1a:14:ee:1a:0e:ac:df:e1:a4:2a:f5:17:23:b9:73:
         f9:8d:2f:83:90:b5:ff:67:3a:4f:64:be:b1:75:de:35:e6:ad:
         f1:69:29:87:0f:44:fe:30:f0:1b:66:be:5b:64:18:3b:19:90:
         0f:e7:19:8d:6b:8b:3e:2c:0f:32:71:9a:60:4c:65:f9:a4:3a:
         a3:f7:5e:97:03:e3:4d:ca:3c:38:f7:71:1e:5b:0d:08:4d:d9:
         74:17:a0:e6:81:8f:5b:85:26:2a:cb:f8:d3:60:c3:8f:6a:76:
         ee:d6:52:c4:b3:c0:89:8b:37:52:a3:8c:ed:4a:cb:42:0c:c3:
         ea:fd:64:fb:7e:c2:49:fd:ff:34:8b:8e:4f:14:c4:01:3e:d0:
         df:b8:59:2b:87:06:83:6a:ee:b3:a8:f6:2e:43:47:c8:79:a9:
         bb:01:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:14:48 2026 by rpki-client