Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa
File:                     877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa (raw, json)
Hash identifier:          UJCJTlOIoiGthkmSfZMjHUI1ZgL8QCXnlJgruwlqBI0=
Subject key identifier:   C1:70:E1:8F:2B:3C:44:45:27:FE:DB:35:1D:AB:F6:CA:41:0A:74:45
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EE392E8BC54FF830A5871B0C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa
Signing time:             Wed 19 Aug 2026 13:13:01 +0000
ROA not before:           Wed 19 Aug 2026 13:13:01 +0000
ROA not after:            Mon 16 Nov 2026 14:16:43 +0000
asID:                     275786
IP address blocks:        38.43.66.0/23 maxlen: 24
                          38.210.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:92:e8:bc:54:ff:83:0a:58:71:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 19 13:13:01 2026 GMT
            Not After : Nov 16 14:16:43 2026 GMT
        Subject: CN=7d596aed-2d0c-46a3-a046-f0f58f41ebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:de:cc:0d:76:55:40:2f:52:e0:25:83:bd:
                    5d:1e:93:9f:55:37:79:ef:e8:d6:06:ed:e8:3a:21:
                    cd:d4:52:32:f5:67:bc:39:11:18:be:1e:73:d1:ef:
                    2a:11:3d:20:b6:ff:55:0a:f8:7d:86:32:07:58:83:
                    5a:ca:e4:3e:16:47:f0:23:d5:cb:8c:cf:2a:9f:75:
                    6f:35:c4:03:74:1e:7c:43:01:4b:c5:ea:db:05:7a:
                    e3:b0:07:18:72:62:b9:96:97:7f:be:5e:51:ef:34:
                    76:79:53:14:bc:91:5c:de:5f:17:80:d3:e7:6a:81:
                    11:06:1f:c6:77:d2:78:3d:f4:25:5f:27:03:c8:0b:
                    5c:10:0e:1e:25:24:a2:6c:53:e0:3e:37:12:be:58:
                    23:29:cc:7e:20:c3:cf:bf:fc:df:41:52:eb:29:4d:
                    79:ba:e2:d4:7f:c8:df:a1:21:25:85:7c:28:55:a6:
                    06:7f:3e:0f:f0:76:03:1a:37:89:71:45:b4:04:f2:
                    5e:b5:bc:8b:17:bb:67:81:b7:c1:b8:c7:19:69:ea:
                    b1:be:b9:49:d5:3b:8d:1b:29:2e:19:b6:c2:9f:ad:
                    72:86:9a:86:7b:c9:6b:f1:69:59:35:07:ae:03:ed:
                    45:23:99:2c:96:aa:3b:ac:78:58:34:f0:9c:95:89:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:E1:8F:2B:3C:44:45:27:FE:DB:35:1D:AB:F6:CA:41:0A:74:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/877e6b9f-c5cc-37d9-b9f0-45bbdb53d233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.43.66.0/23
                  38.210.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:76:c5:8e:46:fe:77:0e:05:ca:12:d5:23:83:9f:96:d1:
         2c:ea:72:b0:0a:05:69:87:a7:f1:33:c5:0b:d1:c1:cc:4a:6d:
         c0:d0:73:db:63:54:97:9a:02:d6:ee:c6:29:4e:19:7d:b2:25:
         d1:84:30:de:17:33:6c:fe:af:8d:61:dc:7a:12:26:57:f2:ff:
         9a:62:fa:b8:20:1c:a6:2b:80:93:8a:5e:8d:ab:85:5e:24:77:
         74:48:e0:8e:ae:8f:65:a6:a9:07:db:c4:39:8c:06:50:37:cd:
         68:6e:fd:70:2f:8f:cc:bd:52:73:75:67:0c:b8:0a:9b:3b:1a:
         29:12:3e:cb:a0:ae:7b:7b:0f:9e:16:2b:d6:d8:d1:19:de:47:
         73:20:f3:46:32:07:00:33:c0:0e:3c:08:5f:97:02:46:7e:f9:
         82:58:25:fc:c2:ea:a4:8f:de:b2:27:fc:c7:6d:02:b4:23:d1:
         1e:cd:4a:3f:85:a8:fc:95:df:78:7e:90:ab:4a:f1:9d:aa:31:
         14:86:fd:45:8e:3c:21:35:e0:56:87:98:9f:e5:2a:9e:33:69:
         8e:3a:b0:10:c1:5b:a4:30:46:92:20:55:2b:7c:c8:a5:50:4e:
         34:fa:91:ca:f1:28:a6:f4:28:62:8b:7f:55:ab:df:82:87:eb:
         a4:a8:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:15 2026 by rpki-client