Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
File:                     88c3b85d-80cb-3648-8429-3a6687384ef5.roa (raw, json)
Hash identifier:          ksaqzrB5d/ZTjwVC2KXZtmnV/IGTi7sIq451Am/Y/Pw=
Subject key identifier:   18:41:22:0F:4E:80:8C:C1:BB:02:88:AF:42:0F:E4:87:5C:3D:B0:0D
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584CF94678C7B2C9A49E1C9898C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa
Signing time:             Fri 19 Dec 2025 22:49:47 +0000
ROA not before:           Fri 19 Dec 2025 22:49:47 +0000
ROA not after:            Thu 19 Mar 2026 21:49:47 +0000
asID:                     213971
IP address blocks:        38.67.22.0/24 maxlen: 24
                          38.68.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f9:46:78:c7:b2:c9:a4:9e:1c:98:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Dec 19 22:49:47 2025 GMT
            Not After : Mar 19 21:49:47 2026 GMT
        Subject: CN=fb80fde4-8ec1-4370-bed3-983467c5a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:c9:52:db:61:ec:44:bc:f7:c1:ad:b1:0e:
                    4a:61:23:df:86:23:31:7a:cd:3b:96:36:18:ae:18:
                    3f:a1:ee:01:87:8c:61:99:39:42:a5:61:1d:cd:69:
                    f1:86:8e:ea:9f:60:7a:39:77:8b:a3:20:d0:4e:33:
                    4d:9a:b0:f9:02:69:d1:4c:d8:ae:b1:2f:18:1c:ea:
                    b1:67:59:af:5a:44:b1:7f:34:87:5c:17:ed:20:6a:
                    59:2c:f5:0a:d0:dc:da:3e:96:bb:db:80:f9:99:76:
                    f1:df:99:36:4b:96:44:43:c9:9d:96:19:c7:6d:f5:
                    dc:d8:95:90:d0:4d:4f:be:18:3b:72:54:9f:28:96:
                    bd:0d:ea:b1:cb:03:d7:0e:ce:00:0f:c2:21:e1:f8:
                    b7:50:c9:18:7e:ca:19:33:7e:a5:34:90:44:1c:6a:
                    f3:66:11:38:b3:99:bd:25:d2:c3:b5:76:09:24:54:
                    74:1d:3a:d5:a2:87:f0:26:ce:bb:ea:7e:71:b4:7f:
                    5f:bd:7b:fd:06:d6:f4:72:6f:eb:11:3b:50:df:89:
                    a7:2e:cc:7b:8b:b5:4a:89:41:c4:0b:43:97:c7:2f:
                    1f:85:8e:e7:4b:2e:f8:b0:1d:d8:b3:94:dd:9c:a4:
                    e4:64:13:12:24:25:e9:44:f9:67:43:8e:3d:ea:57:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:41:22:0F:4E:80:8C:C1:BB:02:88:AF:42:0F:E4:87:5C:3D:B0:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/88c3b85d-80cb-3648-8429-3a6687384ef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.67.22.0/24
                  38.68.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:30:6b:da:8a:60:02:ab:6f:0c:23:10:ce:d5:8c:48:f6:7f:
         f8:da:43:5f:1b:41:a6:a6:b6:3e:41:03:fe:c0:6f:7e:25:fe:
         99:3f:e4:73:4d:e2:ab:ba:f3:e6:d0:a9:78:ab:9b:a4:0c:2a:
         dd:44:b0:90:23:e3:50:bc:44:b7:f3:18:80:55:5e:77:8f:92:
         2b:70:82:89:92:d2:bc:ba:eb:5b:29:ce:e7:db:42:25:c0:6e:
         24:9a:b5:96:bd:91:04:b0:bd:e3:40:2f:f0:f5:37:e8:34:cc:
         bd:57:b0:3e:69:92:6a:d8:57:39:88:19:d1:da:32:cf:f7:17:
         56:52:8f:e3:40:e6:49:33:1b:63:c5:15:be:96:18:3f:44:b0:
         73:ab:04:7f:67:b7:4f:df:ee:71:7b:d5:83:6c:77:b9:5e:b8:
         01:b0:3a:d0:a4:3c:99:74:1c:38:47:70:d0:65:e1:44:56:05:
         5d:e0:a9:d8:79:5e:f3:cf:fd:fa:70:34:cd:f1:a3:ca:25:8d:
         b2:2a:38:e0:02:dd:af:32:53:e2:12:c5:04:a4:99:ec:4d:f8:
         0e:00:00:2e:0f:92:a3:b8:38:3d:b4:fe:fe:65:22:91:1a:13:
         7e:10:7b:4d:06:56:ca:10:1e:cb:f9:97:74:26:49:54:14:17:
         02:72:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:14:11 2026 by rpki-client