Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a149f84-be42-38f1-a34f-e35a10cc0cc1.roa
File:                     8a149f84-be42-38f1-a34f-e35a10cc0cc1.roa (raw, json)
Hash identifier:          L4sHIhnxwGjnIRSPXMDPxUVj89RWp7li94Ng8r1WWtM=
Subject key identifier:   C4:1E:8C:95:F5:7A:C6:AE:9C:F4:30:6F:1E:15:20:DE:44:F8:3B:62
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EBD4C2087695CD9D934435F40
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a149f84-be42-38f1-a34f-e35a10cc0cc1.roa
Signing time:             Wed 05 Aug 2026 20:09:41 +0000
ROA not before:           Wed 05 Aug 2026 20:09:41 +0000
ROA not after:            Tue 03 Nov 2026 21:09:41 +0000
asID:                     136336
IP address blocks:        38.21.68.0/23 maxlen: 24
                          38.134.138.0/23 maxlen: 24
                          38.188.180.0/22 maxlen: 24
                          38.224.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:4c:20:87:69:5c:d9:d9:34:43:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  5 20:09:41 2026 GMT
            Not After : Nov  3 21:09:41 2026 GMT
        Subject: CN=cbd08a7f-239e-4965-830b-f7e6cd69ddd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e5:b4:b6:2c:f4:9c:1e:f5:cc:fd:3a:8e:55:
                    77:51:e6:2e:00:33:49:ed:1e:de:2c:83:db:36:ff:
                    3a:2d:60:09:0f:c7:51:e7:61:18:db:d5:4a:09:cc:
                    ad:eb:be:2d:cd:46:b0:d6:b5:36:a6:a4:be:0e:45:
                    45:58:b2:9b:93:44:78:64:59:26:38:95:2c:c9:9e:
                    c8:ba:a6:2d:54:bc:64:91:6b:f5:bb:e9:9c:2d:a5:
                    db:67:65:37:79:58:f0:04:df:05:4c:fd:9d:35:db:
                    b4:e8:7d:56:64:a1:2c:b7:c9:33:bf:8a:29:e3:c6:
                    46:18:9c:a9:fd:e3:02:bc:f3:6a:95:e6:27:87:75:
                    83:d9:27:d5:d1:8d:db:62:dc:51:b1:c4:6a:bb:93:
                    d6:91:e7:44:1c:9c:17:58:7e:56:4c:bf:95:46:f6:
                    91:a0:88:8e:58:50:46:ab:02:c8:38:a7:07:fc:e3:
                    31:51:99:f8:58:a7:36:d3:1d:be:27:2d:63:5a:34:
                    89:89:da:cd:16:70:03:ee:88:4b:24:a4:8d:64:96:
                    46:2f:8a:b4:56:52:c8:a3:d3:02:b9:4c:19:dd:c9:
                    1d:f0:ce:73:54:5e:78:e8:84:9d:f8:7c:e2:02:2a:
                    9a:ae:55:30:18:f6:13:be:f7:91:2b:c8:bd:53:ee:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:8C:95:F5:7A:C6:AE:9C:F4:30:6F:1E:15:20:DE:44:F8:3B:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a149f84-be42-38f1-a34f-e35a10cc0cc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.21.68.0/23
                  38.134.138.0/23
                  38.188.180.0/22
                  38.224.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:87:6c:d0:1d:bf:94:60:0a:cc:54:83:e4:61:a7:bf:29:76:
         40:f2:fe:d4:2c:83:b0:e6:ad:86:e4:a6:cd:89:c8:53:12:16:
         d9:ff:2c:e4:51:cd:c7:f9:9f:b1:ad:80:f8:f1:30:8c:0a:54:
         be:c8:cd:25:14:6f:70:fa:22:6a:43:18:c1:9b:4c:63:ca:5f:
         5e:b0:5c:ed:3a:e7:c6:32:e0:f3:c2:dc:7f:b6:f8:9e:b7:8d:
         1e:8d:28:8a:3c:0b:63:eb:57:ca:e1:e4:12:ee:0c:1e:9d:dc:
         c0:a8:2d:cb:83:4f:84:01:83:1d:e0:78:b0:a4:f9:b9:3f:91:
         98:eb:6d:72:9d:97:28:6a:97:ec:7d:02:aa:df:be:23:85:af:
         b2:e8:4b:99:d9:70:d8:bf:00:d0:27:fc:3a:5a:71:44:d9:8e:
         b5:9d:80:bc:ff:cb:50:3e:31:ec:2a:4e:01:1a:6f:5a:6a:4c:
         35:24:7d:00:ae:5c:18:84:b6:00:56:10:0d:49:66:c0:fe:6b:
         f5:4b:41:98:00:a1:44:35:64:7e:81:4f:3f:2e:79:c0:9a:c9:
         5d:fc:34:e8:16:9f:6f:30:02:5f:4b:ab:75:b3:2e:10:71:7e:
         3d:12:49:19:db:e2:61:61:a8:fe:f6:fc:b2:4d:87:54:ab:16:
         90:a3:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:30 2026 by rpki-client