Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b2f6986-eacb-3f49-92a2-a152d0b36c0b.roa
File:                     8b2f6986-eacb-3f49-92a2-a152d0b36c0b.roa (raw, json)
Hash identifier:          EelwPPa4hW+oYuU8OElZY8rTr5rTmEg9REQGLoafRPY=
Subject key identifier:   51:AA:42:5B:D8:3E:3A:10:05:9B:95:22:8A:BF:1A:B7:9D:12:B1:AC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F78E82D728EDF7AB7FA51B800
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b2f6986-eacb-3f49-92a2-a152d0b36c0b.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     274068
IP address blocks:        38.247.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2d:72:8e:df:7a:b7:fa:51:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=a10ebdd1-ec51-431a-95b5-8766d7f0573a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:64:cb:11:53:46:0f:bb:7b:d7:d9:71:0a:
                    74:68:81:ab:ec:6e:f7:3e:c7:7c:62:9b:40:39:85:
                    a9:99:8a:0e:b8:cd:f3:20:a4:26:78:76:79:4a:90:
                    03:c2:e4:ce:78:75:e1:3d:4e:41:3f:ff:85:c5:f5:
                    21:66:7e:1c:35:aa:1f:e8:56:c0:d3:e3:59:a7:94:
                    9f:e6:d6:ea:b7:99:2d:c2:38:73:c2:eb:95:a3:dc:
                    a7:a3:89:69:df:38:4a:9b:05:3f:48:bb:0b:aa:43:
                    a3:05:fe:b5:47:44:2b:30:59:e4:2d:fd:e3:37:9e:
                    e1:3f:44:c8:00:b0:27:22:93:f6:a3:21:fa:ba:f6:
                    14:92:9a:12:e4:a2:54:6e:c1:bf:f4:7c:eb:b5:ee:
                    a2:d3:52:f0:72:d8:3c:82:c0:2e:c6:98:fa:1a:0b:
                    39:eb:c2:e3:4d:9d:1d:c7:57:2b:68:5d:9c:16:d0:
                    99:17:20:58:50:fd:26:a8:fd:26:57:3f:b3:61:4c:
                    8b:cb:fc:08:e1:f1:91:b3:c4:cf:b4:9d:c4:12:ad:
                    3d:61:38:6c:d7:0d:7a:69:d5:c8:0f:93:63:20:69:
                    54:a5:85:9a:fa:ec:c6:10:0d:88:cd:7c:f6:7b:97:
                    28:e9:f0:52:f9:aa:a7:9c:c8:6a:df:39:bf:87:47:
                    61:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AA:42:5B:D8:3E:3A:10:05:9B:95:22:8A:BF:1A:B7:9D:12:B1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8b2f6986-eacb-3f49-92a2-a152d0b36c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.247.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:96:ae:7b:30:85:bc:7a:8c:f7:a6:45:7a:b5:95:c1:34:
         59:03:4c:cf:ac:29:20:d9:f0:67:71:99:75:1a:31:09:e8:5d:
         6c:71:f2:e7:20:75:9f:5e:0b:54:eb:91:fd:b3:2d:24:c6:ea:
         3b:a0:db:ab:33:f0:ba:55:1a:07:39:f9:69:61:e7:43:af:fd:
         8f:50:19:07:6e:b7:92:06:c1:4f:0b:db:a3:f0:91:5d:be:b1:
         f0:12:2b:36:74:08:95:78:b8:cf:68:25:47:fc:e4:ea:cd:cf:
         16:25:df:f3:16:fc:2a:90:10:c0:bc:f4:03:7a:65:7e:db:a9:
         69:c4:2e:f2:09:61:87:07:36:b0:99:d1:c7:14:00:6d:7e:05:
         5c:49:a4:68:15:14:84:45:63:ce:1c:7a:de:f3:19:9e:f8:26:
         65:6e:1a:f3:00:21:20:19:61:b5:06:ce:3d:a4:fe:5a:f8:36:
         2c:bc:12:4b:16:68:9c:46:0f:c9:e1:94:46:45:51:c0:a0:ce:
         df:df:fd:a7:0f:54:c8:4d:66:3f:3b:fb:45:b6:8d:5f:98:2e:
         5b:3e:8f:ef:87:57:31:fc:da:a9:52:eb:bb:7e:36:dc:6c:c2:
         d3:4e:a4:67:fe:32:f4:3d:bc:9b:65:f7:0e:ce:89:54:c4:5c:
         e1:b4:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:43 2026 by rpki-client