Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/93d9704f-7d5e-3d6f-8e82-ce568ff862aa.roa
File:                     93d9704f-7d5e-3d6f-8e82-ce568ff862aa.roa (raw, json)
Hash identifier:          ielrWyUoZP4Pw12vSjtcLT3XyS5zbmkyU7oa18fOaNM=
Subject key identifier:   93:C8:03:43:54:15:B0:69:6F:C8:C2:FB:2E:DC:A3:BB:22:34:DB:8A
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F71ED7BB09D82636321989740
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/93d9704f-7d5e-3d6f-8e82-ce568ff862aa.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     140026
IP address blocks:        38.50.166.0/23 maxlen: 23
                          38.172.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7b:b0:9d:82:63:63:21:98:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=805e372d-689a-4804-a569-348755e22d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:4c:7c:17:d7:68:fd:3a:60:bd:99:37:1c:
                    f5:77:7b:09:90:61:10:e7:ad:2e:c7:42:cc:82:f2:
                    d7:f4:e6:b1:f6:36:aa:2c:c5:6a:85:6e:43:fb:fc:
                    44:dc:9e:91:e3:bb:e6:5d:24:32:2c:ea:74:55:2d:
                    85:6e:09:91:7f:7b:dd:08:a4:59:69:f0:78:64:5d:
                    3e:46:d1:dc:75:f9:a1:0b:2b:fc:54:e9:ad:fc:73:
                    ac:6c:86:dd:7f:2e:84:65:2b:41:b7:c5:bd:d7:e2:
                    c5:0b:56:02:5d:76:9f:d4:24:7f:30:dc:19:95:19:
                    8b:d9:cb:4c:b1:d9:ae:34:37:ca:4c:21:ca:eb:f6:
                    d3:e2:fb:3d:6e:de:33:fe:45:b4:71:f3:c5:9a:0e:
                    d7:e7:7c:b7:f9:f3:1a:8d:dd:37:b9:a6:75:9e:95:
                    c4:92:18:94:89:71:1a:90:fa:04:14:f5:91:f3:73:
                    fb:06:02:87:7a:21:b3:80:4d:63:64:d9:b3:78:47:
                    2c:45:c2:72:d9:0e:0a:ff:04:73:7c:09:7c:43:fa:
                    0e:54:e9:ed:df:4c:47:2f:81:9f:dd:40:1f:42:e7:
                    be:25:dc:b4:f8:61:e2:cd:c2:3b:05:f3:15:fc:3b:
                    d0:f8:c2:c2:ee:36:de:3f:3b:5b:9e:c3:61:18:2e:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C8:03:43:54:15:B0:69:6F:C8:C2:FB:2E:DC:A3:BB:22:34:DB:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/93d9704f-7d5e-3d6f-8e82-ce568ff862aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.50.166.0/23
                  38.172.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1a:eb:05:85:89:b5:f4:77:fa:61:08:10:82:e6:43:d8:6f:
         4c:b1:84:db:32:6b:bc:52:84:d3:50:e5:31:4e:38:78:35:8c:
         6d:33:35:af:40:9f:b4:3c:77:8b:30:9b:9a:4a:96:4f:a0:35:
         64:23:e4:96:51:b8:48:85:91:41:a6:37:4f:39:0c:f9:80:f7:
         01:f5:be:4f:66:b0:70:a2:b4:fb:06:69:02:1f:0f:21:68:e9:
         79:36:6e:7f:0a:42:55:f8:3b:93:b6:4d:46:42:54:89:f2:4b:
         d3:ea:65:03:a2:12:3a:96:8a:ad:b3:85:af:56:a6:0d:cb:24:
         3b:ea:d8:00:73:6b:0f:ba:ab:cb:ea:0b:1c:f4:b0:60:c9:8f:
         81:1d:77:a8:70:f2:08:41:19:fb:af:7b:ca:ce:1a:4c:1d:cb:
         92:fe:df:66:86:23:97:ba:25:be:00:56:7a:be:4e:54:16:f9:
         2c:c2:db:63:b9:70:8f:31:2c:72:10:a9:b5:30:51:c5:eb:4f:
         15:18:66:1d:78:b6:02:a8:5e:88:78:17:38:f1:bb:8c:af:d7:
         15:e3:34:c1:31:1e:02:99:0d:b4:35:6a:f7:64:f1:a5:07:aa:
         d0:aa:45:f7:fa:8c:ed:a5:a2:0b:53:6d:7e:e3:5e:12:bb:2a:
         d0:73:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:52:23 2026 by rpki-client