Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9cae7e13-73ce-3d48-a3e2-d31f169260bc.roa
File:                     9cae7e13-73ce-3d48-a3e2-d31f169260bc.roa (raw, json)
Hash identifier:          HACQOJ78o+olFg1j36u2vH890KwEJlfLlYpwQMITJYE=
Subject key identifier:   17:45:AC:14:5D:34:01:1D:9B:72:65:96:A9:70:2E:21:F1:58:FA:2F
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA797D03876883183158F3F80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9cae7e13-73ce-3d48-a3e2-d31f169260bc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399438
IP address blocks:        38.84.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d0:38:76:88:31:83:15:8f:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=97fef2a8-0d76-4e4a-bf3e-c39fc3e92e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:b4:86:31:be:e1:68:7f:0f:77:78:4e:2c:
                    60:da:7f:02:48:7c:a7:9b:22:6e:e0:be:df:f2:10:
                    58:d8:a4:f2:bd:91:a6:98:2c:d2:67:a8:c3:a5:23:
                    a4:80:21:c1:21:fa:38:17:45:9b:e1:06:fa:ca:5b:
                    b5:33:8c:30:eb:40:6b:50:af:4e:5f:f5:f7:f3:39:
                    ca:89:43:a5:a0:6b:e6:ed:e1:ce:f2:ff:e6:37:e0:
                    80:c1:64:09:dd:00:a2:8f:2a:4e:bb:81:5e:71:6f:
                    74:de:8c:8f:f1:5e:2c:25:e8:d7:32:00:00:ed:ba:
                    ab:05:5a:04:a3:46:41:3b:3d:f4:70:ed:fd:b2:ba:
                    15:62:ae:d2:d1:5c:19:70:88:6b:34:5f:32:17:3d:
                    07:bb:27:46:ae:1f:ee:d5:f5:92:93:ef:17:9b:b8:
                    14:ce:11:3f:4e:e9:9c:10:c7:6e:ae:31:97:f1:3a:
                    42:5f:80:eb:a4:c3:ab:79:9d:bd:9c:5a:02:c0:25:
                    b6:7e:32:5f:fa:6a:0b:30:95:39:b5:0d:49:48:6f:
                    23:00:d8:a9:62:5a:41:ec:28:90:39:67:12:11:3a:
                    c9:97:30:1b:49:69:0a:de:33:5b:cc:40:f8:42:e1:
                    96:9c:fc:9e:85:08:14:0c:e7:39:5d:c6:c3:02:63:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:45:AC:14:5D:34:01:1D:9B:72:65:96:A9:70:2E:21:F1:58:FA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9cae7e13-73ce-3d48-a3e2-d31f169260bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.84.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:cb:66:37:78:9d:c2:1f:1d:e0:d0:f6:a4:c0:cb:06:b0:
         c8:00:43:82:f4:3e:64:5b:55:d1:a5:c3:7a:48:a3:c8:53:3c:
         d8:12:7b:fd:3f:b1:81:05:c8:a5:7a:48:dd:52:16:3e:a2:23:
         b9:15:11:9e:b9:e2:09:17:c4:12:cb:2e:7d:f4:95:52:33:73:
         2f:f7:b4:51:f5:ae:b5:c6:fb:c5:9f:a1:00:87:12:53:a7:76:
         33:78:e5:48:7b:87:27:05:3c:dd:32:25:d0:43:cc:bf:e3:cf:
         fe:37:bc:d6:4c:9d:10:16:5b:2a:0e:23:48:3d:43:53:9b:08:
         73:e8:1e:2f:6f:6b:d9:f0:42:e7:3c:af:cf:e8:07:b9:8a:99:
         4e:a9:a5:b2:b3:c0:ba:f0:6b:3c:6e:b5:a5:bb:10:f3:e7:a0:
         fe:a9:54:bc:48:7b:a6:ea:f8:3b:89:58:bd:7d:74:c4:9b:87:
         cf:1a:ae:bf:28:b4:55:b8:c5:70:df:1f:d3:09:19:5b:3c:4d:
         fc:0c:69:29:ff:50:6a:72:26:c1:2e:87:97:08:fe:8f:e8:bd:
         87:a5:59:55:23:7a:64:0a:fc:01:42:e4:c7:03:14:cc:a3:81:
         4b:37:20:b8:04:18:01:dd:af:3d:a1:46:70:7f:40:45:6b:9a:
         0e:6f:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:49:55 2026 by rpki-client