Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcaca67-cc86-3dce-bdee-80aa1221c84c.roa
File:                     9dcaca67-cc86-3dce-bdee-80aa1221c84c.roa (raw, json)
Hash identifier:          yC9IqjVAkc/B8a55DZ/Mujl5qQSQWfGdNpYP96nlI6k=
Subject key identifier:   4A:18:5E:C3:A4:5F:78:49:32:FF:B6:BE:38:D2:D6:47:07:92:49:E6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F00DCCF11CE8CE47EB590E300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcaca67-cc86-3dce-bdee-80aa1221c84c.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     154324
IP address blocks:        38.99.243.0/24 maxlen: 24
                          38.211.116.0/24 maxlen: 24
                          149.12.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cf:11:ce:8c:e4:7e:b5:90:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=3b61672c-433e-4748-a405-0bd3ae21a998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:a9:a9:e0:27:9f:03:da:20:1f:3f:a1:ea:
                    1d:da:75:df:88:e4:11:3b:20:b0:bf:01:ae:7d:f1:
                    1b:2f:60:7c:50:57:d9:51:4a:4e:a1:62:4e:53:83:
                    a8:c8:3d:c3:2e:cf:65:c2:e1:2c:86:aa:99:89:af:
                    9e:f5:22:dd:1d:63:bd:b7:d3:7b:2e:15:56:49:3b:
                    be:da:e7:08:d0:59:7d:69:84:c7:5e:fb:e3:32:0a:
                    1a:40:42:75:78:da:3e:dc:43:fa:67:f0:d7:80:35:
                    09:68:a6:32:ae:f1:e5:62:91:3d:76:aa:78:d7:31:
                    e3:23:ef:42:3a:f1:5c:7c:32:a5:9a:ce:39:dd:ff:
                    c2:49:18:86:84:c1:c9:d2:41:6e:fc:83:af:cb:c4:
                    bc:e3:33:06:73:99:a7:2e:bd:34:27:75:35:9c:03:
                    50:df:c1:1c:99:c5:6a:6b:e0:b1:75:8b:2c:95:36:
                    22:ec:ec:ce:0b:10:cb:fd:be:20:8f:0f:05:0e:ac:
                    8c:c0:77:3b:1d:8d:4c:b5:3f:08:a0:e8:61:2c:c8:
                    40:eb:14:46:6d:4e:fd:67:c8:c6:be:9a:ff:ae:9a:
                    f4:79:d0:03:ba:5e:c2:ce:3e:14:07:cf:ab:57:60:
                    4e:1d:4d:87:23:86:14:12:93:cc:70:a8:12:6d:61:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:5E:C3:A4:5F:78:49:32:FF:B6:BE:38:D2:D6:47:07:92:49:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9dcaca67-cc86-3dce-bdee-80aa1221c84c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.99.243.0/24
                  38.211.116.0/24
                  149.12.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:93:e2:1a:0b:4d:a9:13:12:66:e7:a7:b7:16:e6:86:98:
         cd:e4:c5:69:ed:1c:f7:89:66:f2:c3:17:fa:2f:d6:2e:f1:83:
         c9:01:56:51:ac:5c:19:98:e7:7d:27:65:cf:4b:d0:4b:47:77:
         88:9f:68:c5:f0:74:45:b1:7e:5a:d0:44:23:20:5d:78:f2:c8:
         47:a8:01:7b:de:ad:29:32:08:b9:34:1c:e1:fd:fa:71:96:64:
         f7:9c:d4:f7:b8:11:13:5a:44:f4:13:67:09:35:f4:02:24:6b:
         00:bd:89:17:fe:47:15:81:33:3d:8b:61:68:a1:f3:e7:18:5a:
         50:3c:29:6f:57:55:06:53:a2:20:6d:d7:28:f5:60:0c:6e:de:
         72:82:86:01:f6:7e:51:55:82:9b:48:7f:f4:26:b2:5c:a6:fe:
         2f:ad:ff:46:da:e3:61:d4:3f:e1:fb:7f:da:3f:c8:0d:50:c9:
         a8:1d:49:ee:b3:70:18:1c:ee:62:97:0d:24:a8:ed:45:c7:c6:
         b8:b1:01:00:32:de:e7:cb:ea:6a:fa:c2:7c:6e:90:28:57:5d:
         1b:4d:a6:d1:5f:d8:9e:82:b3:76:95:40:c5:8e:a1:c6:1d:92:
         89:6b:82:d4:75:ed:c1:27:db:f8:ae:e2:62:b8:c4:66:b8:e0:
         13:93:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:40 2026 by rpki-client