Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7e90d68-aa22-393b-9d77-dc8a7af6c1e5.roa
File:                     a7e90d68-aa22-393b-9d77-dc8a7af6c1e5.roa (raw, json)
Hash identifier:          o6UnWO7yY860znfr/EPyn2eTqEbEQKiDo3nFVMr8QRA=
Subject key identifier:   C7:08:C5:54:64:74:1B:A3:8E:F2:B2:12:3D:03:0D:FD:94:CD:F6:A0
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F8F3DF0EC5FF7E2A61EA886F0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7e90d68-aa22-393b-9d77-dc8a7af6c1e5.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     273251
IP address blocks:        38.183.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:f0:ec:5f:f7:e2:a6:1e:a8:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=bc163034-e728-44e2-8c56-bdf9bd7baa33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:0e:f3:6e:f5:fa:53:f1:a7:e8:06:72:53:
                    b9:88:d7:12:3a:56:d7:e4:f5:27:ad:80:4c:53:fc:
                    5f:25:90:a4:d6:b6:1a:aa:01:f5:f4:62:3f:4e:44:
                    fa:1e:f9:87:10:06:4e:bc:24:02:84:98:ae:2b:47:
                    64:95:c5:e1:fc:66:75:ad:ba:a7:3e:a1:26:42:d2:
                    5a:9b:f5:27:95:c2:57:77:02:91:75:cf:35:36:41:
                    1a:8c:66:8a:20:00:8f:90:cd:b6:b1:ef:2d:a6:e7:
                    13:e8:3f:a5:6e:a7:2d:be:81:c2:45:62:c8:e3:b7:
                    af:c3:76:3c:3f:1e:06:5a:33:26:c8:df:08:68:b1:
                    90:04:f9:8c:38:62:18:42:f6:31:ce:02:e9:8e:1f:
                    ce:0c:d1:e8:31:ff:f1:74:58:77:44:1d:5b:79:34:
                    44:54:0a:95:48:68:08:3d:88:e8:67:f0:ec:17:92:
                    54:72:75:3e:c0:e6:5f:6f:e8:0c:ed:5e:94:ed:30:
                    6b:2d:13:dc:3e:c0:fa:de:12:0f:98:95:55:1e:dc:
                    28:0f:78:6b:9b:f7:ca:ef:1c:0b:1f:d7:9e:47:3e:
                    84:50:7c:62:66:40:6d:fa:3c:2d:0e:6e:48:fd:07:
                    7c:85:c1:14:4c:6f:94:ba:ca:e3:72:57:6f:d5:e3:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:08:C5:54:64:74:1B:A3:8E:F2:B2:12:3D:03:0D:FD:94:CD:F6:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a7e90d68-aa22-393b-9d77-dc8a7af6c1e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.183.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:31:7d:ce:d7:1d:77:fe:df:f1:a7:ca:8e:21:49:6d:ed:a1:
         15:5a:1e:0d:4c:7b:f1:40:5a:81:ad:b5:65:9f:7d:7e:8f:3f:
         c0:0d:a6:e0:34:71:02:e8:dc:c4:69:91:c7:16:9a:dd:c9:a6:
         ce:84:a0:d0:e0:50:c6:64:a4:84:4d:1e:51:60:89:e7:9e:b2:
         e1:3f:ad:1d:4c:24:73:dd:f2:6c:11:7b:b7:b1:88:ba:59:16:
         a5:6c:b5:aa:49:99:cc:75:89:5a:13:2d:2f:89:fe:7e:ef:97:
         1c:db:22:9b:e6:66:0d:4a:cc:87:0f:ab:62:4b:b7:3e:bc:fd:
         fd:2f:f9:35:23:33:a5:66:7d:1e:ca:8e:5a:7d:d4:be:c4:b3:
         5f:68:65:fd:12:0f:cb:f0:d3:1a:c4:79:c8:67:62:ec:a8:c2:
         b6:d7:96:ac:02:31:76:cb:99:60:23:b9:93:48:8b:9b:34:87:
         cb:2d:e0:b6:ce:62:fa:03:42:7b:b5:62:d0:cd:ad:38:9c:ea:
         36:f5:ba:78:6b:39:92:d3:d0:b9:59:4e:c7:27:d0:15:a9:25:
         75:a9:72:5b:04:b0:9b:9b:47:59:73:50:44:98:5c:12:a9:6f:
         f1:ee:3e:da:56:f6:90:95:83:91:71:7a:fa:4f:bc:8a:48:59:
         4e:6c:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:27 2026 by rpki-client