Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa
File:                     a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa (raw, json)
Hash identifier:          FGg8v4R76CaQMgBoUN9hoWStMzLOexZSo571i0pfvlw=
Subject key identifier:   69:46:98:DB:D6:BF:36:7F:FA:BC:E0:09:10:5C:A1:9A:D8:55:09:DF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E1B42471BEC4BB1B1BDE8D180
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa
Signing time:             Mon 08 Jun 2026 19:08:53 +0000
ROA not before:           Mon 08 Jun 2026 19:08:53 +0000
ROA not after:            Sun 06 Sep 2026 19:08:53 +0000
asID:                     272815
IP address blocks:        38.199.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:42:47:1b:ec:4b:b1:b1:bd:e8:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun  8 19:08:53 2026 GMT
            Not After : Sep  6 19:08:53 2026 GMT
        Subject: CN=298cb912-e0af-405f-a6ab-b67b512d6cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9a:f0:d3:44:03:34:08:dc:c2:b0:82:e0:0b:
                    5d:d3:16:85:0c:44:5c:98:9c:b6:99:9b:2f:8b:ae:
                    38:98:22:07:83:4f:c8:c0:ec:c8:09:1b:db:18:99:
                    fb:e8:3b:2b:10:a1:23:75:2d:6f:3d:7c:db:36:70:
                    32:6b:22:a8:07:ee:76:3a:c3:a1:9b:6c:69:41:d2:
                    e9:de:ff:de:27:9b:53:8a:38:4c:43:c3:4f:6a:b5:
                    b2:23:82:7c:10:db:42:82:fa:fe:db:f2:f5:85:68:
                    dc:90:e5:55:1c:fd:ea:07:b2:c3:ee:b0:39:c2:8f:
                    91:d8:62:8f:a0:d1:a9:1b:67:d8:18:69:db:55:51:
                    48:d7:65:a6:e7:00:47:e5:62:d5:4f:12:47:d3:7d:
                    c0:73:a4:57:0a:b7:b4:4d:48:dc:88:62:92:20:3c:
                    b8:4b:91:75:82:d2:c0:50:4a:76:11:cb:d7:ed:19:
                    a4:90:c2:47:56:b5:ec:88:dc:d4:cd:5a:d3:ff:d1:
                    52:ea:de:03:a4:e5:63:6d:e5:70:f4:45:d5:87:51:
                    f2:f3:d7:99:86:0c:2c:86:7d:8c:65:3b:5c:29:d2:
                    7d:f5:6f:39:b8:52:c2:a7:25:4e:9f:ee:e9:40:6b:
                    9b:71:af:ba:db:5d:1f:72:15:6b:e0:75:e2:9b:73:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:98:DB:D6:BF:36:7F:FA:BC:E0:09:10:5C:A1:9A:D8:55:09:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a91e42be-2cdb-3e5a-b872-59cd5161c0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.199.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:72:e2:10:57:36:b3:56:9b:90:be:26:a1:d1:ed:65:b9:d3:
         f8:b7:12:29:a9:58:33:7b:18:06:fe:d4:ee:78:bb:aa:9a:c9:
         8c:d8:15:40:c3:89:28:9d:08:00:63:bf:9a:10:36:57:d7:99:
         ef:1a:00:4e:14:7e:fe:40:54:58:4f:cf:fb:00:05:53:3c:a0:
         a3:4d:3b:ca:2a:96:6c:b9:eb:6c:87:51:ec:1e:47:bf:56:45:
         8e:f5:f9:35:81:f6:11:64:f3:bf:07:e8:30:35:c1:a1:92:b0:
         f2:1d:c2:20:20:f1:93:dc:44:99:66:06:ee:52:88:cc:2b:9e:
         8d:cd:d8:00:ee:56:11:8d:de:95:7c:fb:5b:6a:08:70:15:1c:
         79:fe:30:bd:c8:2e:b9:79:56:67:83:fe:5a:4f:54:ba:73:36:
         a8:4a:da:f8:cd:fa:5a:65:a2:fe:fd:db:09:ef:4c:ac:94:96:
         de:c7:29:22:59:9d:30:6d:c8:1f:df:e4:9b:b1:c4:a1:2a:d2:
         dc:25:83:dc:ea:30:42:f2:be:9d:25:f3:56:95:ef:60:8d:56:
         3d:13:d7:31:18:b9:89:d1:57:e9:ec:8d:14:e0:09:06:1c:da:
         86:3d:25:86:74:79:81:0e:5d:6c:fe:83:a4:b1:35:d7:9e:71:
         62:13:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 23:35:38 2026 by rpki-client