Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa
File:                     aab797dc-3741-3b15-b247-f08dc14083e5.roa (raw, json)
Hash identifier:          p7g1aogRDOzLiQZRMzOTtA3V5WalB22a9uZrNoHd6Js=
Subject key identifier:   37:F5:EE:7F:20:B5:68:FB:9B:2E:BB:BF:24:6F:AB:76:15:4C:93:DF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EB84739B237C172D9A31E3F00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     8796
IP address blocks:        38.47.192.0/18 maxlen: 24
                          38.181.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:39:b2:37:c1:72:d9:a3:1e:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=7d9a93c5-f604-437e-9b3d-9d723deed162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:6d:51:b2:9e:37:ac:f8:11:83:7b:32:7c:
                    4e:8e:a5:c1:1c:3a:63:5b:f4:bb:b7:e8:2a:7c:c4:
                    ae:66:b2:51:fd:03:cb:4d:eb:6c:cf:45:dd:7d:8b:
                    a4:46:1d:7f:bf:00:33:a6:6d:ad:1a:63:bc:1b:eb:
                    39:e0:79:9f:52:6a:73:ea:68:59:21:65:a6:ee:03:
                    28:61:ff:2c:3b:6f:00:20:f3:04:54:d7:54:04:06:
                    71:04:97:15:e6:b9:36:05:ab:6a:a5:c5:e7:f8:57:
                    45:8b:de:b4:b2:c7:f1:05:5f:fa:f4:81:38:7d:f7:
                    0a:53:da:c3:6a:cb:b3:35:1b:36:e0:e9:87:dc:7f:
                    cb:46:f0:03:e5:09:2f:f7:5b:0f:96:19:62:40:ad:
                    64:f9:33:f4:d4:61:91:cf:30:b2:9f:dd:c4:6b:3f:
                    41:d5:7f:09:36:4a:90:48:c2:10:0b:cc:ee:b1:e1:
                    52:b4:b5:8a:be:5c:9c:f2:a6:50:aa:dc:24:cd:88:
                    02:fc:40:17:b7:0d:fc:88:95:00:11:3c:9d:44:62:
                    34:2a:b1:18:a2:47:d5:68:8d:08:b4:eb:b6:36:37:
                    17:fb:63:fb:2c:0a:6c:97:88:2e:be:22:b1:50:cc:
                    ee:d9:ec:96:d5:64:12:1f:e0:2d:9d:b5:cc:b1:f7:
                    a1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:EE:7F:20:B5:68:FB:9B:2E:BB:BF:24:6F:AB:76:15:4C:93:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/aab797dc-3741-3b15-b247-f08dc14083e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.47.192.0/18
                  38.181.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:36:37:55:be:9f:2e:0f:f1:08:7d:8b:66:16:27:12:e1:
         b6:84:58:ce:65:a5:33:33:c7:de:d5:a3:ed:66:19:a5:93:01:
         53:0e:8d:d7:ed:9c:d8:80:90:12:2c:e1:b8:69:cc:68:77:39:
         8a:4a:2b:72:a8:22:64:41:ad:89:05:ef:5d:0e:2a:06:2c:bf:
         ba:33:d5:90:20:c2:00:81:60:bb:3f:45:c3:73:3b:90:5e:d2:
         e3:1f:3e:19:1c:c8:5e:87:10:5a:76:9d:1e:a2:41:32:ee:c4:
         1d:92:96:e6:0c:17:f9:dc:c2:34:83:d7:3f:28:43:18:de:1a:
         97:e0:ed:e8:46:0d:42:a9:9a:a4:12:14:eb:8c:e8:a7:f0:71:
         4b:b0:73:6a:19:c3:28:7c:81:3a:2c:bf:3b:f7:c1:ba:4f:8e:
         b1:aa:ea:0c:ef:a1:ee:43:73:5c:52:bd:13:6c:96:b2:1d:63:
         7b:b3:dc:48:e9:62:77:a1:32:79:bc:8d:1f:58:5f:06:e7:bd:
         ae:cb:da:70:5f:ee:d2:d2:30:57:59:74:6c:f7:64:7b:a7:4d:
         76:44:43:58:32:1f:7d:36:73:39:6b:4b:d3:21:5c:a4:9d:01:
         ed:81:7c:6d:0f:bc:04:6c:0f:c3:61:73:6e:d7:5e:f8:56:d5:
         45:92:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:16:40 2026 by rpki-client