Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa
File:                     ad539036-4cb7-37a4-a9e1-99fc6935167b.roa (raw, json)
Hash identifier:          IKqD7azKsklaDNK82K4UNx7TVhgN7sXSQ/cjceygKQI=
Subject key identifier:   61:1A:01:13:31:1B:1F:19:2E:3D:09:89:96:58:BD:35:56:F8:49:67
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EC4D7164037E43172448B5580
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     61461
IP address blocks:        38.25.128.0/17 maxlen: 24
                          38.166.0.0/16 maxlen: 24
                          38.171.0.0/16 maxlen: 24
                          206.0.224.0/19 maxlen: 24
                          206.1.128.0/17 maxlen: 24
                          206.62.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:16:40:37:e4:31:72:44:8b:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=5eb0fdf8-7c1e-4c8c-b2ce-47e107104deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:5e:48:3a:ce:32:b9:a3:1c:b0:1b:72:06:
                    82:c5:b5:e0:aa:ab:5c:83:a7:27:5c:51:b8:b8:f3:
                    08:99:e9:c7:1c:c9:97:31:69:c6:18:ee:e8:a8:08:
                    35:7c:ec:6b:e1:bf:e6:54:9d:d3:94:b1:41:f5:9d:
                    bc:ad:4c:08:0a:dc:5d:60:0f:79:b8:bc:17:41:ec:
                    82:7c:fd:bc:65:f1:76:d6:f8:f7:ca:08:a6:6a:32:
                    f1:e9:72:a6:25:19:f2:33:3e:c3:bd:1e:31:7b:1e:
                    7d:98:ac:f4:03:fb:b3:0e:e8:08:58:f4:a0:72:e6:
                    99:68:34:b6:61:f1:cc:08:98:f9:c5:cd:95:d3:c4:
                    8d:c1:b8:ce:04:e3:37:82:2c:f8:15:80:aa:5c:03:
                    b6:bd:fd:e4:60:9f:6a:19:39:c2:1c:e6:95:7f:89:
                    fd:8d:38:02:34:6a:94:29:16:75:fe:2d:65:98:7e:
                    7b:fa:6c:26:7c:08:90:8f:35:1b:59:f8:a9:73:e1:
                    0c:1b:81:4d:54:15:b2:cd:c7:41:73:58:f1:85:97:
                    ac:e5:e6:21:2e:33:44:4f:d3:84:6f:c4:85:5a:28:
                    45:58:4c:88:05:68:7e:03:16:a8:25:17:12:a1:46:
                    7b:07:f7:d8:9a:0c:5b:06:59:4f:b1:47:42:23:2e:
                    75:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1A:01:13:31:1B:1F:19:2E:3D:09:89:96:58:BD:35:56:F8:49:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ad539036-4cb7-37a4-a9e1-99fc6935167b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.25.128.0/17
                  38.166.0.0/16
                  38.171.0.0/16
                  206.0.224.0/19
                  206.1.128.0/17
                  206.62.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:e0:9e:90:c3:ac:a5:c5:40:0f:d3:ee:cf:54:fa:bb:4a:
         06:d4:2d:98:1d:39:15:3f:27:93:8f:0c:8d:79:23:92:2d:7c:
         40:6f:04:24:1a:23:30:d5:0c:56:cd:8b:8c:21:ca:57:49:57:
         53:34:16:46:5a:79:7f:df:d4:a4:fa:9d:5b:76:20:e7:b4:1b:
         37:ab:ed:e5:8c:1c:a6:16:4c:a5:95:12:63:20:18:13:97:86:
         92:c4:fd:2b:fb:0e:d6:c2:06:5f:7a:81:4f:ee:84:9b:dd:c9:
         e6:d5:c6:28:54:08:1b:cb:8c:a7:39:94:e8:8d:95:9c:c9:01:
         e9:f6:e9:8b:87:4f:69:c5:4b:fb:6f:cb:1a:4a:67:42:89:bf:
         d0:df:94:61:0a:c2:6c:8d:99:82:1d:b0:40:5b:78:6a:5b:1c:
         46:d8:2c:61:ad:c6:03:ca:14:fc:af:95:ef:84:1a:95:6d:c6:
         26:7c:53:34:7a:19:f9:52:f3:15:a4:ae:12:d3:f9:de:73:9c:
         dd:e5:64:a8:61:ca:21:ce:57:04:07:ef:40:1a:21:ce:36:86:
         09:a7:b4:f6:54:22:2e:49:60:41:ba:39:bd:2f:ba:a7:0f:f2:
         3e:fa:09:86:f1:db:9c:cf:7d:93:5a:80:7e:b6:13:fd:8c:d7:
         ea:c1:f1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:34:43 2026 by rpki-client