Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1760555-67ed-3786-bc02-6b0ea0913b9a.roa
File:                     b1760555-67ed-3786-bc02-6b0ea0913b9a.roa (raw, json)
Hash identifier:          L6s8rV2qMTM3aiW5UGNPDqBroEM2hAYW6alJVENWPlU=
Subject key identifier:   5D:F2:83:5A:3E:51:6B:FF:60:4F:17:2B:C5:91:37:3B:DF:E0:B9:EE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584FA462D0EC197679643A784380
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1760555-67ed-3786-bc02-6b0ea0913b9a.roa
Signing time:             Tue 27 Oct 2026 14:47:07 +0000
ROA not before:           Tue 27 Oct 2026 14:47:07 +0000
ROA not after:            Mon 25 Jan 2027 15:47:07 +0000
asID:                     275777
IP address blocks:        38.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:62:d0:ec:19:76:79:64:3a:78:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 27 14:47:07 2026 GMT
            Not After : Jan 25 15:47:07 2027 GMT
        Subject: CN=29885a46-4211-4c06-8f7a-6a818181a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:dc:1d:00:ed:05:3a:c8:04:0c:e8:8e:1e:
                    3c:c0:79:bd:de:9b:66:01:29:65:57:02:7e:a0:e1:
                    37:39:ba:5b:6e:ba:08:88:3d:9d:84:92:c0:6f:bd:
                    49:d6:46:c5:c9:4e:58:0f:91:eb:ef:c2:df:1b:85:
                    0a:b5:a5:1e:a5:30:e1:0f:7d:a9:c7:ea:eb:70:a7:
                    ab:8c:0e:dd:f2:a6:df:17:3e:0c:26:3a:58:44:16:
                    49:23:d4:fd:91:c7:53:f3:03:e2:5f:18:d9:20:2d:
                    da:ba:a7:0b:4f:78:6e:1a:2b:a2:43:28:fe:ad:1d:
                    41:11:1f:01:f0:5e:1f:45:90:00:dd:21:6e:c9:2c:
                    c0:ff:d2:22:0d:0d:ff:2b:2c:75:91:b3:23:ef:84:
                    84:45:f3:ed:d9:ca:06:c4:6e:ba:57:61:12:be:ae:
                    e2:77:15:5b:29:72:2c:af:93:47:38:2f:82:57:cf:
                    66:c9:a5:ae:af:ef:a9:e4:76:03:82:5f:a4:78:8a:
                    5d:49:96:4a:7d:64:d0:3d:e3:5a:52:9b:55:dc:8f:
                    d4:4c:4a:c9:23:62:f8:c7:c5:31:e1:34:b8:78:70:
                    24:05:5d:6f:f9:16:a5:15:88:f2:54:c1:b3:e9:c4:
                    1e:8f:35:da:98:a0:a7:e2:08:55:84:20:09:ab:c9:
                    bc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:83:5A:3E:51:6B:FF:60:4F:17:2B:C5:91:37:3B:DF:E0:B9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b1760555-67ed-3786-bc02-6b0ea0913b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.252.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:75:2d:09:ab:fe:ff:d1:49:78:81:a7:d1:8b:2f:4a:c3:48:
         85:eb:ca:fd:8f:b7:b9:af:56:3a:bf:6d:8b:76:90:52:cd:b1:
         6d:8b:86:48:23:e6:32:86:48:4b:a5:bf:16:fa:34:5a:1c:df:
         66:08:87:0b:32:34:45:43:4f:fe:91:8e:8d:c4:9e:50:2c:5b:
         e0:7d:e5:d6:f3:5a:c9:46:7f:d7:70:c7:db:81:c7:1b:2a:5f:
         d1:1d:5b:6f:f9:c7:b1:ae:2f:0c:02:29:5e:f4:0b:79:9d:50:
         81:88:f4:84:5e:26:80:f7:07:14:d2:da:24:11:1d:35:c6:a1:
         9b:d9:b6:a1:47:c1:ab:ff:64:b9:35:12:45:1a:59:34:d5:78:
         dd:f3:7b:f2:4f:08:07:48:41:a5:a3:3b:02:26:6c:e8:90:4c:
         ac:3c:67:93:94:e9:5d:93:45:8c:b3:42:5d:e6:d7:91:53:7c:
         20:8d:41:3a:a6:cb:60:99:29:a2:37:d5:98:38:a4:12:34:5c:
         b8:f0:ee:eb:8b:a7:12:78:14:f9:35:62:4f:bf:0b:b9:50:be:
         69:21:db:f7:75:10:8f:bc:98:cf:db:ed:02:77:9b:17:3c:f1:
         1b:65:1d:5c:a0:b1:fd:02:08:ef:6e:cd:60:90:d2:96:d0:46:
         83:47:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:04 2026 by rpki-client