Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa
File:                     b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa (raw, json)
Hash identifier:          CSUVkbCjX8KONxf2RS2lgMuy2aTOiK/pTGrMKFfgEFY=
Subject key identifier:   C8:61:FC:B8:07:02:7B:90:FA:C4:C6:65:29:98:28:63:58:8B:A4:EF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E0435D9EE0B755A5E8AD43680
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     35699
IP address blocks:        38.254.126.0/24 maxlen: 24
                          154.44.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:d9:ee:0b:75:5a:5e:8a:d4:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ed886d23-5199-4a57-91c4-41abed777b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:5a:5e:d4:12:57:cc:fa:cd:a0:af:bf:53:
                    5e:44:23:27:da:41:3e:82:e6:e2:1d:0b:47:ec:4e:
                    b7:78:a0:6a:6f:63:b3:4f:8d:76:12:5d:e0:a1:2b:
                    a3:4e:8a:c3:76:a1:3e:e2:c7:a2:82:d8:8d:be:8c:
                    1d:62:9c:ef:78:36:20:6c:f5:7b:ae:51:68:00:de:
                    bb:fb:78:90:04:ac:7b:aa:bf:ba:01:ad:02:29:1d:
                    3e:f1:26:2b:f7:c2:34:15:f4:8a:8b:f4:ec:8e:10:
                    1e:f7:24:0d:7d:95:c2:49:5a:be:51:26:6e:48:68:
                    a0:e2:66:9f:76:07:cc:77:75:4a:6e:33:6e:19:89:
                    f2:6f:ce:f6:42:32:f0:06:52:68:ce:a4:8f:cd:f7:
                    5f:96:e9:ad:70:22:cf:49:e8:92:61:ef:16:c7:9c:
                    a6:77:85:26:d9:fe:58:e2:29:91:60:c7:91:6c:93:
                    99:26:a3:35:72:3a:46:64:c3:6e:81:76:a3:4e:d3:
                    d5:49:51:cd:15:00:a2:a5:8d:11:4c:8d:3f:85:7b:
                    0c:ae:6b:aa:92:98:86:f7:54:14:ff:46:74:91:d8:
                    56:ac:1e:0f:2d:70:6e:81:35:85:a0:2f:2a:34:65:
                    01:5f:f1:b8:c1:de:1c:b8:00:41:a2:3f:b5:d7:1e:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:FC:B8:07:02:7B:90:FA:C4:C6:65:29:98:28:63:58:8B:A4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b19d2d10-6598-319f-bcb9-b4fe8a54d509.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.254.126.0/24
                  154.44.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:60:b9:a7:04:36:a0:f8:84:8f:1e:ea:9f:99:35:d0:7f:
         11:65:d8:4f:2b:fb:69:9c:de:c9:69:49:4c:63:7c:7a:26:a1:
         fe:f8:84:16:3d:46:8f:af:06:56:68:c6:4e:b7:42:82:45:07:
         cd:e1:76:fb:9f:b7:e6:51:68:1c:0f:9c:66:07:eb:9f:a8:93:
         b0:73:df:d4:43:44:f6:a5:ef:a0:bb:5e:29:be:53:72:88:05:
         1d:72:5c:c3:93:32:7f:32:c8:9e:cd:94:69:75:ba:a9:64:5d:
         78:e5:f4:84:6f:92:b4:c1:62:d0:c0:32:6a:bf:3b:3b:65:68:
         ef:88:18:4a:e8:ed:db:dd:51:36:9d:33:79:ae:09:61:8b:d7:
         43:f3:3b:e7:f2:c9:e3:58:ee:84:11:11:bd:8d:80:d6:2b:d1:
         fe:7b:9d:0b:b6:7b:57:2b:18:05:c6:c3:9e:c6:03:70:f2:01:
         ca:0c:37:6d:01:da:79:f2:0d:19:fb:62:73:dd:2a:ab:db:dc:
         2e:a8:35:22:48:dd:ff:21:ce:0a:25:f5:46:03:71:be:cd:d4:
         58:29:9f:bb:0a:f5:69:0c:c0:06:81:c8:cb:b5:9e:c1:85:33:
         3f:71:1f:6a:72:a6:37:11:72:ce:1e:26:66:07:55:de:98:a7:
         4c:f5:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:23 2026 by rpki-client