Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6b48d83-6bea-34ff-8572-ab687ea1c2db.roa
File:                     b6b48d83-6bea-34ff-8572-ab687ea1c2db.roa (raw, json)
Hash identifier:          mmESSnbwD5/4oCdW/ymu1Eu9eAEtmcXDwfKtjheQnq4=
Subject key identifier:   37:1A:13:86:0C:8B:F9:F3:7C:A2:27:A5:2B:C5:3A:78:5D:BE:02:57
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DA59CE08F8AF3FCE11C2E0A60
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6b48d83-6bea-34ff-8572-ab687ea1c2db.roa
Signing time:             Mon 27 Apr 2026 15:46:02 +0000
ROA not before:           Mon 27 Apr 2026 15:46:02 +0000
ROA not after:            Sun 26 Jul 2026 15:46:02 +0000
asID:                     272962
IP address blocks:        38.7.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:9c:e0:8f:8a:f3:fc:e1:1c:2e:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 27 15:46:02 2026 GMT
            Not After : Jul 26 15:46:02 2026 GMT
        Subject: CN=a5828cf3-08d4-4db6-a620-012bc995a2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:69:9f:5f:21:13:90:f7:4f:a3:39:b7:16:
                    53:f9:6e:a7:f6:f6:ed:02:72:5e:a7:86:83:0d:ac:
                    82:83:9a:5d:de:99:70:da:ea:7b:9f:77:34:90:4d:
                    68:f0:ad:c8:34:f4:c8:65:02:57:9a:01:8b:89:a8:
                    cb:6a:13:70:8f:56:95:32:ee:f7:11:df:f1:4b:57:
                    ca:ef:0b:f8:4b:11:73:99:b9:96:b3:b2:aa:5e:05:
                    8b:0b:ab:b3:c4:2e:31:12:bc:e6:c6:66:c3:d0:13:
                    d0:0a:fe:df:ea:bb:4b:c4:79:18:76:46:06:37:8d:
                    bb:d8:4f:f5:4b:02:d6:7a:f1:51:68:4a:e5:d6:84:
                    16:aa:33:b3:ef:66:32:bf:52:dc:d7:2d:b8:ad:00:
                    0c:e2:f6:1c:d0:2e:d6:ca:ee:ef:42:4e:1a:1d:04:
                    2c:5d:42:cf:8d:78:26:b9:2e:0a:6d:90:48:d6:69:
                    a5:07:6c:95:9b:6f:9f:15:9f:e0:b7:22:5e:f4:e6:
                    82:fb:c1:e9:22:c7:e2:5b:1d:5a:f8:9c:e7:a5:94:
                    00:03:c6:68:d3:17:62:a4:7c:d8:1b:b5:5a:2b:86:
                    f4:da:22:b2:16:2e:5e:cb:49:50:0b:d2:63:2e:df:
                    d4:58:dd:d3:97:7a:c1:e6:c8:9d:76:14:9b:35:dc:
                    e9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1A:13:86:0C:8B:F9:F3:7C:A2:27:A5:2B:C5:3A:78:5D:BE:02:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b6b48d83-6bea-34ff-8572-ab687ea1c2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.7.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:90:3a:9b:a4:3d:ae:94:f9:c3:74:81:17:40:74:31:67:e1:
         cc:be:7d:16:5b:24:a4:f3:1b:34:8e:d3:54:eb:cf:d4:8b:05:
         3e:dc:04:6e:f6:8e:39:90:1f:f1:09:ac:5d:4b:78:2e:80:d4:
         04:28:7a:f6:ab:73:eb:32:ab:0a:cc:97:f7:41:1b:62:f8:c8:
         9e:80:fe:99:fa:b4:bc:55:3c:27:9c:7e:ef:1d:61:1f:47:5b:
         f2:4c:4b:1e:4f:b6:a1:b8:4f:a1:22:92:08:ae:16:bb:d6:df:
         49:6b:59:1d:8a:48:10:7c:c5:fc:c2:77:f1:66:76:e7:9e:78:
         63:f7:48:3c:32:2f:54:8a:11:27:65:6a:52:e6:7b:88:c3:78:
         47:3c:90:b0:fd:b3:59:c1:8f:72:ac:0b:44:a5:a3:ca:2d:39:
         17:7b:d2:b2:63:bf:b3:e8:aa:68:62:d0:f4:44:d0:93:22:1b:
         09:8e:0f:54:3c:f4:3e:a9:6c:7a:e0:d6:66:fb:3d:cf:7a:62:
         e5:40:22:1a:b5:8b:46:98:0a:1d:6e:f3:3b:86:87:4d:6c:88:
         b7:fb:02:46:77:3b:46:b3:9d:95:1c:cc:52:62:83:dd:6d:c1:
         b2:f5:82:32:79:e1:9e:ab:7d:c3:ea:70:ce:57:bd:e4:5b:b7:
         6f:8f:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 18:37:38 2026 by rpki-client