Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
File:                     b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa (raw, json)
Hash identifier:          EBgCV3ryTJz+dLbtIN7X1FPRUdqLkkQbCH8XPBP7CnE=
Subject key identifier:   77:AD:1C:23:E7:BC:5D:FB:8A:80:2B:4F:76:B8:9E:CA:45:E5:87:96
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584ED861D689AF45C12E6347C3E0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     6461
IP address blocks:        38.107.152.0/22 maxlen: 24
                          38.148.144.0/20 maxlen: 24
                          38.240.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d6:89:af:45:c1:2e:63:47:c3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=88660db1-82e4-41c9-aa59-a4a4c9c0dada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:4e:b7:52:4c:91:44:60:cb:9d:cb:2b:2c:
                    1e:7f:12:26:c4:dc:a2:a9:89:42:58:b5:6c:63:18:
                    05:75:50:7e:5c:92:0f:97:97:0e:43:64:5e:33:85:
                    43:1e:7f:4b:18:71:b9:6e:3d:c9:1e:cc:5c:7a:0e:
                    2a:e2:b6:bc:63:b0:fc:05:4c:02:16:d7:ba:74:04:
                    1d:27:aa:c9:e0:35:09:e7:cc:56:1b:e5:a2:18:c6:
                    57:f2:51:b7:6e:fe:20:f0:82:28:91:c6:b9:02:d4:
                    4a:fe:5e:57:59:42:3e:2b:b5:28:ea:2d:88:4d:ae:
                    19:63:73:e1:7d:44:8e:b7:b1:b5:90:0a:b3:c8:26:
                    b3:d3:34:46:b6:d5:c4:de:a9:3b:ea:21:bc:d3:c2:
                    9d:23:75:02:0b:61:df:2d:f7:a9:87:f3:a7:97:81:
                    c8:c5:ae:3a:ec:39:64:04:35:6b:a6:b7:ef:22:ce:
                    f7:c7:79:c2:18:ea:18:7b:ea:49:75:6d:dd:41:fc:
                    29:05:72:f8:f9:4d:e7:61:49:10:b7:6c:17:53:cb:
                    13:05:5f:4d:e7:a6:f5:eb:87:52:8b:79:5c:ef:d7:
                    1c:a5:1a:d2:25:4e:a5:a6:cd:09:a7:56:c2:89:8b:
                    74:b0:23:ba:99:af:f3:8d:36:04:3f:24:c0:e5:b3:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:1C:23:E7:BC:5D:FB:8A:80:2B:4F:76:B8:9E:CA:45:E5:87:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.107.152.0/22
                  38.148.144.0/20
                  38.240.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:3e:c8:76:c2:b8:c2:ca:89:51:81:30:4d:f9:ae:9f:3c:
         ab:31:ca:30:3c:e7:9b:75:8b:05:d2:81:4a:34:ff:6a:10:01:
         e5:b7:69:e6:60:1c:9e:dd:1c:22:5d:5d:04:7b:27:90:5b:3c:
         78:08:a4:f2:04:60:e3:50:be:75:92:9c:43:38:2f:f0:94:ed:
         6c:ad:94:bc:28:7d:fc:0b:79:87:4e:db:8a:43:d0:43:f5:cc:
         58:d4:dd:99:b0:fc:7e:d0:37:03:12:a1:06:a7:4e:86:0a:a3:
         60:9d:69:37:88:f2:a8:67:3a:37:8e:af:6c:49:dc:db:26:f5:
         53:cb:40:e5:c0:59:db:e4:2f:55:f9:e4:7e:cc:80:3d:df:0b:
         38:14:82:f4:d6:17:bc:71:90:4a:42:ce:93:2c:0a:93:7a:e4:
         89:09:38:1a:d1:bd:26:2a:13:e1:78:76:89:f2:d1:f1:21:0d:
         18:6f:81:a0:c5:fa:1b:91:a0:8e:e6:b0:7f:aa:dd:09:c1:65:
         cd:91:00:0e:f2:ab:b9:d9:39:55:47:4d:86:6b:dd:af:d0:50:
         81:0b:79:7e:39:1b:e1:a4:45:cf:e5:08:dd:76:60:00:3d:a9:
         26:7d:f7:14:df:61:91:3b:65:41:27:be:55:51:c9:a3:45:36:
         3e:ff:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:20 2026 by rpki-client