Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
File:                     b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa (raw, json)
Hash identifier:          AvI+ZjI/MUDDz5w6l0sT/llT2q2U4+O/oNcpG2LCZkY=
Subject key identifier:   9C:C9:5D:84:76:D7:16:92:5C:B7:50:5F:6B:05:AC:11:00:D2:D2:07
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E35FF0BD3805B19BB2649C5B0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     6461
IP address blocks:        38.107.152.0/22 maxlen: 24
                          38.148.144.0/20 maxlen: 24
                          38.240.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:0b:d3:80:5b:19:bb:26:49:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=a4cf8c68-c568-4fc4-aa0b-e937a44b808a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:35:e4:5b:95:98:7c:24:28:01:41:d9:78:
                    33:ec:94:64:53:a0:3b:93:d9:e0:ba:84:c7:e6:1d:
                    96:e7:78:3a:6d:4b:6b:e2:81:77:1d:ce:37:dc:e0:
                    60:fe:a2:ff:5a:8b:5e:1a:d6:b6:86:97:88:fa:1e:
                    15:42:76:9d:bd:6e:e2:d0:15:c4:58:10:5f:2b:ee:
                    69:cb:ad:61:d2:c7:f9:1a:2f:71:41:6a:34:4f:5d:
                    92:16:80:8c:62:a6:47:79:18:81:01:30:70:da:e5:
                    37:56:d5:50:2d:fb:8b:75:ff:d9:cb:10:ed:4e:6d:
                    1f:d8:0b:bf:df:a6:6b:80:21:a0:b1:22:0d:2f:b2:
                    64:46:7b:9a:c6:73:c2:92:1b:26:22:3b:52:1e:19:
                    31:8b:0e:55:fc:72:bb:b8:21:77:83:75:f8:b5:22:
                    a8:ea:4f:d9:6b:cd:66:6f:a7:00:2b:68:59:af:21:
                    d3:03:52:cb:9f:31:0c:ce:cb:b5:a5:56:5e:ca:8b:
                    34:61:d3:1e:c1:d7:ca:b6:2b:ba:dd:97:e9:0b:54:
                    12:a1:08:b8:b1:33:81:ee:d2:d6:6a:8f:01:3f:17:
                    d4:11:87:2b:e4:ad:c6:23:7d:0c:7f:08:dd:19:1f:
                    0b:c0:2c:37:de:df:91:8d:3f:53:4f:73:be:df:d7:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:5D:84:76:D7:16:92:5C:B7:50:5F:6B:05:AC:11:00:D2:D2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b72e7a5d-9658-3089-abd9-eb4ea1223e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  38.107.152.0/22
                  38.148.144.0/20
                  38.240.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:9a:c3:06:f4:0b:61:4b:b5:c8:0f:d2:e5:88:23:a7:9f:a6:
         29:53:43:86:c5:27:a1:de:f3:08:91:69:d0:32:59:0e:77:4e:
         f4:7d:b2:6c:e9:7f:2c:cc:94:9c:71:c2:2f:3d:87:15:81:c1:
         b0:24:59:65:f8:b9:42:b0:c1:27:5e:98:51:74:d2:6c:0a:2f:
         93:86:cd:03:83:f4:70:0e:55:6c:25:73:79:57:69:16:d3:40:
         07:dd:6c:20:09:53:bc:3e:82:35:7d:2e:a0:00:3c:3a:08:30:
         1d:3b:36:48:b5:6b:fb:a8:2a:d4:88:09:20:0e:08:8f:89:fe:
         63:d8:b4:83:c4:df:7f:dd:89:39:80:88:7e:ba:e6:8c:54:84:
         1d:ba:db:4c:70:39:13:2c:c5:cb:6e:bc:23:da:02:e3:63:71:
         c5:34:72:a4:74:2f:e8:4d:4e:37:f2:50:ee:0b:d5:8a:8e:0e:
         51:bb:3b:0f:d9:c1:72:84:12:61:df:88:44:08:f4:6b:98:d9:
         c6:de:72:a6:02:0d:70:0d:c6:f3:a0:a3:3d:97:37:4a:15:4f:
         f3:6e:0b:a1:82:75:44:0a:6f:68:dd:76:92:d4:0c:0c:78:62:
         0f:65:0d:0d:4e:cf:2d:c1:a7:98:1c:3c:38:62:8f:0f:7c:42:
         a4:55:17:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:08:33 2026 by rpki-client